Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
File:                     cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft (raw, json)
Hash identifier:          S5jEtZjK87Llaaz3HZVMUK7zKb5pkuFk6jKJ+tpYWNw=
Subject key identifier:   5F:0C:2C:F0:BC:83:C7:54:88:06:79:8F:30:C5:E8:B9:92:D3:A9:79
Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
Certificate issuer:       /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Certificate serial:       019F9391A2DDCBC48599B853383F090F870F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
Manifest number:          195A
Signing time:             Fri 24 Jul 2026 10:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:22 +0000
Files and hashes:         1: VGyi3_XM7fe5glWnkMXs_96XfgY.roa (hash: 5b1Wuvrw9UByaw3AW1uJ5o3W+F06ZtJx4zNpuEiuZ3Q=)
                          2: cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl (hash: jxPcm0IPas26sYMpHIMfCo1s/IuBnaEn/Echf2cBkwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:a2:dd:cb:c4:85:99:b8:53:38:3f:09:0f:87:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
        Validity
            Not Before: Jul 24 10:00:22 2026 GMT
            Not After : Jul 25 10:00:22 2026 GMT
        Subject: CN=5f0c2cf0bc83c7548806798f30c5e8b992d3a979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a7:79:fa:df:e2:0a:64:59:ef:4c:69:cc:45:
                    0b:d8:d3:9c:a1:df:69:dd:62:1f:1d:fc:73:f9:3e:
                    8f:b5:1a:57:71:f5:c9:18:12:4d:38:fe:16:92:92:
                    5e:18:bc:31:ff:af:18:5c:8f:7b:18:ca:94:fd:6a:
                    a2:3a:b6:05:a9:1a:97:c9:85:05:1c:81:81:15:b2:
                    d3:13:41:fc:e0:71:af:73:06:ff:45:b3:ab:05:64:
                    b5:58:a0:17:4e:d7:d3:3c:fd:c0:ab:f4:2d:31:15:
                    00:1f:ec:b4:90:4f:5f:83:f2:bd:06:c2:c4:d8:22:
                    0c:f4:32:3d:62:6e:5c:56:b8:bc:99:f6:25:73:d2:
                    09:38:db:44:e2:db:2c:a7:b9:5a:70:23:39:73:bd:
                    ab:20:b7:f6:7a:81:99:43:ad:08:7c:22:f2:93:5c:
                    d1:e3:5d:c1:3b:fd:bf:77:45:bc:0b:e6:73:08:32:
                    1f:fe:3c:e3:fe:1f:77:a1:42:9b:38:99:02:36:2c:
                    e0:a8:6f:13:a2:bb:59:04:f8:e8:4a:13:34:e5:54:
                    9b:fe:cd:80:c6:81:84:90:78:ad:d6:f0:79:bc:bf:
                    61:60:77:cb:e0:20:ba:99:1e:cb:2b:2b:ca:1c:12:
                    6d:98:dc:be:f8:66:3a:b3:c5:9b:5d:83:1a:75:74:
                    e3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0C:2C:F0:BC:83:C7:54:88:06:79:8F:30:C5:E8:B9:92:D3:A9:79
            X509v3 Authority Key Identifier:
                keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:95:a1:f4:75:94:92:50:e9:9a:8a:fe:a8:b1:ee:41:26:f0:
         5f:52:20:6f:cb:c5:e9:58:73:fb:61:13:00:21:e2:66:3e:9a:
         c5:ae:50:1c:96:bd:45:ba:ff:b1:a2:06:d3:8f:87:52:26:04:
         09:74:4e:99:7a:ae:79:14:51:9a:f4:5d:57:64:c1:b6:d6:29:
         9f:a6:3b:4b:33:3d:ee:3a:52:0e:57:05:70:9e:c7:30:8f:12:
         25:51:1b:57:9f:26:c1:81:22:6a:2b:ec:c9:33:6b:56:42:0c:
         dd:e7:9b:55:74:1f:58:19:b3:78:9e:7f:d5:12:78:18:13:85:
         fc:e4:7a:b2:42:a1:4f:4a:3a:20:56:80:c9:82:ea:cc:6e:94:
         07:c7:55:56:8f:e1:ae:b0:ae:3c:66:ab:8b:f7:e4:e1:b8:1c:
         1b:1e:16:8f:87:fd:69:57:23:3c:1a:2d:e5:1e:3e:29:33:2e:
         54:e1:b8:42:8e:b3:03:40:b9:bd:63:72:09:a8:33:25:2a:e4:
         32:df:71:c3:83:a8:a4:64:62:50:bf:e1:e1:2b:02:3c:9d:72:
         68:8d:d4:a1:61:0b:5f:2a:ab:a7:a8:bc:ac:f7:4c:94:97:0b:
         75:6f:4b:9e:0c:a6:a8:a0:bf:ba:22:40:f8:26:14:60:25:3e:
         d3:90:52:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkaLdy8SFmbhTOD8JD4cPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTEyYTM4NzZmZjdiZDAwZDlkOWViYjk3MmFiMWU2MjFl
YTFlOGQwHhcNMjYwNzI0MTAwMDIyWhcNMjYwNzI1MTAwMDIyWjAzMTEwLwYDVQQD
Eyg1ZjBjMmNmMGJjODNjNzU0ODgwNjc5OGYzMGM1ZThiOTkyZDNhOTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqd5+t/iCmRZ70xpzEUL2NOcod9p
3WIfHfxz+T6PtRpXcfXJGBJNOP4WkpJeGLwx/68YXI97GMqU/WqiOrYFqRqXyYUF
HIGBFbLTE0H84HGvcwb/RbOrBWS1WKAXTtfTPP3Aq/QtMRUAH+y0kE9fg/K9BsLE
2CIM9DI9Ym5cVri8mfYlc9IJONtE4tssp7lacCM5c72rILf2eoGZQ60IfCLyk1zR
413BO/2/d0W8C+ZzCDIf/jzj/h93oUKbOJkCNizgqG8TortZBPjoShM05VSb/s2A
xoGEkHit1vB5vL9hYHfL4CC6mR7LKyvKHBJtmNy++GY6s8WbXYMadXTjdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8MLPC8g8dUiAZ5jzDF6LmS06l5MB8GA1UdIwQY
MBaAFHLhKjh2/3vQDZ2eu5cqseYh6h6NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xZmFhMjQtZjA4Ni00YjQ4LWIxYmQt
NDU1MjdlOGU0NGQyLzEvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8xZmFhMjQtZjA4Ni00YjQ4LWIxYmQtNDU1MjdlOGU0NGQy
LzEvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZWh9HWU
klDpmor+qLHuQSbwX1Igb8vF6Vhz+2ETACHiZj6axa5QHJa9Rbr/saIG04+HUiYE
CXROmXqueRRRmvRdV2TBttYpn6Y7SzM97jpSDlcFcJ7HMI8SJVEbV58mwYEiaivs
yTNrVkIM3eebVXQfWBmzeJ5/1RJ4GBOF/OR6skKhT0o6IFaAyYLqzG6UB8dVVo/h
rrCuPGari/fk4bgcGx4Wj4f9aVcjPBot5R4+KTMuVOG4Qo6zA0C5vWNyCagzJSrk
Mt9xw4OopGRiUL/h4SsCPJ1yaI3UoWELXyqrp6i8rPdMlJcLdW9LngymqKC/uiJA
+CYUYCU+05BSFw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:57:38 2026 by rpki-client