Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
File:                     csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json)
Hash identifier:          5xtGmYJ+IgBO6WE4IEd+Z7JzRkcjFQc/gwOyhJ8JRMI=
Subject key identifier:   12:C5:5D:7E:D4:11:C9:F6:AB:38:35:E3:4C:B9:B1:B8:78:13:D6:8F
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Certificate issuer:       /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial:       019F92B6B69E3767C23EE2229BEC39C77D7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
Manifest number:          192F
Signing time:             Fri 24 Jul 2026 06:01:15 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:15 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:15 +0000
Files and hashes:         1: 2lc1GZ3gGSQDIoRqW1OdY8NXkpE.roa (hash: yHk/HPXIpPTEO2mErbNUbyRInwqWmQhiOnI/WtPGa8o=)
                          2: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: 8K0R7bzl6UVzUelh4zR5yaN4L2+StCsPqWXlGfz/2Ic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:b6:9e:37:67:c2:3e:e2:22:9b:ec:39:c7:7d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
        Validity
            Not Before: Jul 24 06:01:15 2026 GMT
            Not After : Jul 25 06:01:15 2026 GMT
        Subject: CN=12c55d7ed411c9f6ab3835e34cb9b1b87813d68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f0:02:26:02:b4:35:44:4f:ca:bb:8c:9a:52:
                    69:ab:e9:7f:bc:40:9f:4e:21:c2:f2:8a:92:4a:53:
                    04:e3:07:71:aa:06:c8:7e:52:94:8a:ad:f8:b7:c1:
                    38:15:4a:d6:50:83:17:42:a8:ed:84:56:2e:a3:0f:
                    cc:29:b7:25:f2:60:ca:d3:fa:64:c8:33:d4:9a:f1:
                    58:7b:42:13:7f:69:2a:2e:93:f7:f5:02:a5:04:47:
                    96:19:a7:c2:2c:07:43:19:4f:c0:72:f8:96:4a:78:
                    e6:8a:17:28:06:56:eb:be:0d:26:74:02:93:0c:ce:
                    12:d1:06:3c:18:16:17:63:85:f8:dd:3b:fb:f0:d1:
                    d1:ae:3c:e3:d3:86:58:83:35:c0:dd:6b:12:c9:38:
                    a7:bc:1a:bc:9e:6f:3b:3d:bd:60:ad:0c:58:9e:33:
                    a8:8b:8f:08:22:d7:ac:61:3a:3b:fc:84:49:76:d5:
                    bc:a5:57:73:d1:e4:4b:9b:03:7d:5c:0e:10:55:6e:
                    98:af:eb:80:7d:7d:41:e3:e8:0e:e5:1c:9d:7c:54:
                    df:12:37:e2:d8:a4:13:bd:e6:e6:86:91:05:f1:dc:
                    ec:21:01:3f:fe:c0:e8:14:c7:7a:1d:5c:68:82:f7:
                    46:5b:c8:72:db:9b:6a:eb:4b:e8:6b:82:c4:d6:66:
                    84:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C5:5D:7E:D4:11:C9:F6:AB:38:35:E3:4C:B9:B1:B8:78:13:D6:8F
            X509v3 Authority Key Identifier:
                keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f5:75:b7:7a:a9:c4:ac:d8:23:60:45:fa:d1:03:ed:16:1c:
         21:c4:5e:bf:c9:10:53:13:da:d3:cf:3f:03:84:6e:c7:95:17:
         1e:9d:fd:d3:e9:2b:2c:a7:69:d5:67:6e:cb:2c:5b:ba:46:ef:
         db:a9:7a:ce:4c:90:3b:dc:85:8c:ee:28:98:b4:e3:ce:65:3e:
         bb:e0:4f:12:4c:8b:c8:a2:de:17:5b:5c:f6:0d:5b:c0:e3:71:
         d0:f3:e0:38:e6:58:e8:d8:b5:b0:62:f1:b3:e3:b1:70:e3:0f:
         db:69:64:87:49:aa:a8:64:35:15:3a:4a:28:1b:db:89:01:f7:
         67:3a:f7:05:83:21:4e:01:12:fd:95:70:1b:04:88:2d:ad:5e:
         32:27:84:16:b5:d6:8a:ee:c8:21:82:cc:e1:90:f7:bc:fa:47:
         0c:07:13:30:df:27:b8:65:f4:dd:09:d3:44:65:9a:19:b5:ce:
         8f:5c:9b:6b:a9:39:d2:ed:62:65:d5:38:bb:7b:e4:a1:0d:cc:
         18:21:94:72:bf:55:10:ec:7b:4d:bb:d2:be:de:9d:75:9d:2d:
         a1:22:95:4d:ad:d1:9a:d9:29:8b:26:8f:de:d0:a1:81:0a:08:
         93:ff:aa:24:40:2c:ef:9f:80:f1:75:aa:81:7a:33:a4:58:ba:
         7d:6f:2a:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StraeN2fCPuIim+w5x31/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyY2ExYTVjZmY1MmViZTJmMjJiNjY5ZGNjMmM5MDI3Y2Vh
MGI4MWMwHhcNMjYwNzI0MDYwMTE1WhcNMjYwNzI1MDYwMTE1WjAzMTEwLwYDVQQD
EygxMmM1NWQ3ZWQ0MTFjOWY2YWIzODM1ZTM0Y2I5YjFiODc4MTNkNjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/ACJgK0NURPyruMmlJpq+l/vECf
TiHC8oqSSlME4wdxqgbIflKUiq34t8E4FUrWUIMXQqjthFYuow/MKbcl8mDK0/pk
yDPUmvFYe0ITf2kqLpP39QKlBEeWGafCLAdDGU/AcviWSnjmihcoBlbrvg0mdAKT
DM4S0QY8GBYXY4X43Tv78NHRrjzj04ZYgzXA3WsSyTinvBq8nm87Pb1grQxYnjOo
i48IItesYTo7/IRJdtW8pVdz0eRLmwN9XA4QVW6Yr+uAfX1B4+gO5RydfFTfEjfi
2KQTvebmhpEF8dzsIQE//sDoFMd6HVxogvdGW8hy25tq60voa4LE1maEkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLFXX7UEcn2qzg140y5sbh4E9aPMB8GA1UdIwQY
MBaAFHLKGlz/Uuvi8itmncwskCfOoLgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3NvYVhQOVM2LUx5SzJhZHpDeVFKODZndUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xMmFjMGUtNTQ3NC00NWQ1LThkZWYt
NmE0MTRmMTg0NzA2LzEvY3NvYVhQOVM2LUx5SzJhZHpDeVFKODZndUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8xMmFjMGUtNTQ3NC00NWQ1LThkZWYtNmE0MTRmMTg0NzA2
LzEvY3NvYVhQOVM2LUx5SzJhZHpDeVFKODZndUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPV1t3qp
xKzYI2BF+tED7RYcIcRev8kQUxPa088/A4Rux5UXHp390+krLKdp1Wduyyxbukbv
26l6zkyQO9yFjO4omLTjzmU+u+BPEkyLyKLeF1tc9g1bwONx0PPgOOZY6Ni1sGLx
s+OxcOMP22lkh0mqqGQ1FTpKKBvbiQH3Zzr3BYMhTgES/ZVwGwSILa1eMieEFrXW
iu7IIYLM4ZD3vPpHDAcTMN8nuGX03QnTRGWaGbXOj1yba6k50u1iZdU4u3vkoQ3M
GCGUcr9VEOx7TbvSvt6ddZ0toSKVTa3RmtkpiyaP3tChgQoIk/+qJEAs75+A8XWq
gXozpFi6fW8qQA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:56 2026 by rpki-client