Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
File:                     5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json)
Hash identifier:          wzScRsQxyRMWyFIE7itFM/tb7fWXXeYcEL1adOiI5Oo=
Subject key identifier:   72:F2:D8:B3:92:59:C4:4C:CF:5E:91:6A:1E:C8:D6:1E:A6:56:EF:85
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Certificate issuer:       /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial:       019F84FAF7650D0975D2EB938EA86BA505D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
Manifest number:          0C74
Signing time:             Tue 21 Jul 2026 14:01:07 +0000
Manifest this update:     Tue 21 Jul 2026 14:01:07 +0000
Manifest next update:     Wed 22 Jul 2026 14:01:07 +0000
Files and hashes:         1: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: WHcBO7KuvmLGMVokbyRHe6caZiBR4g1i3hFqdgwLBUs=)
                          2: Mt6QRqdp_WrVkpOaF9FYfafU_u0.roa (hash: JbXZMjWgYdLf0n3lOW4EokZ/+GnyNpMVp+hSo+2kfOU=)
                          3: dAQCpkChDXivo83BdGELDocTtqk.roa (hash: mZTjMOwz5EP4FW7lbGwFeLhUXKrB721JuRQlVI85W/o=)
                          4: mhM6I7wL_0dpX-c9Bjn2cXjwD30.roa (hash: sj8SfZTxRtzV3SDjhpPFegvK0EBP3hd2bfneJn45Gsk=)
                          5: n3vDiE1r5CPV-Kn2A_mpngA-za8.roa (hash: iNr9SnNJNjSupRbLQuu8OWEwivQhXnMqZVhQB/JR6g8=)
                          6: ohbKePXamXXPoWhEA80w3vW0W64.roa (hash: WchU4jIcRGIq8VSZ7wgyxWpSYmpMduybSatF0MFZlUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:fa:f7:65:0d:09:75:d2:eb:93:8e:a8:6b:a5:05:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
        Validity
            Not Before: Jul 21 14:01:07 2026 GMT
            Not After : Jul 22 14:01:07 2026 GMT
        Subject: CN=72f2d8b39259c44ccf5e916a1ec8d61ea656ef85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bc:4c:1f:d1:a1:00:a7:7b:16:0e:31:41:41:
                    9d:52:90:2b:4d:57:dc:ba:e0:45:f3:63:b9:8b:26:
                    6a:eb:b3:1d:17:b8:9d:9b:b7:75:f2:a0:f1:16:ec:
                    bb:f5:a9:75:8e:80:8a:d0:6c:5c:0c:ad:61:24:c6:
                    ac:79:56:59:80:ec:4a:33:3d:fa:9d:0e:2a:6a:22:
                    44:eb:c1:c2:ad:86:61:d2:60:43:3e:0b:4c:f7:f8:
                    b3:9e:b5:9a:ce:35:27:7c:b1:7c:40:7f:4b:5b:ac:
                    db:e3:e9:3d:0a:37:5f:65:39:d3:5f:62:8c:ee:70:
                    c5:0d:cf:47:fa:85:c4:10:63:f6:e2:ab:a2:61:0e:
                    8d:cf:5f:45:b7:60:49:90:44:6f:6e:7b:26:c5:39:
                    e1:16:d3:3d:ad:9c:bc:f3:7b:05:5b:78:14:00:54:
                    a4:12:68:b0:df:d3:1f:f1:3b:b6:31:47:c8:f9:5c:
                    80:9f:cd:cd:da:46:e0:27:4f:ba:2a:15:21:91:33:
                    4b:60:4e:64:13:4d:75:9e:ec:ca:ee:24:1c:ab:e1:
                    97:7b:1b:58:ce:23:75:c7:98:f9:40:f3:bb:4c:4c:
                    43:de:97:b3:6a:b8:ab:73:cc:eb:1f:0c:70:94:c2:
                    4f:a4:9b:d1:fc:59:34:50:e2:dc:5e:0a:77:93:4f:
                    71:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F2:D8:B3:92:59:C4:4C:CF:5E:91:6A:1E:C8:D6:1E:A6:56:EF:85
            X509v3 Authority Key Identifier:
                keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:2d:ce:55:8e:aa:3f:59:ee:03:3a:68:fc:4b:e0:51:b9:87:
         78:2c:91:d5:a2:8a:33:8f:99:c1:ba:72:6a:91:d1:a7:5b:59:
         71:cf:8b:63:74:3c:44:c0:5e:cf:e2:2c:a5:b5:b5:15:89:e3:
         7e:b7:88:40:04:72:13:25:7a:86:99:c5:69:d0:1a:cc:24:fa:
         a6:25:99:ba:94:e8:0b:d7:72:66:91:9b:ec:50:81:00:88:68:
         ff:2b:de:79:5c:0b:fc:8e:26:81:34:1c:69:2e:6e:9a:e8:3d:
         99:f9:c8:47:17:47:93:ae:4f:b3:1a:65:17:29:d1:70:50:a3:
         df:7d:90:39:01:a0:ea:e1:33:f6:3c:ca:ba:18:ca:ee:6f:26:
         91:f7:3c:a1:03:34:1f:e9:bf:46:11:a7:6d:c6:c6:10:40:17:
         36:3e:0d:de:07:95:8d:43:88:72:a0:d4:1b:56:ff:70:de:89:
         cd:6f:e6:71:83:cf:8f:e4:9f:8a:e6:67:88:85:e6:d0:fc:99:
         7d:d5:dd:1e:81:ff:eb:69:61:e5:fc:a4:06:08:ad:87:95:04:
         f6:ae:ac:e2:07:61:66:40:9b:92:fe:fa:ec:5e:c0:eb:d0:da:
         7b:58:4b:55:de:76:6d:86:f8:ea:24:b6:1d:7f:18:04:c0:91:
         2b:9b:b8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:50:57 2026 by rpki-client