Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft
File:                     cybGPef_oxXiAl1pZw11dSWf98c.mft (raw, json)
Hash identifier:          G8/A8mmygacJtUkhOlrNtnBIziiSytOS62ooNR6Z+YI=
Subject key identifier:   66:A6:C8:F2:25:8E:69:09:95:10:2C:D5:D8:24:51:A5:8C:51:62:F3
Authority key identifier: 73:26:C6:3D:E7:FF:A3:15:E2:02:5D:69:67:0D:75:75:25:9F:F7:C7
Certificate issuer:       /CN=7326c63de7ffa315e2025d69670d7575259ff7c7
Certificate serial:       019D38D3294EC040D16A2AE8C88892BF398D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft
Manifest number:          08CE
Signing time:             Sun 29 Mar 2026 09:00:55 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:55 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:55 +0000
Files and hashes:         1: GUuJhcl8f0M0h59VihggyBetMq0.roa (hash: A3VUCATxRPVh4qDk02Ww7oGbu3Bfo6JMWCxecH//PTY=)
                          2: cybGPef_oxXiAl1pZw11dSWf98c.crl (hash: a5Ptt2021BsAWeldpYdnoeDMfYi/L4ucpdvCHygRvOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:29:4e:c0:40:d1:6a:2a:e8:c8:88:92:bf:39:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7326c63de7ffa315e2025d69670d7575259ff7c7
        Validity
            Not Before: Mar 29 09:00:55 2026 GMT
            Not After : Mar 30 09:00:55 2026 GMT
        Subject: CN=66a6c8f2258e690995102cd5d82451a58c5162f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7d:c0:9d:f4:3d:a1:be:fa:6b:b2:1b:6f:d2:
                    57:88:47:9d:6e:9f:ea:11:af:2b:68:d8:a6:0a:b1:
                    c2:55:05:14:e1:33:1c:b9:b4:72:e5:d3:e3:1e:eb:
                    98:71:bf:a2:a8:fe:d0:ea:cf:ef:00:c6:66:87:65:
                    3d:b0:cd:dc:bf:d9:f4:6b:b4:e4:d5:47:c1:2a:54:
                    c5:49:69:2f:a2:b5:77:c9:11:98:65:da:f1:94:8d:
                    3d:89:db:fc:aa:78:aa:4b:e5:c1:eb:39:24:fc:e8:
                    1d:32:bd:b6:35:92:c1:3c:30:b9:1e:7f:1f:54:fc:
                    e8:18:01:10:0b:c1:39:27:d8:46:75:05:39:0b:80:
                    bd:9c:84:0b:40:64:9e:f1:f9:be:79:52:24:41:95:
                    f2:96:9b:6f:2d:96:08:5f:6e:6f:5a:9d:b0:a6:fa:
                    f2:7c:f6:7d:71:63:ac:86:52:61:5e:a7:f9:40:e6:
                    e4:4a:8e:d3:cc:50:64:3e:c3:f4:6f:89:34:db:68:
                    1d:b5:d1:59:32:19:e4:6f:3d:df:1d:0d:c6:67:b1:
                    13:67:cc:0c:e0:28:d5:d7:4a:81:1e:55:de:13:52:
                    9f:bd:93:03:47:4e:84:68:01:93:98:70:ba:aa:92:
                    6d:d6:58:f7:4d:cf:bb:a0:4d:d0:33:ee:dd:5f:d0:
                    a7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A6:C8:F2:25:8E:69:09:95:10:2C:D5:D8:24:51:A5:8C:51:62:F3
            X509v3 Authority Key Identifier:
                keyid:73:26:C6:3D:E7:FF:A3:15:E2:02:5D:69:67:0D:75:75:25:9F:F7:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:8d:b2:da:79:92:14:19:98:13:0f:94:d5:d5:b8:9c:b7:13:
         0e:7b:73:b1:6d:10:65:90:c1:8d:7a:a3:41:12:9d:53:5c:8c:
         86:7d:82:db:d0:20:08:54:a4:ad:6e:27:0e:ed:05:78:bd:9c:
         1d:51:af:14:ce:46:57:67:ad:de:35:5c:e3:5a:7b:5d:9c:51:
         58:91:3f:ee:74:d7:48:65:69:a3:b9:ae:76:06:dd:3c:d9:b9:
         44:bc:bf:ad:f9:e5:db:f4:b6:e4:23:c8:5b:9a:84:37:25:b4:
         29:6d:17:e3:1d:9d:eb:53:66:71:f0:b3:e5:71:5a:97:1b:db:
         ea:ee:00:95:10:d8:28:74:30:95:ef:d4:0a:09:c4:c7:f5:d5:
         bf:76:60:29:4d:d2:70:4e:47:fa:34:c4:f9:ae:60:f6:f8:28:
         3d:ad:9e:fd:6e:49:67:82:05:80:1d:36:62:18:59:cb:8a:18:
         42:e0:c0:b5:90:c6:20:04:71:f2:50:4d:b7:d5:92:a1:43:cf:
         ae:ad:9e:67:29:02:bb:ee:48:5f:9b:34:fc:c2:d8:21:e6:45:
         85:f9:06:e8:8b:6f:ef:cc:ed:83:b7:c7:21:bd:94:58:c0:88:
         64:9e:ce:f3:f9:ab:60:db:88:3d:e4:df:44:b2:ea:d8:28:9a:
         68:c0:e5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:11 2026 by rpki-client