Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
File:                     CyOsILweRYXE_UzI57yXYzG4XG4.mft (raw, json)
Hash identifier:          hALAo+i+KfQ8VcE7v+2UTMpYBMPb2f/d+/Mb6ddYqzc=
Subject key identifier:   4D:3E:00:A4:9C:24:86:81:96:4B:19:9F:1A:34:9B:CF:12:83:85:DB
Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
Certificate issuer:       /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Certificate serial:       01A0016FDD0CA0B8B35790FA55BCC79B71E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
Manifest number:          151C
Signing time:             Fri 14 Aug 2026 18:01:43 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:43 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:43 +0000
Files and hashes:         1: CyOsILweRYXE_UzI57yXYzG4XG4.crl (hash: plSuyfP0kGiA9rjn9J2yiEi3XRWrdBIihVWbvED5XJE=)
                          2: eXexMnsXhpiwYKh6Uvz65hPWHAs.roa (hash: Sv4osXCj3qnFKewpXCIs6tgLO2bpxFbqyIwOzHIdMNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:dd:0c:a0:b8:b3:57:90:fa:55:bc:c7:9b:71:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
        Validity
            Not Before: Aug 14 18:01:43 2026 GMT
            Not After : Aug 15 18:01:43 2026 GMT
        Subject: CN=4d3e00a49c248681964b199f1a349bcf128385db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f2:e8:af:5a:06:b3:14:14:e3:fc:eb:b8:f5:
                    db:b7:05:0d:10:6d:13:7c:2a:41:ff:36:2e:a6:86:
                    f5:40:60:f0:45:8a:8a:87:ac:aa:ec:ac:a8:63:ed:
                    a4:14:bb:67:a8:b1:4d:26:77:34:be:ff:9b:b5:52:
                    bc:d5:46:19:b5:19:de:14:6b:ef:54:89:be:82:33:
                    0e:1c:b8:0d:cb:0c:85:72:93:2c:81:be:2c:aa:ef:
                    30:fe:b6:5d:d4:bc:cd:02:89:2c:3b:54:4b:7c:dc:
                    27:19:2b:b8:77:f2:a1:a3:b2:ba:1b:be:de:76:d3:
                    be:ff:11:5d:3a:35:c3:83:87:2a:07:e3:75:05:ed:
                    90:52:67:05:db:40:b4:0e:bc:5f:af:13:b7:ee:7c:
                    d0:b9:aa:70:a2:54:55:8a:46:fd:12:da:8f:ba:d3:
                    90:b6:44:9d:1f:c4:c0:c7:07:11:10:5c:85:99:9c:
                    b9:43:39:d8:72:43:fb:ea:be:3a:73:b5:29:83:bb:
                    cf:bc:e9:89:e6:2a:14:e1:e7:c8:97:6c:10:fc:36:
                    d3:d0:f0:50:cc:f0:f8:68:8d:28:94:5b:8f:d0:63:
                    bc:30:36:dd:a8:11:5b:fb:bc:a3:ab:bc:25:5d:1d:
                    ae:a0:b0:77:cf:82:20:1d:e3:92:f6:bc:fb:10:e2:
                    6f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3E:00:A4:9C:24:86:81:96:4B:19:9F:1A:34:9B:CF:12:83:85:DB
            X509v3 Authority Key Identifier:
                keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:e5:6e:c6:c8:31:a7:47:e5:64:12:ea:ad:6a:ff:5f:2b:c5:
         1a:09:12:1c:da:31:6a:8d:52:04:4c:1c:cb:90:98:4e:e9:f4:
         e1:d6:3b:67:b5:4a:e9:f1:16:82:b0:e3:0a:5a:5a:57:a6:df:
         bc:d7:2c:73:6b:06:e4:b5:d5:75:af:01:36:35:97:51:97:f5:
         b1:d7:7a:69:5e:30:36:e2:65:c1:1c:0e:fe:ff:77:32:3a:61:
         d5:3b:83:15:a1:b4:db:5b:3a:0b:74:5a:df:6d:bf:67:c5:13:
         ac:f2:f5:d6:57:91:38:f2:94:ae:4d:10:1c:3d:b0:ab:a8:d0:
         a3:5f:af:cc:30:52:77:ab:87:9f:9f:82:1e:d1:4e:34:47:36:
         a9:12:99:95:29:21:11:f5:70:c3:c2:eb:46:9b:d4:fc:74:ed:
         e1:08:32:ba:27:a3:de:1f:1f:13:df:46:67:a0:52:36:ab:92:
         b3:e0:8e:ab:ea:3f:26:16:83:f3:d1:d3:92:0b:be:cf:09:d6:
         6a:f3:54:85:bd:69:e5:a2:d7:ff:32:0a:51:d6:38:49:c2:5d:
         b6:6d:0a:ea:29:6a:25:8f:4f:3b:1d:86:1c:a1:6e:b6:ee:68:
         9f:8e:ed:8a:18:ec:6c:25:cb:39:19:07:85:18:3d:9d:50:3c:
         4a:84:ab:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb90MoLizV5D6VbzHm3HpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjNhYzIwYmMxZTQ1ODVjNGZkNGNjOGU3YmM5NzYzMzFi
ODVjNmUwHhcNMjYwODE0MTgwMTQzWhcNMjYwODE1MTgwMTQzWjAzMTEwLwYDVQQD
Eyg0ZDNlMDBhNDljMjQ4NjgxOTY0YjE5OWYxYTM0OWJjZjEyODM4NWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/Lor1oGsxQU4/zruPXbtwUNEG0T
fCpB/zYupob1QGDwRYqKh6yq7KyoY+2kFLtnqLFNJnc0vv+btVK81UYZtRneFGvv
VIm+gjMOHLgNywyFcpMsgb4squ8w/rZd1LzNAoksO1RLfNwnGSu4d/Kho7K6G77e
dtO+/xFdOjXDg4cqB+N1Be2QUmcF20C0DrxfrxO37nzQuapwolRVikb9EtqPutOQ
tkSdH8TAxwcREFyFmZy5QznYckP76r46c7Upg7vPvOmJ5ioU4efIl2wQ/DbT0PBQ
zPD4aI0olFuP0GO8MDbdqBFb+7yjq7wlXR2uoLB3z4IgHeOS9rz7EOJvYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0+AKScJIaBlksZnxo0m88Sg4XbMB8GA1UdIwQY
MBaAFAsjrCC8HkWFxP1MyOe8l2MxuFxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jMjcyMGYtMTA2ZC00NzZmLTgwYWYt
MDYxODhjZjdhM2MyLzEvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jMjcyMGYtMTA2ZC00NzZmLTgwYWYtMDYxODhjZjdhM2My
LzEvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuVuxsgx
p0flZBLqrWr/XyvFGgkSHNoxao1SBEwcy5CYTun04dY7Z7VK6fEWgrDjClpaV6bf
vNcsc2sG5LXVda8BNjWXUZf1sdd6aV4wNuJlwRwO/v93Mjph1TuDFaG021s6C3Ra
322/Z8UTrPL11leROPKUrk0QHD2wq6jQo1+vzDBSd6uHn5+CHtFONEc2qRKZlSkh
EfVww8LrRpvU/HTt4Qgyuiej3h8fE99GZ6BSNquSs+COq+o/JhaD89HTkgu+zwnW
avNUhb1p5aLX/zIKUdY4ScJdtm0K6ilqJY9POx2GHKFutu5on47tihjsbCXLORkH
hRg9nVA8SoSrmQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:48 2026 by rpki-client