Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
File:                     5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json)
Hash identifier:          5JeuKyq+FfJyMjNMuz05EAgEGe/Ffr/1DBg5QPzlq+8=
Subject key identifier:   44:F2:F7:1B:86:47:A5:0F:77:FC:C2:52:A2:FD:9F:52:C8:80:63:DA
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Certificate issuer:       /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial:       019D9C636FE3B32DCA3F7F1F09F2A9DDED5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
Manifest number:          0B77
Signing time:             Fri 17 Apr 2026 17:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 17:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:55 +0000
Files and hashes:         1: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: NnRSdPJGfDqcERVQZsSiTcM5BFwY3DA2VkGXOKVUg5M=)
                          2: Mt6QRqdp_WrVkpOaF9FYfafU_u0.roa (hash: JbXZMjWgYdLf0n3lOW4EokZ/+GnyNpMVp+hSo+2kfOU=)
                          3: dAQCpkChDXivo83BdGELDocTtqk.roa (hash: mZTjMOwz5EP4FW7lbGwFeLhUXKrB721JuRQlVI85W/o=)
                          4: mhM6I7wL_0dpX-c9Bjn2cXjwD30.roa (hash: sj8SfZTxRtzV3SDjhpPFegvK0EBP3hd2bfneJn45Gsk=)
                          5: n3vDiE1r5CPV-Kn2A_mpngA-za8.roa (hash: iNr9SnNJNjSupRbLQuu8OWEwivQhXnMqZVhQB/JR6g8=)
                          6: ohbKePXamXXPoWhEA80w3vW0W64.roa (hash: WchU4jIcRGIq8VSZ7wgyxWpSYmpMduybSatF0MFZlUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:63:6f:e3:b3:2d:ca:3f:7f:1f:09:f2:a9:dd:ed:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
        Validity
            Not Before: Apr 17 17:00:55 2026 GMT
            Not After : Apr 18 17:00:55 2026 GMT
        Subject: CN=44f2f71b8647a50f77fcc252a2fd9f52c88063da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:03:18:0a:bb:ed:d3:1e:35:97:39:20:8e:de:
                    95:6e:f4:d0:d6:39:94:62:08:eb:38:95:55:01:5f:
                    cf:2e:65:15:d6:a0:95:35:87:38:84:93:0f:e9:bc:
                    db:86:24:70:2e:75:9b:39:21:37:55:1b:88:cc:51:
                    53:b8:69:15:2c:d6:6d:d8:a5:90:a3:6a:18:ec:fa:
                    2e:d1:05:91:c7:76:ae:73:02:d7:04:be:69:11:f6:
                    97:00:2e:88:8c:6d:a7:37:f4:b7:3c:cc:27:a9:79:
                    4f:97:0a:d6:66:98:0a:b0:85:84:5e:e9:63:f1:16:
                    49:88:89:75:3e:ee:66:4e:2d:e8:27:b7:9e:e3:f3:
                    b8:98:d4:b7:31:3c:67:14:28:78:ca:6d:0a:68:43:
                    92:8e:8e:67:e6:6d:1c:2c:0a:dd:1a:36:6d:a3:cc:
                    bb:10:5e:cd:9b:78:70:14:76:b0:39:26:c7:3c:67:
                    00:29:6a:5b:a9:81:f3:32:0d:3a:c8:70:3a:c4:5f:
                    35:8c:67:e8:7b:1c:43:e6:ee:34:34:6b:ee:f6:5f:
                    0c:55:bd:2d:cb:b3:f7:e5:b1:7f:35:2a:9d:2b:9e:
                    ce:62:43:1d:70:36:34:54:4d:c7:5f:d5:03:d7:35:
                    ca:30:79:77:e9:17:c8:d8:8a:3c:f9:c3:ad:81:91:
                    74:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F2:F7:1B:86:47:A5:0F:77:FC:C2:52:A2:FD:9F:52:C8:80:63:DA
            X509v3 Authority Key Identifier:
                keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:7f:bf:0d:ca:c6:a9:19:76:f2:7b:ab:70:b5:32:26:a4:e2:
         70:6e:70:26:54:14:ac:6e:f6:20:1d:0a:6f:cc:de:d9:16:47:
         82:da:aa:19:e7:84:98:05:18:34:c9:c1:ad:c3:c6:ff:70:2d:
         7c:52:4f:6d:c8:1f:2b:4d:a5:37:55:5c:11:5a:74:7d:b6:6e:
         4b:8b:ee:bf:d2:d7:fc:d5:31:38:7e:e1:2c:ac:d3:74:6e:47:
         53:20:8a:c0:57:9a:12:44:28:0f:1c:50:7c:4f:8a:02:3c:41:
         a7:ec:cf:16:62:79:9b:e2:b7:c5:36:38:a1:6e:61:86:a4:b6:
         fc:7f:c3:08:85:41:c8:c3:4f:35:5a:98:ab:f4:fd:ee:cf:62:
         c5:30:8c:52:21:c8:1f:c7:76:89:e8:55:da:f7:ca:35:53:1a:
         21:cb:36:83:3a:23:ee:5b:46:a4:d1:35:ca:a6:12:be:8e:b5:
         84:5b:78:0e:f2:41:7b:f6:bb:7f:92:9b:fe:b3:4a:ed:ef:96:
         bc:65:9d:3f:7f:b8:ab:32:a2:55:2f:76:56:8e:c4:09:78:c5:
         dd:f4:a2:9b:37:a7:fa:dd:7f:39:d1:7d:46:50:0a:73:0a:47:
         3b:2c:3a:10:0a:c4:c8:4c:19:c6:cf:e9:af:c7:cb:9f:69:ab:
         eb:e2:7e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:54 2026 by rpki-client