Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File:                     Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier:          qlaLJPufAiYgr9h1HvXbOxwRxlX6NJUOjpVl2VHBcSs=
Subject key identifier:   88:B5:8B:80:98:67:71:B6:2E:B7:E0:75:75:8E:13:AF:D9:08:28:8B
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer:       /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial:       01A0005CDE47EC8077463034BE5CB45AD533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number:          17CB
Signing time:             Fri 14 Aug 2026 13:01:21 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:21 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:21 +0000
Files and hashes:         1: 98w4EMI8QkhWIDJ_tUXvrrCXD2w.roa (hash: fm9WJHd48Zrl9TNehwCEgvrHjrg07KinzQkYGEQj/xw=)
                          2: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: 5vRe9VA7SRPRPAVVLl6ojS2xQUmrdGSOIxi/2+4rbng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:de:47:ec:80:77:46:30:34:be:5c:b4:5a:d5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
        Validity
            Not Before: Aug 14 13:01:21 2026 GMT
            Not After : Aug 15 13:01:21 2026 GMT
        Subject: CN=88b58b80986771b62eb7e075758e13afd908288b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:25:ae:d5:c5:9a:42:4e:ab:b0:13:17:0f:
                    01:c9:ee:93:4a:b1:96:f2:df:78:d9:7c:b3:05:1b:
                    95:ab:46:b5:87:ca:38:ca:5f:89:32:be:63:55:40:
                    73:5c:92:12:61:84:93:ed:f1:2d:81:9f:82:68:85:
                    12:83:2d:02:23:68:1e:e0:d9:f5:ea:b2:36:af:03:
                    45:21:81:86:a2:d9:b2:10:94:46:cb:25:ac:25:1e:
                    9f:73:ee:6d:52:42:16:58:75:69:76:d3:99:8a:1d:
                    57:5a:c9:78:38:19:50:95:f6:e3:4f:e1:8c:42:8e:
                    26:d8:03:c2:41:60:0a:99:59:36:de:99:aa:0e:55:
                    87:e3:7d:5e:81:7d:3e:b5:1c:f0:60:3c:dd:66:93:
                    42:dd:b4:f1:1b:5e:c7:ad:f7:b1:ef:ca:46:a4:67:
                    be:89:9f:84:96:f4:72:39:02:36:a4:8c:56:cd:4f:
                    e9:6d:b4:2f:2a:d8:14:8c:f7:cc:cb:7a:57:f8:af:
                    88:0e:a7:a8:8e:ad:ce:6f:f5:70:79:a1:ff:25:1a:
                    d9:dc:ae:77:f2:83:1a:8b:80:77:4b:b7:73:14:6e:
                    7b:63:55:bf:97:ed:70:f3:0a:03:3d:21:83:a3:97:
                    99:85:72:fb:9f:f0:67:b6:73:b9:02:6a:03:c3:7d:
                    f4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B5:8B:80:98:67:71:B6:2E:B7:E0:75:75:8E:13:AF:D9:08:28:8B
            X509v3 Authority Key Identifier:
                keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d9:b6:75:5a:c1:e8:9d:c8:f7:fb:21:db:a8:0c:55:e8:ee:
         8e:c1:a6:fe:1e:c7:e4:bd:23:cc:46:68:f1:ad:81:9c:27:a3:
         fa:3f:15:31:d0:3e:21:1f:4b:c0:ad:44:88:57:b8:8d:c9:4a:
         22:62:2a:92:f0:5e:5b:a5:43:58:5c:e8:8b:24:a8:4f:67:47:
         b1:38:8b:d4:8d:8f:37:44:b2:7c:10:e2:b1:73:32:4c:74:72:
         70:a9:19:c4:a0:16:b0:d9:63:fc:d1:a9:1b:bf:c6:8a:15:7d:
         7e:a4:be:60:59:8d:3b:3a:bf:ec:45:2c:8a:4d:d1:ce:89:02:
         3b:25:f9:ed:ed:ba:ee:fc:93:c7:2a:e1:d8:f7:b9:de:ce:26:
         1f:14:1e:6f:b9:10:c2:b4:38:32:99:d6:c3:b5:cf:5c:08:12:
         19:65:56:44:1d:2e:fe:fc:25:11:a0:4e:da:7b:0f:ae:92:1c:
         05:91:14:54:65:25:5d:2a:6d:81:d1:bb:4a:c8:c1:ff:d5:ca:
         88:c8:4e:75:21:fd:a7:9b:ba:9c:f0:12:b5:9b:9e:20:bb:40:
         2d:22:5f:27:29:cd:40:ae:e4:97:0e:1b:86:81:af:3a:21:8d:
         18:c5:bb:4b:b7:3a:51:64:49:d0:a0:7c:8d:4f:24:45:47:45:
         35:52:53:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXN5H7IB3RjA0vly0WtUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMmNlN2ZkMmY1YjFiNzk3NTdjODk3M2FlM2Y3YjBiZTY4
NjM4NWIwHhcNMjYwODE0MTMwMTIxWhcNMjYwODE1MTMwMTIxWjAzMTEwLwYDVQQD
Eyg4OGI1OGI4MDk4Njc3MWI2MmViN2UwNzU3NThlMTNhZmQ5MDgyODhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4wlrtXFmkJOq7ATFw8Bye6TSrGW
8t942XyzBRuVq0a1h8o4yl+JMr5jVUBzXJISYYST7fEtgZ+CaIUSgy0CI2ge4Nn1
6rI2rwNFIYGGotmyEJRGyyWsJR6fc+5tUkIWWHVpdtOZih1XWsl4OBlQlfbjT+GM
Qo4m2APCQWAKmVk23pmqDlWH431egX0+tRzwYDzdZpNC3bTxG17Hrfex78pGpGe+
iZ+ElvRyOQI2pIxWzU/pbbQvKtgUjPfMy3pX+K+IDqeojq3Ob/VweaH/JRrZ3K53
8oMai4B3S7dzFG57Y1W/l+1w8woDPSGDo5eZhXL7n/BntnO5AmoDw330SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIi1i4CYZ3G2LrfgdXWOE6/ZCCiLMB8GA1UdIwQY
MBaAFAss5/0vWxt5dXyJc64/ewvmhjhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMt
YTY0MTA5MTllODk4LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMtYTY0MTA5MTllODk4
LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNm2dVrB
6J3I9/sh26gMVejujsGm/h7H5L0jzEZo8a2BnCej+j8VMdA+IR9LwK1EiFe4jclK
ImIqkvBeW6VDWFzoiySoT2dHsTiL1I2PN0SyfBDisXMyTHRycKkZxKAWsNlj/NGp
G7/GihV9fqS+YFmNOzq/7EUsik3RzokCOyX57e267vyTxyrh2Pe53s4mHxQeb7kQ
wrQ4MpnWw7XPXAgSGWVWRB0u/vwlEaBO2nsPrpIcBZEUVGUlXSptgdG7SsjB/9XK
iMhOdSH9p5u6nPAStZueILtALSJfJynNQK7klw4bhoGvOiGNGMW7S7c6UWRJ0KB8
jU8kRUdFNVJTCQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:13 2026 by rpki-client