Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
File:                     CyOsILweRYXE_UzI57yXYzG4XG4.mft (raw, json)
Hash identifier:          36nAQbtMBGPtAujY50VCXlJ0y3JEP70lbWCPK0apRUI=
Subject key identifier:   EE:3A:2A:C7:FA:9D:4C:09:EE:B8:23:A1:B9:04:70:31:93:9D:EF:CB
Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
Certificate issuer:       /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Certificate serial:       019E300586E6BFBE157C06B4A686B29B70FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
Manifest number:          142B
Signing time:             Sat 16 May 2026 09:02:08 +0000
Manifest this update:     Sat 16 May 2026 09:02:08 +0000
Manifest next update:     Sun 17 May 2026 09:02:08 +0000
Files and hashes:         1: CyOsILweRYXE_UzI57yXYzG4XG4.crl (hash: 16buxXF3XyHSda99WPh2Q7UlSYW3TnzBuO6tBaED4PM=)
                          2: eXexMnsXhpiwYKh6Uvz65hPWHAs.roa (hash: Sv4osXCj3qnFKewpXCIs6tgLO2bpxFbqyIwOzHIdMNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:86:e6:bf:be:15:7c:06:b4:a6:86:b2:9b:70:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
        Validity
            Not Before: May 16 09:02:08 2026 GMT
            Not After : May 17 09:02:08 2026 GMT
        Subject: CN=ee3a2ac7fa9d4c09eeb823a1b9047031939defcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:46:c0:68:41:60:b2:25:70:4f:d7:48:45:2c:
                    2f:83:b0:d1:b3:84:de:0d:c1:1a:40:f3:49:a3:6c:
                    b5:ae:42:a2:f1:00:8e:66:9b:d2:6c:e9:86:47:72:
                    5d:39:29:60:07:a8:15:4a:20:d1:36:af:50:fc:a3:
                    9b:69:c1:a4:1b:06:36:c6:60:e8:67:d8:cb:23:cc:
                    30:6b:9a:23:8f:38:58:e1:25:c9:af:3f:fa:af:b4:
                    cd:64:a6:f1:86:55:fb:ab:95:3e:23:ec:6a:af:e8:
                    9f:62:09:06:da:c1:4b:e4:57:76:eb:e5:61:08:4d:
                    0d:16:73:d7:3a:41:ba:4b:49:b9:6e:72:32:2b:31:
                    7b:a7:10:23:79:4b:34:d3:72:0d:1e:7f:44:19:80:
                    f2:c3:17:4b:2b:cc:4d:1d:09:3f:5b:13:09:18:43:
                    f1:e2:85:46:6f:bf:2a:e7:c7:95:4c:3b:fe:15:74:
                    e2:40:1e:7e:94:46:9d:3a:1a:a6:64:c7:73:2c:19:
                    f8:f8:c9:24:6d:27:a8:b6:8c:3f:cd:a0:67:7b:1d:
                    6a:52:e1:4b:fa:45:6b:f9:db:52:3c:f5:96:9b:f0:
                    04:5a:02:36:ec:63:54:d4:f9:7f:6d:1d:32:df:cc:
                    ab:14:1b:97:ac:33:ec:45:a9:38:98:41:f4:d9:20:
                    22:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3A:2A:C7:FA:9D:4C:09:EE:B8:23:A1:B9:04:70:31:93:9D:EF:CB
            X509v3 Authority Key Identifier:
                keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:08:37:05:a8:d3:41:51:a4:57:85:64:18:9b:31:28:dd:23:
         24:48:d6:64:32:f4:0e:7a:d0:02:b1:1a:45:37:58:4d:0c:8b:
         bb:6c:e9:8d:81:13:cc:83:61:a9:e7:6e:f8:0a:8b:4c:45:76:
         15:56:07:31:a4:c3:0b:85:11:4d:31:b5:c6:a7:b8:34:a7:6d:
         77:ca:38:a0:b4:69:d2:89:cc:2a:e7:ff:00:93:84:90:68:d3:
         c3:da:d1:0d:10:30:4b:8f:f8:86:43:e7:00:30:50:55:9a:74:
         6c:0f:78:81:97:23:5a:a5:d6:89:7b:4a:a2:e1:ef:cb:14:36:
         a3:10:16:97:35:df:7a:43:c5:3c:f6:64:6e:12:65:4a:f7:84:
         75:c7:74:1a:98:9e:70:75:bf:ca:87:87:9a:39:9a:68:64:41:
         22:01:1b:da:dc:e4:59:8b:78:62:25:b1:9e:3a:70:ba:aa:b0:
         87:cd:bf:e5:7b:c4:e6:04:16:ba:d2:ba:a0:c0:67:f9:fc:0b:
         e2:46:a9:9a:2b:10:85:6d:73:72:0b:e7:7e:52:16:fd:33:2e:
         4d:65:9e:f9:ca:17:01:ab:14:6a:3c:5d:37:53:8f:df:32:f7:
         91:b2:97:77:c5:96:18:a3:53:01:73:c9:9a:96:12:e0:1b:00:
         0c:8d:c8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:38 2026 by rpki-client