Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File:                     CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier:          bxCxmTWEcMOZ9vuKHeYiWMS8mEbdFw4Ln4CzOTjupN8=
Subject key identifier:   C2:EB:EB:7B:B3:05:4E:12:CD:72:C6:AB:54:EC:21:E7:9E:18:64:91
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer:       /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial:       019A09DC5FE3B032B9DAB24C7264994A648F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number:          0B93
Signing time:             Wed 22 Oct 2025 03:00:28 +0000
Manifest this update:     Wed 22 Oct 2025 03:00:28 +0000
Manifest next update:     Thu 23 Oct 2025 03:00:28 +0000
Files and hashes:         1: AtIP5ngZsZvLRLdKp4SplghlszA.roa (hash: YOwr+/qAiLn7cRZe8CWbtE+p57/1ofu78ENjFkLRmHY=)
                          2: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: utkchZiN5ynQQQ/6TFXu8BvGiev6k+MQPTvAFzwN5+M=)
                          3: I8Nmh37tFNFzjXmw0t9bEIAE8Eo.roa (hash: YNeRziRUhmhLTOn+PVSXP3A/jlP0J/ORfeC6qUdAH/s=)
                          4: JLrvN6gy-l8oqZZ6A2f-EeS0QQc.roa (hash: kxEu7XapzO+8FKwUNiG2TUK6bp7351KlBBspHS3oFSo=)
                          5: MGVL3PWcg672eUJnE3OmpM02shQ.roa (hash: jaWN7PLFw0laWd8mU2a0x2xqPQpnAcAJ/82ZDzopnzE=)
                          6: c4yvyMKIOxEnq8qnOJowF2Jzm7s.roa (hash: s8IHGFPKGHVe+UT4NM56ryEb8GnNOyNh3KVfvOyTvrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:09:dc:5f:e3:b0:32:b9:da:b2:4c:72:64:99:4a:64:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
        Validity
            Not Before: Oct 22 03:00:28 2025 GMT
            Not After : Oct 23 03:00:28 2025 GMT
        Subject: CN=c2ebeb7bb3054e12cd72c6ab54ec21e79e186491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:c4:1f:71:63:a8:73:d1:83:a7:ae:80:57:
                    1e:23:59:a9:34:ec:b3:65:0a:ea:49:42:ab:c1:9b:
                    c4:59:80:2f:c9:c2:75:3a:e8:b4:75:c9:24:8c:8e:
                    78:3a:cc:2b:18:37:52:df:9f:45:ce:34:e4:eb:16:
                    66:0a:d3:f4:28:58:19:8b:99:2a:ef:53:3a:ec:59:
                    d2:ab:6e:11:0b:41:79:4d:98:af:16:b2:a1:3e:a8:
                    27:02:ac:74:93:57:4a:08:72:82:06:2f:0c:a9:1d:
                    59:db:86:94:21:9c:96:ef:c1:3b:d4:b8:79:97:fc:
                    3c:29:f3:0c:3f:b8:ef:ca:77:ae:f1:d7:c0:74:55:
                    70:5d:ea:65:4f:29:87:1e:5b:98:9f:4c:2d:fd:da:
                    7c:38:c8:76:b8:87:88:19:4c:5b:82:b4:71:44:e7:
                    31:35:ca:ad:22:4e:61:27:03:8e:62:42:28:6c:6f:
                    8c:e7:43:a7:06:4d:4d:ae:27:75:9b:6b:9f:30:90:
                    63:ad:e2:d0:f9:a4:9f:92:a9:24:4c:10:34:79:e4:
