Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
File:                     5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json)
Hash identifier:          xLA/xU6n2EkaN50hFvDjG3TkQk03c+YZgr5gNkZnBpY=
Subject key identifier:   27:04:95:E2:1B:2F:F4:57:EE:89:A6:5A:A7:7A:98:7C:44:79:6D:92
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Certificate issuer:       /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial:       019FA9AC45AFDCA2467AB6F26DCB02E58FB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
Manifest number:          0C87
Signing time:             Tue 28 Jul 2026 17:01:07 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:07 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:07 +0000
Files and hashes:         1: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: vsX6iD708QsZKiB5HtlQO7inRaTl2k5SniKhwJ5Nk5s=)
                          2: Mt6QRqdp_WrVkpOaF9FYfafU_u0.roa (hash: JbXZMjWgYdLf0n3lOW4EokZ/+GnyNpMVp+hSo+2kfOU=)
                          3: dAQCpkChDXivo83BdGELDocTtqk.roa (hash: mZTjMOwz5EP4FW7lbGwFeLhUXKrB721JuRQlVI85W/o=)
                          4: mhM6I7wL_0dpX-c9Bjn2cXjwD30.roa (hash: sj8SfZTxRtzV3SDjhpPFegvK0EBP3hd2bfneJn45Gsk=)
                          5: n3vDiE1r5CPV-Kn2A_mpngA-za8.roa (hash: iNr9SnNJNjSupRbLQuu8OWEwivQhXnMqZVhQB/JR6g8=)
                          6: ohbKePXamXXPoWhEA80w3vW0W64.roa (hash: WchU4jIcRGIq8VSZ7wgyxWpSYmpMduybSatF0MFZlUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:45:af:dc:a2:46:7a:b6:f2:6d:cb:02:e5:8f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
        Validity
            Not Before: Jul 28 17:01:07 2026 GMT
            Not After : Jul 29 17:01:07 2026 GMT
        Subject: CN=270495e21b2ff457ee89a65aa77a987c44796d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:0c:b7:59:8d:3d:20:ee:be:bb:2f:7f:d9:
                    73:52:bd:af:6e:43:29:87:42:f7:1f:64:cc:8d:8c:
                    53:fb:25:93:e7:ea:0d:da:f7:93:46:30:57:fd:47:
                    ee:7a:1a:f3:60:f3:f9:17:0b:e0:1e:36:45:2a:29:
                    e1:76:05:41:a8:d3:be:3d:32:39:09:22:ba:1e:df:
                    fe:f2:ea:0d:81:aa:35:10:cc:63:ae:03:18:f8:e3:
                    f5:cf:ba:f6:76:a1:2b:ee:5b:8c:47:11:eb:d2:74:
                    48:2d:d6:4d:73:04:ad:e9:2f:8d:25:41:7e:dc:4d:
                    7d:e1:f3:55:57:29:29:83:12:c6:1d:b1:d7:02:92:
                    7f:af:fc:b4:47:af:81:2c:6b:20:13:32:7a:56:43:
                    09:33:83:d2:7f:5e:7c:12:ad:97:c4:ce:cc:82:28:
                    4e:4f:c6:35:61:df:e0:f9:24:00:61:cb:96:0e:e9:
                    21:3f:15:cb:06:7d:55:14:95:3f:11:97:57:08:f7:
                    73:e8:1a:d9:8d:fa:fa:a1:3f:71:13:3f:df:3b:dd:
                    8b:8a:27:35:d7:d7:e9:e9:a1:fe:2f:ea:76:49:72:
                    b6:ec:91:5b:4c:20:f7:34:db:c5:4b:62:02:59:79:
                    8f:c9:f3:0a:87:96:d8:b4:0d:23:73:70:fd:94:98:
                    4e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:04:95:E2:1B:2F:F4:57:EE:89:A6:5A:A7:7A:98:7C:44:79:6D:92
            X509v3 Authority Key Identifier:
                keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b4:02:30:8b:96:39:fe:32:d9:5a:35:92:cf:8c:f5:c1:8c:
         50:02:6c:15:42:24:b7:c2:1c:72:bc:e6:0d:c1:fd:44:b0:64:
         75:b9:e7:a3:9e:8f:9c:f7:30:57:5d:98:0c:30:5b:38:03:30:
         fa:bd:1f:2b:23:02:2f:30:f2:90:b6:73:96:57:31:44:4d:52:
         78:e7:d5:ed:b0:ae:1a:9e:fa:d3:d8:cb:85:9c:13:5d:56:b6:
         5b:58:07:46:39:23:f9:55:f0:f2:04:e4:9e:61:f7:57:f9:42:
         13:b2:ac:0b:ce:ca:3e:02:9a:27:db:bf:77:28:79:a1:0f:3b:
         be:fe:f1:5e:6a:d1:be:e1:90:ab:3f:c1:68:88:3b:ca:e3:41:
         4d:20:c9:e3:a8:61:4c:f5:5d:5d:28:5b:75:98:33:75:4a:b7:
         f3:c4:e4:6b:12:65:1a:32:47:42:b9:0b:e9:31:36:f5:eb:78:
         4d:c2:52:5f:6d:17:86:53:65:6b:89:cd:95:cf:57:38:8d:e1:
         0a:68:4b:7d:c6:a1:96:99:db:e5:8c:3f:e7:f2:75:b3:06:90:
         4b:73:97:9d:51:e2:d8:17:66:10:3e:75:17:80:e1:4c:e2:e0:
         2b:a3:39:27:11:c8:29:51:0f:b6:13:4e:e3:97:30:53:1b:39:
         88:f1:bd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:47 2026 by rpki-client