Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File:                     CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier:          qXqOArXI8Vd4wLVkI68BVKh6/9cRh9M73Bd0puJ0/Kc=
Subject key identifier:   99:A8:9C:38:26:D9:35:E6:39:C3:C7:13:81:F9:B5:52:6A:1E:C8:2A
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer:       /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial:       01973D6459165EEE06407D46E91400B05022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number:          0A19
Signing time:             Thu 05 Jun 2025 00:01:15 +0000
Manifest this update:     Thu 05 Jun 2025 00:01:15 +0000
Manifest next update:     Fri 06 Jun 2025 00:01:15 +0000
Files and hashes:         1: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: 0CsxhKmmEKi2vHJ71tOg/wUnVd3WzmPy7l0KVnLf+rY=)
                          2: I8Nmh37tFNFzjXmw0t9bEIAE8Eo.roa (hash: YNeRziRUhmhLTOn+PVSXP3A/jlP0J/ORfeC6qUdAH/s=)
                          3: hrEzN0ov7R8-CBntuFI6TOZ5J3k.roa (hash: F4t//75g9YseMJLav5TNry1YdPvomuVlb22mZdbwTXk=)
                          4: im9G3vS0k47RgPfIpas56TSYtkk.roa (hash: pZ2iLKA7r+EiY8r8ECrplg1OXK8MBjBC9bzHQ9geb7I=)
                          5: zVUWguf5pjghejhRd7Ny0TVMo5E.roa (hash: NjWrzzFudTL38mC/sj/7bSyVSobc+7VuDZH9qGUDXkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 21:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3d:64:59:16:5e:ee:06:40:7d:46:e9:14:00:b0:50:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
        Validity
            Not Before: Jun  5 00:01:15 2025 GMT
            Not After : Jun  6 00:01:15 2025 GMT
        Subject: CN=99a89c3826d935e639c3c71381f9b5526a1ec82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:48:fb:75:63:f7:00:bc:86:28:12:5b:4f:
                    e9:2f:e1:28:77:6e:01:d1:ff:f3:43:4e:bc:e7:aa:
                    38:bb:79:c8:b0:9e:c9:28:f1:59:60:9f:4d:0b:08:
                    95:3a:09:af:78:c9:94:3f:1b:18:5c:58:d8:fe:33:
                    e0:19:0e:c8:3c:8d:4e:d7:7d:91:ee:a1:4b:f6:83:
                    33:7a:51:42:d8:03:aa:c1:53:86:b2:85:aa:fc:21:
                    14:63:ee:9b:14:06:20:6c:7c:48:e6:f1:73:e7:52:
                    0d:4a:ff:00:73:88:5f:94:6b:50:12:37:86:ee:56:
                    11:e7:35:e4:2b:67:12:95:39:36:06:9f:f4:c2:7c:
                    33:ae:83:c2:6f:9b:01:0a:60:4a:ef:d0:7f:61:f9:
                    78:8d:13:bc:ab:18:b2:91:44:d9:c9:67:73:53:72:
                    e5:83:d4:c2:da:59:0c:7f:20:11:5b:e1:1e:70:57:
                    86:a9:8a:7c:09:b8:68:6c:38:36:4a:d0:cb:c3:ac:
                    3e:b8:ae:0e:c8:cd:16:5d:d8:d6:4a:11:bc:40:93:
                    87:27:42:67:4a:04:b2:8c:5f:40:da:e5:ea:9e:c1:
                    21:21:60:fd:e0:72:37:84:08:e3:79:46:11:9d:51:
                    b2:17:ae:48:f1:c7:0e:59:c1:26:9a:38:fa:16:29:
                    65:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A8:9C:38:26:D9:35:E6:39:C3:C7:13:81:F9:B5:52:6A:1E:C8:2A
            X509v3 Authority Key Identifier:
                keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d1:f4:e4:f1:8f:10:84:06:7c:89:26:44:30:dc:56:01:46:
         16:fa:08:bb:b2:05:22:57:6b:7f:60:e0:a5:68:e1:cf:87:15:
         4a:93:7c:de:9c:46:08:79:b2:20:b6:77:43:2b:45:b5:6f:26:
         33:5f:ac:cf:3c:95:9c:e4:72:b7:60:84:b4:96:a5:31:b3:aa:
         30:f1:5f:a8:66:24:d5:42:59:e3:ad:d2:14:8b:da:b6:a5:2f:
         5e:73:ea:8b:f7:33:d1:03:b6:87:aa:4e:7a:d8:13:1d:bc:9b:
         8c:1e:e5:cf:32:14:89:61:53:75:a2:2d:1f:a6:82:79:80:9b:
         53:97:d9:b7:d8:14:b3:3b:27:6b:a2:71:f0:fe:ec:5b:e4:0e:
         08:68:de:fc:2d:a7:85:7d:78:5a:dd:70:37:eb:a6:f1:32:e7:
         ec:5c:3a:2b:f7:08:fd:e1:8b:13:2f:5c:44:fc:ee:d8:71:8f:
         83:5f:9c:90:cc:18:61:80:6f:e2:05:47:31:c8:0e:38:6c:c9:
         3c:52:7e:7d:30:b6:7e:cd:a2:31:a5:43:da:e0:f9:da:9d:fb:
         7d:d1:b5:e4:84:da:4e:ff:0f:00:00:ea:70:e0:b5:9a:21:28:
         76:91:ee:20:2c:ae:4f:4c:2d:d5:a1:2e:a3:5c:f0:b6:f1:f9:
         c9:6f:3f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 06:50:31 2025 by rpki-client