                    d7:7a:23:aa:e4:21:62:fe:ed:21:3e:d3:d2:07:c8:
                    86:2f:c1:ed:64:70:f3:23:ab:04:2e:4a:8f:a2:db:
                    6e:15:b1:a8:15:23:b0:5a:fd:36:d7:7a:46:35:5e:
                    6c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EB:EB:7B:B3:05:4E:12:CD:72:C6:AB:54:EC:21:E7:9E:18:64:91
            X509v3 Authority Key Identifier:
                keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d2:e8:52:18:31:3a:ee:97:57:42:98:e6:b2:26:d3:13:53:
         64:f0:8c:7e:01:de:b3:c4:8d:65:c4:0f:17:30:15:8d:6b:19:
         75:4e:dd:23:5d:88:a0:ac:e2:60:59:25:d2:06:91:37:57:20:
         5b:ff:58:15:40:4e:73:7f:01:68:68:23:0d:bd:51:e9:b9:39:
         1d:af:5d:d4:c3:ad:7c:be:64:0d:a4:10:e1:cd:97:38:77:06:
         0b:d6:2d:70:c0:8f:9d:ce:1f:92:3d:5c:69:7c:5f:95:46:ca:
         f0:a7:ce:11:5f:ba:22:89:f4:da:d5:98:a7:02:21:a8:82:46:
         16:20:01:77:d7:50:7e:22:b6:ba:b8:e8:23:14:df:38:57:95:
         60:6f:93:c2:31:97:c0:3a:87:f9:07:f1:77:47:ca:e4:82:9e:
         8a:4c:df:30:82:05:e4:d6:f2:86:22:a3:25:4a:56:e6:a2:7d:
         5d:a1:87:b8:78:11:5e:3b:bf:58:50:8e:30:40:54:cf:7a:e5:
         38:0e:19:d1:c6:e9:27:f4:2c:c1:8d:ff:8c:16:bd:50:ef:54:
         ae:0f:16:de:c9:d1:f3:07:14:a9:e3:06:d8:1b:db:21:21:b4:
         98:52:0d:05:88:c8:b5:23:4f:31:8f:cd:00:fb:04:62:c2:c6:
         bb:5f:4e:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoJ3F/jsDK52rJMcmSZSmSPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy
ODhmMTMwHhcNMjUxMDIyMDMwMDI4WhcNMjUxMDIzMDMwMDI4WjAzMTEwLwYDVQQD
EyhjMmViZWI3YmIzMDU0ZTEyY2Q3MmM2YWI1NGVjMjFlNzllMTg2NDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7/EH3FjqHPRg6eugFceI1mpNOyz
ZQrqSUKrwZvEWYAvycJ1Oui0dckkjI54OswrGDdS359FzjTk6xZmCtP0KFgZi5kq
71M67FnSq24RC0F5TZivFrKhPqgnAqx0k1dKCHKCBi8MqR1Z24aUIZyW78E71Lh5
l/w8KfMMP7jvyneu8dfAdFVwXeplTymHHluYn0wt/dp8OMh2uIeIGUxbgrRxROcx
NcqtIk5hJwOOYkIobG+M50OnBk1Nrid1m2ufMJBjreLQ+aSfkqkkTBA0eeTXeiOq
5CFi/u0hPtPSB8iGL8HtZHDzI6sELkqPottuFbGoFSOwWv0213pGNV5snwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLr63uzBU4SzXLGq1TsIeeeGGSRMB8GA1UdIwQY
MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt
NzM2Nzg5ZWU2ZmQwLzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw
LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNLoUhgx
Ou6XV0KY5rIm0xNTZPCMfgHes8SNZcQPFzAVjWsZdU7dI12IoKziYFkl0gaRN1cg
W/9YFUBOc38BaGgjDb1R6bk5Ha9d1MOtfL5kDaQQ4c2XOHcGC9YtcMCPnc4fkj1c
aXxflUbK8KfOEV+6Ion02tWYpwIhqIJGFiABd9dQfiK2urjoIxTfOFeVYG+TwjGX
wDqH+Qfxd0fK5IKeikzfMIIF5NbyhiKjJUpW5qJ9XaGHuHgRXju/WFCOMEBUz3rl
OA4Z0cbpJ/QswY3/jBa9UO9Urg8W3snR8wcUqeMG2BvbISG0mFINBYjItSNPMY/N
APsEYsLGu19OYg==
-----END CERTIFICATE-----
Generated at Wed Oct 22 06:27:38 2025 by rpki-client