Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
File:                     5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json)
Hash identifier:          hcvKqXlyb3u5ieAKHY0iVaPPkbmylitf+Hmt80QmEtQ=
Subject key identifier:   93:A5:B8:1F:7C:31:31:C0:83:31:7A:F4:B6:83:3B:61:EB:28:41:4B
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Certificate issuer:       /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial:       019E1BD90D5DC3A7C711D67BCB28F44DAA75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
Manifest number:          0BB9
Signing time:             Tue 12 May 2026 11:01:09 +0000
Manifest this update:     Tue 12 May 2026 11:01:09 +0000
Manifest next update:     Wed 13 May 2026 11:01:09 +0000
Files and hashes:         1: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: bxVLPlzMVxLMKu8mka39coFqTPyXF6lVDp2IJtIwuoY=)
                          2: Mt6QRqdp_WrVkpOaF9FYfafU_u0.roa (hash: JbXZMjWgYdLf0n3lOW4EokZ/+GnyNpMVp+hSo+2kfOU=)
                          3: dAQCpkChDXivo83BdGELDocTtqk.roa (hash: mZTjMOwz5EP4FW7lbGwFeLhUXKrB721JuRQlVI85W/o=)
                          4: mhM6I7wL_0dpX-c9Bjn2cXjwD30.roa (hash: sj8SfZTxRtzV3SDjhpPFegvK0EBP3hd2bfneJn45Gsk=)
                          5: n3vDiE1r5CPV-Kn2A_mpngA-za8.roa (hash: iNr9SnNJNjSupRbLQuu8OWEwivQhXnMqZVhQB/JR6g8=)
                          6: ohbKePXamXXPoWhEA80w3vW0W64.roa (hash: WchU4jIcRGIq8VSZ7wgyxWpSYmpMduybSatF0MFZlUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d9:0d:5d:c3:a7:c7:11:d6:7b:cb:28:f4:4d:aa:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
        Validity
            Not Before: May 12 11:01:09 2026 GMT
            Not After : May 13 11:01:09 2026 GMT
        Subject: CN=93a5b81f7c3131c083317af4b6833b61eb28414b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:e3:63:31:04:e6:e7:ea:a7:a3:7b:d8:5f:
                    47:b4:f5:1a:37:1f:78:ab:2b:7b:cd:5e:f2:79:ae:
                    18:96:80:5b:46:37:0f:97:40:c4:72:84:8f:ee:1b:
                    cf:46:51:3a:62:67:b6:d9:65:eb:06:21:14:54:3b:
                    08:06:2a:0b:cd:e5:78:f6:68:1a:ec:ca:f6:85:16:
                    43:2e:b1:3a:25:ca:e9:f6:40:9b:ca:2f:73:fa:2e:
                    81:ff:54:e1:46:c7:23:93:d1:54:b9:04:5b:49:1b:
                    8f:aa:1f:cf:70:07:d8:c1:ca:72:29:76:6e:b8:b9:
                    32:27:80:e0:48:9f:0f:db:e8:30:38:98:14:63:c5:
                    b9:f8:5b:58:5e:0b:f8:a2:a6:14:6a:4a:a9:a4:e8:
                    54:1c:b2:65:45:b9:1c:b7:5b:19:52:24:fd:e5:33:
                    14:a1:af:dd:75:63:a5:37:5f:65:7a:1b:54:b9:96:
                    0c:07:19:b2:4d:ba:34:51:5f:33:4c:11:5a:2b:7e:
                    d7:fc:8b:28:c0:ad:97:b8:45:eb:20:76:55:c0:02:
                    41:66:b4:0a:27:1c:93:7a:0d:7a:b4:d9:0e:d4:7b:
                    1e:9b:2b:56:63:0e:08:0c:01:42:a1:19:ef:45:ca:
                    8f:68:bb:75:1d:ff:2c:6b:a5:08:02:8e:bf:87:67:
                    99:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A5:B8:1F:7C:31:31:C0:83:31:7A:F4:B6:83:3B:61:EB:28:41:4B
            X509v3 Authority Key Identifier:
                keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:26:c5:b7:f4:0a:4e:c6:5c:96:c2:58:f5:44:62:1d:b2:8c:
         98:23:96:66:61:7c:e0:a8:df:ef:4a:17:62:82:48:3d:b0:d4:
         56:ad:96:ce:87:df:9b:18:2f:74:61:0c:b9:32:03:a6:9c:94:
         24:a1:b7:c6:f7:fb:6b:60:3d:10:3f:81:fe:4a:31:f6:e4:92:
         57:53:26:63:85:5a:07:c7:99:11:a1:70:55:28:f5:68:ee:c6:
         96:9f:63:23:06:88:0a:d7:61:75:68:9c:d8:8f:52:7e:ed:00:
         53:6a:4b:70:91:e0:2e:f8:a9:16:f1:ca:f7:d5:c4:5b:61:f9:
         81:71:49:bc:33:99:21:6c:a2:76:82:55:2a:ae:3c:45:cf:d7:
         cf:c9:71:c1:ff:d2:cc:36:f3:e7:7c:d3:ad:ad:ae:9c:5a:b4:
         49:30:99:1e:fc:17:d2:07:a0:ee:7b:3d:1d:e1:68:1f:70:b6:
         e4:7a:e4:8c:62:03:db:1d:b2:f1:03:21:3e:5c:70:66:b0:4f:
         4c:18:8a:8a:75:0d:ec:da:42:be:0f:64:63:0e:7d:52:f8:8b:
         22:ed:ef:47:95:7a:4b:ce:a6:03:94:7b:f5:0e:68:67:5c:fe:
         b7:87:9a:90:00:b3:55:0c:3f:3d:a1:1a:0d:6e:33:a3:5f:af:
         63:cf:bd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:10 2026 by rpki-client