Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
File:                     csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json)
Hash identifier:          wQBgm0lzSxMJRsSPbY8npPnzMtSiKxn3nrO8nw9Zkgg=
Subject key identifier:   05:FB:60:06:50:A8:69:E9:22:99:C9:73:29:25:DE:CE:13:B1:EE:18
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Certificate issuer:       /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial:       0198D5F16F4CF5CBE9DE75F5B75C533F765A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
Manifest number:          15B1
Signing time:             Sat 23 Aug 2025 08:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:26 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:26 +0000
Files and hashes:         1: I_-FRfZa9GeQgym8xYKEVr-rfgA.roa (hash: AmRbI2XP8GOvp3frMOHSnlH48LSP6GLhPNS9PY26J8Y=)
                          2: Uex3x3CWB9WPAXdRNKBIFJzJsn0.roa (hash: 2qFFx/ZZv0i+OiRQdPCciM9T0PW45kAKmFf1AT14lvA=)
                          3: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: E1qPgHq+8/tDsIjx+05/7IRGl8PyxtcmYzW9qSMjA3w=)
                          4: rH_6QZmVa4_yNlZ_JVuN0_Vk3Xs.roa (hash: Z/fYNuFHcmnLVDSA1WLLI385MQXDkqW9Tw7vDgNOnAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:6f:4c:f5:cb:e9:de:75:f5:b7:5c:53:3f:76:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
        Validity
            Not Before: Aug 23 08:00:26 2025 GMT
            Not After : Aug 24 08:00:26 2025 GMT
        Subject: CN=05fb600650a869e92299c9732925dece13b1ee18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bb:0f:45:e2:7c:2f:87:e5:fb:ac:3e:e0:1c:
                    00:18:b9:3d:1b:58:6c:86:76:b4:34:82:eb:7c:38:
                    26:c4:2e:2b:ef:65:67:3b:8e:3d:e4:b8:ec:55:53:
                    88:2e:49:41:e6:06:97:d3:6d:62:32:2f:ce:4b:c7:
                    e7:38:92:f2:bc:af:86:37:78:42:6c:6d:ea:e8:93:
                    c5:5b:68:d3:bc:53:d7:20:f5:1d:60:df:e8:c6:fe:
                    84:14:9a:1f:b8:d5:c7:3e:5e:1a:7d:97:ea:a3:1c:
                    1f:7e:eb:48:83:88:a5:93:0f:57:da:96:01:08:ad:
                    e5:c5:65:d9:e1:17:04:72:06:66:56:32:8a:41:df:
                    46:43:39:74:c3:2f:34:0d:27:99:fe:9a:cc:93:b6:
                    d4:12:23:0e:32:d4:3c:ee:03:fc:60:ce:ab:b3:9e:
                    ee:69:ee:56:64:8c:34:37:27:da:42:99:db:f2:2c:
                    9d:b0:c7:d1:bf:b9:89:05:1b:fb:67:11:58:f7:d1:
                    dc:1c:df:39:79:51:12:a5:fb:d4:c1:3b:76:9f:9e:
                    89:18:b3:9b:05:8b:e1:9e:e7:10:c7:94:01:01:9b:
                    29:92:9a:b3:fc:93:22:a5:01:73:c7:99:7e:2d:16:
                    66:b9:59:8c:e9:66:6e:ca:40:6d:25:81:fd:92:58:
                    53:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FB:60:06:50:A8:69:E9:22:99:C9:73:29:25:DE:CE:13:B1:EE:18
            X509v3 Authority Key Identifier:
                keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:85:c4:52:1d:0d:fb:d7:18:a0:7f:56:29:52:47:09:e0:aa:
         12:b6:ac:7d:f5:b5:e0:a7:dd:a2:30:c2:b2:ad:89:0f:a2:7f:
         c7:31:97:31:64:0f:cb:22:b2:34:08:45:76:0b:d8:86:b3:33:
         c6:d5:d5:8c:2f:9f:91:f9:ba:6e:50:6d:98:92:55:91:f5:e8:
         43:0c:4a:6f:80:f5:10:94:e4:cb:8c:de:8a:3d:2e:45:9a:a6:
         3a:96:f4:40:a8:7e:ba:a3:9e:6a:e3:45:b4:3b:f4:2a:34:dd:
         84:9b:55:99:e9:22:10:1d:67:2b:cf:21:e5:a7:39:7c:2d:b6:
         af:e3:f9:12:d5:67:c8:9e:8b:af:0a:39:a9:45:8c:42:eb:6b:
         f1:22:ef:fc:5c:70:4f:63:f7:03:5c:12:13:11:fe:da:d3:64:
         70:33:d8:68:46:42:40:ed:b2:9f:b0:3d:ec:7d:1a:df:90:b6:
         c5:38:a4:49:2d:4b:77:97:07:ba:ec:8d:7d:a0:74:8b:de:60:
         78:cb:68:e8:b6:6f:74:f9:62:b9:3f:79:9e:93:42:d4:fc:50:
         de:4e:e8:e8:a9:09:1e:58:f4:1e:02:d3:d5:db:07:e5:6e:99:
         3c:b7:e9:a5:8e:ef:ff:99:1f:1c:e5:92:b4:eb:12:55:f7:b8:
         fc:55:e5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:26 2025 by rpki-client