Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File:                     Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier:          Sg7JLWklLI+yechGHSQvyQ7cCAt59A0ZO5WGGfKdF+g=
Subject key identifier:   35:CE:E7:51:DA:3C:B4:08:E7:91:1B:09:0F:9B:33:37:D8:6E:D1:98
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer:       /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial:       019E30E0E7A02FA8F3654CAF7D153D8BBAE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number:          16DB
Signing time:             Sat 16 May 2026 13:01:46 +0000
Manifest this update:     Sat 16 May 2026 13:01:46 +0000
Manifest next update:     Sun 17 May 2026 13:01:46 +0000
Files and hashes:         1: 98w4EMI8QkhWIDJ_tUXvrrCXD2w.roa (hash: fm9WJHd48Zrl9TNehwCEgvrHjrg07KinzQkYGEQj/xw=)
                          2: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: 3oAXDM6UJZlv/DYm12qPXsDN2JxZJvYmmcb0Hn9Xuvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:e7:a0:2f:a8:f3:65:4c:af:7d:15:3d:8b:ba:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
        Validity
            Not Before: May 16 13:01:46 2026 GMT
            Not After : May 17 13:01:46 2026 GMT
        Subject: CN=35cee751da3cb408e7911b090f9b3337d86ed198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b8:d5:c2:94:d9:9a:16:bf:be:59:57:49:fb:
                    ec:bf:64:0d:39:ec:5a:3b:a6:b9:46:a7:0d:8e:43:
                    18:2b:b6:40:e5:db:6d:f8:dd:07:7f:b1:80:58:65:
                    dc:45:e9:d7:48:5e:09:07:34:27:05:f7:a1:52:2c:
                    6c:a7:06:f9:17:7f:d3:b2:71:6d:eb:fb:dd:b8:e3:
                    25:d9:55:75:9f:c6:91:80:86:ac:58:0e:de:90:33:
                    46:3d:39:ea:07:2f:84:2a:de:88:b7:08:cf:62:0f:
                    3e:a9:16:79:55:09:c1:1a:5c:cb:eb:92:9d:3c:20:
                    ff:19:4f:0f:12:5d:3e:9d:45:89:70:86:45:b2:d3:
                    98:d4:8e:d0:74:36:0d:e6:21:96:dc:4d:b9:9d:ab:
                    8b:7b:8e:e0:fa:97:d5:bb:13:bb:9c:25:45:3f:fc:
                    67:cd:27:8f:74:ea:8b:28:3d:43:85:97:3d:dc:9f:
                    6b:7c:4a:a9:be:23:95:e1:47:0c:05:fb:a0:70:89:
                    dd:07:43:cc:cd:a0:7a:ef:e6:19:86:fa:11:c4:3f:
                    a0:df:9b:80:a7:70:07:1d:27:09:56:da:a6:35:c9:
                    49:02:6f:52:18:0e:53:2e:66:77:78:38:bd:ce:21:
                    1d:37:b2:f7:d7:b3:58:c3:b0:45:35:18:ea:fc:d9:
                    b5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CE:E7:51:DA:3C:B4:08:E7:91:1B:09:0F:9B:33:37:D8:6E:D1:98
            X509v3 Authority Key Identifier:
                keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:47:f9:60:98:81:e0:b4:7e:4f:98:27:07:70:04:cb:b8:d4:
         7c:5e:13:08:46:38:4e:3d:a3:0f:af:1a:bf:90:71:e1:48:ab:
         6a:ff:58:6d:f5:71:54:9e:da:b8:b1:5b:de:5e:ce:f3:38:e3:
         88:c2:c9:09:ac:bd:a7:ca:68:99:bf:9a:99:6e:6a:f3:f4:dc:
         cd:07:c0:3e:5b:4b:47:6a:3a:1e:fb:13:ac:69:32:6a:cd:73:
         79:72:27:39:d6:68:ef:6a:db:8e:ba:09:75:71:22:52:83:29:
         b1:cf:da:2e:f4:e7:d5:42:a8:19:2b:79:92:6f:d5:96:65:d9:
         6c:2a:b9:3f:6d:aa:8d:60:31:0a:42:d1:4b:60:a9:93:e0:6c:
         30:3c:75:20:ad:ab:32:e0:33:51:51:3b:f8:e6:f2:e9:02:04:
         e5:e1:62:7a:76:6f:64:34:8c:0b:38:52:c7:83:7e:6f:0c:18:
         ae:66:ac:e8:dd:fa:8d:66:78:41:a5:f6:d2:77:a1:88:bf:91:
         00:3c:89:e2:df:8f:0e:da:59:3a:78:4e:8e:2b:38:0b:7e:51:
         fa:47:40:c7:ef:c8:b7:58:e8:2d:de:af:75:f8:aa:61:03:ae:
         5f:05:5e:c4:23:48:22:58:6e:ce:f0:2a:c0:4d:b8:32:f9:8f:
         b9:31:e0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:31:26 2026 by rpki-client