Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
File:                     5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json)
Hash identifier:          fERovQ+mb+dNM5rIP9cZvvy4jH1gXHUqSZwWPQi1ahw=
Subject key identifier:   8C:2A:3A:88:B6:26:16:ED:A2:8B:DD:F7:15:47:82:F0:2B:00:9E:F9
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Certificate issuer:       /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial:       019D2C611747155524AE7A8FE6F62DB78AC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
Manifest number:          0B3D
Signing time:             Thu 26 Mar 2026 23:00:53 +0000
Manifest this update:     Thu 26 Mar 2026 23:00:53 +0000
Manifest next update:     Fri 27 Mar 2026 23:00:53 +0000
Files and hashes:         1: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: G8BiKm7XsXy3vX24N+iZvG0dbfuhOzgf8+qaBi8tdag=)
                          2: Mt6QRqdp_WrVkpOaF9FYfafU_u0.roa (hash: JbXZMjWgYdLf0n3lOW4EokZ/+GnyNpMVp+hSo+2kfOU=)
                          3: dAQCpkChDXivo83BdGELDocTtqk.roa (hash: mZTjMOwz5EP4FW7lbGwFeLhUXKrB721JuRQlVI85W/o=)
                          4: mhM6I7wL_0dpX-c9Bjn2cXjwD30.roa (hash: sj8SfZTxRtzV3SDjhpPFegvK0EBP3hd2bfneJn45Gsk=)
                          5: n3vDiE1r5CPV-Kn2A_mpngA-za8.roa (hash: iNr9SnNJNjSupRbLQuu8OWEwivQhXnMqZVhQB/JR6g8=)
                          6: ohbKePXamXXPoWhEA80w3vW0W64.roa (hash: WchU4jIcRGIq8VSZ7wgyxWpSYmpMduybSatF0MFZlUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 23:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:61:17:47:15:55:24:ae:7a:8f:e6:f6:2d:b7:8a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
        Validity
            Not Before: Mar 26 23:00:53 2026 GMT
            Not After : Mar 27 23:00:53 2026 GMT
        Subject: CN=8c2a3a88b62616eda28bddf7154782f02b009ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:83:08:73:37:01:76:34:c9:20:fd:96:60:ee:
                    54:0f:3c:b1:98:be:cb:a1:d5:47:f6:e5:ed:a0:a3:
                    2a:cd:36:84:4a:77:7f:a1:b7:59:12:ac:fa:c6:7e:
                    81:c7:4a:fd:85:e3:7a:fb:e6:c0:83:b1:c3:96:d2:
                    53:92:87:f5:b3:01:d8:02:65:45:32:bd:e8:7a:51:
                    5f:1c:eb:79:cc:47:b4:d4:38:93:a9:a8:5a:cb:b1:
                    fc:41:21:3e:bb:49:5d:e0:50:dd:74:92:e3:55:85:
                    07:1f:78:6a:86:ff:a2:ef:7e:a7:c1:21:90:26:90:
                    ba:f5:f1:4f:3b:30:12:e5:b9:fe:36:cf:2f:33:1c:
                    42:79:eb:b7:10:c2:68:12:2d:8e:83:cb:eb:dd:98:
                    c7:e0:8a:4b:70:ad:5b:06:c1:a5:88:0b:0f:05:e0:
                    9d:cc:79:93:9f:3b:f4:35:c7:fd:25:14:37:39:95:
                    65:c6:24:ae:25:2c:d2:11:58:30:a5:f2:3e:12:57:
                    6d:56:e1:e3:ee:d3:d5:c7:8d:3b:43:3d:43:5e:b3:
                    ef:4f:0f:78:49:ad:ba:32:b9:6c:b8:c1:8b:96:7a:
                    62:b8:c4:c7:30:e4:99:9d:2e:be:51:06:81:54:20:
                    b1:82:d9:d8:0a:e5:ed:49:96:e9:12:4f:be:07:08:
                    a1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2A:3A:88:B6:26:16:ED:A2:8B:DD:F7:15:47:82:F0:2B:00:9E:F9
            X509v3 Authority Key Identifier:
                keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:bf:91:5c:0f:ec:22:97:8e:55:42:67:24:15:93:57:8e:41:
         ce:98:76:45:fb:d2:38:3b:55:5e:c6:d4:c0:8d:49:9a:0c:b4:
         96:06:bf:15:7c:a3:d5:f3:11:8f:30:40:c0:06:54:84:02:2a:
         77:35:c8:ef:f5:fd:eb:e2:9c:1a:67:aa:cb:31:17:6b:99:cc:
         61:87:80:8d:dd:b3:d5:b9:4e:64:07:ed:d0:f9:a3:90:d0:68:
         0e:2b:63:0d:1c:ba:65:bc:b2:5d:bc:67:fa:48:a9:2e:c1:82:
         04:f4:c3:ef:fe:0c:1e:0e:e5:af:85:74:f2:eb:eb:92:37:5e:
         a2:24:99:f7:9e:4e:74:94:8a:a9:d1:9c:a7:d7:d4:3d:64:a0:
         fd:cd:b6:5e:de:dd:b7:5b:28:e7:a6:a9:94:87:10:6c:0b:b1:
         5c:08:31:53:0b:d8:4f:a0:5f:11:0b:e7:df:02:2f:45:5a:fb:
         00:d8:f4:b2:76:b8:07:fb:7b:7f:54:4b:19:9a:d3:d1:be:22:
         de:0c:0d:8f:cd:9e:89:d5:a1:af:98:4f:aa:f5:65:e0:87:29:
         fb:ad:22:aa:40:5c:4c:8d:04:3e:9d:96:cd:25:f4:22:36:04:
         13:d4:36:c3:cc:ee:ca:9d:ab:ff:3c:e6:1d:e6:fe:c6:b4:27:
         c3:79:f1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:18:14 2026 by rpki-client