Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
File:                     PiWraYX3nKneBumOi52iRdhVmrY.mft (raw, json)
Hash identifier:          7CRavkSggUJs8FfAVltj2/N3sQs03IRjsnhtgfkepJY=
Subject key identifier:   97:55:E6:74:08:56:A8:82:C7:07:E7:7D:C7:BA:54:BF:14:41:B8:89
Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
Certificate issuer:       /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Certificate serial:       019F91DA5B9A03677A290D145706CCCCC829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
Manifest number:          074A
Signing time:             Fri 24 Jul 2026 02:00:34 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:34 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:34 +0000
Files and hashes:         1: 83T4vy6w6s-NbeBOg3NKn516tgI.roa (hash: sjPUQm6Zny+WJ2MxBOvr0gIX9HwjXltWJjMRmGQhU5Q=)
                          2: HXtw_REMuYJU-uoqytyoK089wJo.roa (hash: y0auMTcaijuymINcdrlEwiSn0wKl15siQmyezHbX9Mk=)
                          3: PiWraYX3nKneBumOi52iRdhVmrY.crl (hash: qMoLpUoGhUAXtc07w+rWqsN85JhEqGy9A5dT+RIxQBc=)
                          4: Z07tktorOBcHfE3hsn2N89eRrmM.roa (hash: 7mXHoHwif1lVmpqWPvn8rNFkNTwiLeFAHtrPjsutn9A=)
                          5: v_6hfKyRVIjeJvA7Hn7c_7uLcEI.roa (hash: AjN5pZH9Vkd0aFs/22Tncp1jiELMZjwI4H52yGKSq88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:5b:9a:03:67:7a:29:0d:14:57:06:cc:cc:c8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
        Validity
            Not Before: Jul 24 02:00:34 2026 GMT
            Not After : Jul 25 02:00:34 2026 GMT
        Subject: CN=9755e6740856a882c707e77dc7ba54bf1441b889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:e4:a3:f6:fd:13:ed:57:43:02:e5:cb:1a:
                    6f:d0:7b:f1:17:82:52:c2:ff:50:9d:83:d7:b6:a4:
                    f5:25:12:ad:98:9e:64:cd:b7:81:44:fc:ad:f0:ad:
                    f9:c0:ee:e3:95:f6:89:6d:90:fa:e0:dd:99:55:b5:
                    e5:3b:2f:b4:18:10:df:23:87:82:a5:51:89:8a:bc:
                    ea:4f:48:91:4f:83:33:7c:6c:e0:7f:93:21:e1:6a:
                    2f:5e:ba:4d:4f:cf:3c:db:7b:95:0e:10:b1:eb:ce:
                    db:fa:e2:47:bf:1a:ce:70:3a:24:12:34:a9:94:99:
                    d8:a8:29:06:a0:4a:f7:99:51:d7:9c:3b:41:cc:72:
                    36:a2:7a:1d:46:4c:8c:99:76:7c:8d:6e:47:29:7c:
                    c1:f7:08:92:27:73:4f:95:c7:e4:55:98:94:22:95:
                    86:cc:b2:5d:5a:93:0b:b5:10:22:5c:f7:12:c3:3c:
                    b3:b0:2d:43:5e:56:87:3d:0b:ef:ed:c2:8f:6c:d9:
                    de:34:04:33:87:86:a4:e4:9d:9b:62:cb:af:f0:e6:
                    b2:2a:4d:eb:1c:0c:f5:08:dc:ad:85:9f:70:b6:68:
                    e3:08:47:82:34:5c:fb:3f:e6:e7:87:37:20:0b:73:
                    db:02:85:ce:93:88:72:d8:02:79:bd:13:ef:fb:4c:
                    06:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:55:E6:74:08:56:A8:82:C7:07:E7:7D:C7:BA:54:BF:14:41:B8:89
            X509v3 Authority Key Identifier:
                keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:2e:4c:c8:1f:43:6a:5a:0f:0c:94:76:97:be:ab:c9:4a:a7:
         e1:2a:bb:d0:6d:20:6e:4e:6a:ff:d8:e8:33:54:40:7e:c3:fe:
         a2:78:6f:58:44:ee:34:20:53:13:78:53:e8:03:fc:e6:f2:5b:
         57:23:45:00:69:73:77:4f:82:72:85:16:2b:a6:36:5c:cb:ee:
         54:36:55:ca:6c:de:1a:aa:23:55:f0:7f:69:e7:0b:58:ea:4e:
         85:ad:5f:72:f2:27:44:54:85:3c:a0:69:6d:33:ae:a0:6f:57:
         3b:d5:89:c9:1a:31:24:60:64:b9:ea:22:1e:5e:7e:dd:81:4c:
         a6:ab:96:44:2b:62:fa:37:ec:71:3f:79:d2:e7:bf:75:3f:ba:
         7f:42:1d:ac:3f:44:bd:58:03:6f:47:a9:9c:19:7b:ac:54:6e:
         89:10:dc:b7:62:22:64:a0:48:17:6b:f1:8f:6b:35:37:c7:c4:
         56:05:cb:65:43:e6:f6:d7:b2:b0:75:0f:cd:4d:27:a2:c0:da:
         8a:04:c6:4b:3b:c7:de:a6:af:65:41:6c:b2:b4:42:01:bd:75:
         88:ae:69:60:1b:d5:49:ad:ae:11:55:85:3f:ba:8c:d4:1f:7f:
         37:cf:1f:23:54:d9:b0:5e:a1:a0:05:b1:73:12:c5:e1:e3:11:
         5e:05:3f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:50 2026 by rpki-client