Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
File:                     5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json)
Hash identifier:          La1ET2D6MOwX9XvO7kEMdIJrY4Qzx7Bv4ZMHFZiF8To=
Subject key identifier:   CD:2F:32:D3:0B:55:63:8C:A8:F8:FE:F3:4A:58:74:CA:4A:72:D7:9C
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Certificate issuer:       /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial:       019F927FB10727B4F8F437A0C6AAF1E531EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
Manifest number:          0C7B
Signing time:             Fri 24 Jul 2026 05:01:09 +0000
Manifest this update:     Fri 24 Jul 2026 05:01:09 +0000
Manifest next update:     Sat 25 Jul 2026 05:01:09 +0000
Files and hashes:         1: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: Xaesukp1O5DAOMFWTIbXXwBas9+wrbDYNMts15OXZxo=)
                          2: Mt6QRqdp_WrVkpOaF9FYfafU_u0.roa (hash: JbXZMjWgYdLf0n3lOW4EokZ/+GnyNpMVp+hSo+2kfOU=)
                          3: dAQCpkChDXivo83BdGELDocTtqk.roa (hash: mZTjMOwz5EP4FW7lbGwFeLhUXKrB721JuRQlVI85W/o=)
                          4: mhM6I7wL_0dpX-c9Bjn2cXjwD30.roa (hash: sj8SfZTxRtzV3SDjhpPFegvK0EBP3hd2bfneJn45Gsk=)
                          5: n3vDiE1r5CPV-Kn2A_mpngA-za8.roa (hash: iNr9SnNJNjSupRbLQuu8OWEwivQhXnMqZVhQB/JR6g8=)
                          6: ohbKePXamXXPoWhEA80w3vW0W64.roa (hash: WchU4jIcRGIq8VSZ7wgyxWpSYmpMduybSatF0MFZlUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:b1:07:27:b4:f8:f4:37:a0:c6:aa:f1:e5:31:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
        Validity
            Not Before: Jul 24 05:01:09 2026 GMT
            Not After : Jul 25 05:01:09 2026 GMT
        Subject: CN=cd2f32d30b55638ca8f8fef34a5874ca4a72d79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:3b:af:99:ac:0e:d4:66:47:25:b4:90:29:
                    4a:cd:e1:f8:63:f3:e3:77:a3:c4:2b:df:d7:98:e2:
                    ac:c5:b9:8e:46:27:c3:35:f5:86:9f:6b:60:27:3b:
                    5c:57:b8:37:9e:7c:f0:ea:36:dc:73:97:a9:0f:da:
                    66:10:30:bc:b8:cf:bd:9b:dc:cd:64:b4:1d:ad:08:
                    9f:6a:11:05:83:dc:1d:9d:01:c8:fe:e9:30:84:8f:
                    1b:45:21:0b:ac:92:4a:4b:1b:49:1f:ea:d0:3b:ce:
                    09:d3:78:41:7a:f8:5a:f2:f8:78:00:12:7e:4e:93:
                    d4:52:18:8d:3d:a2:e3:9d:6f:f3:42:eb:69:24:0a:
                    78:c2:94:d0:2c:7b:7f:50:aa:3b:8a:51:cb:8e:cd:
                    b1:83:98:4e:ac:ed:d6:7e:86:d9:6b:d8:12:f6:d3:
                    10:8d:04:01:8a:a8:e6:7b:35:f2:19:c5:64:74:cc:
                    84:a8:00:15:55:e2:ed:38:db:60:e6:7a:10:c1:38:
                    b9:1f:5e:bf:af:49:9c:a8:fa:1b:2d:61:5f:fb:23:
                    0e:c2:4b:aa:03:8f:61:67:7a:55:45:99:7e:85:ff:
                    44:bd:fc:73:c9:c8:5c:f9:84:a9:d4:d4:e3:50:b1:
                    96:f4:35:af:9b:c9:19:59:62:01:24:9a:07:d4:41:
                    cd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2F:32:D3:0B:55:63:8C:A8:F8:FE:F3:4A:58:74:CA:4A:72:D7:9C
            X509v3 Authority Key Identifier:
                keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:09:df:2c:ec:75:70:d4:1d:48:58:7a:c0:7e:7b:30:66:f5:
         c5:ec:71:f3:2c:37:e1:4a:0e:9c:0a:aa:43:88:09:f9:6b:4e:
         7f:0a:b4:3b:8d:a8:31:ca:9e:ed:dc:a8:7f:69:ce:e6:ba:97:
         b7:ec:11:82:0a:37:d9:0e:da:1d:4b:7b:17:77:df:8a:80:6a:
         a5:d7:60:c0:b5:dd:07:ef:34:23:c0:76:4f:36:70:56:8f:02:
         a4:1b:83:c7:bf:87:b0:93:56:b1:c0:ee:de:e8:13:70:8a:5d:
         06:cd:3e:db:ce:7d:55:25:68:77:a0:84:71:61:b5:10:ed:8a:
         08:7e:9d:02:f4:63:a7:4d:56:c6:97:d3:f2:63:f5:bf:a0:ff:
         e5:16:61:df:ce:db:4a:a1:94:2a:b9:ea:4a:01:b1:f2:c4:3d:
         a0:84:8f:d9:5a:ce:21:9a:71:21:f4:e8:30:a0:2b:75:16:58:
         6c:ea:97:d0:80:c6:5d:72:36:84:8d:fd:a2:0f:2e:df:47:97:
         1e:1e:38:b3:8e:ba:76:ab:67:51:bd:f2:bb:d4:76:26:97:30:
         67:67:8f:9b:13:6d:c7:08:14:50:92:68:c8:a6:78:a8:62:1b:
         b0:35:26:9a:53:93:e4:6b:0b:75:73:16:91:13:89:ae:71:db:
         e9:35:80:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:49:29 2026 by rpki-client