Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
File:                     CyOsILweRYXE_UzI57yXYzG4XG4.mft (raw, json)
Hash identifier:          Z+nQ2X5QbdN/MpXTgkKcs9WMGJBp3H1Cl/djX5wcEUg=
Subject key identifier:   EF:CA:2D:24:5A:B2:E2:65:B0:EC:29:E0:95:FE:71:4A:65:1D:B2:0E
Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
Certificate issuer:       /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Certificate serial:       019E1CB4E67630C070D3651DEBAE44AD0D74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
Manifest number:          1421
Signing time:             Tue 12 May 2026 15:01:17 +0000
Manifest this update:     Tue 12 May 2026 15:01:17 +0000
Manifest next update:     Wed 13 May 2026 15:01:17 +0000
Files and hashes:         1: CyOsILweRYXE_UzI57yXYzG4XG4.crl (hash: g9rAuB74cFw/4duU919Rh22y7pJ70A24gDbn7wppVVo=)
                          2: eXexMnsXhpiwYKh6Uvz65hPWHAs.roa (hash: Sv4osXCj3qnFKewpXCIs6tgLO2bpxFbqyIwOzHIdMNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:e6:76:30:c0:70:d3:65:1d:eb:ae:44:ad:0d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
        Validity
            Not Before: May 12 15:01:17 2026 GMT
            Not After : May 13 15:01:17 2026 GMT
        Subject: CN=efca2d245ab2e265b0ec29e095fe714a651db20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:13:ab:da:d9:69:05:30:ee:e3:d8:22:95:
                    fa:be:11:5c:ba:db:64:a7:53:b0:55:7f:de:fe:5f:
                    d1:15:e1:e8:23:ff:f4:8b:bd:4a:62:e2:f2:c5:45:
                    04:6f:07:33:6b:b6:cc:97:73:3d:f8:58:e3:52:bf:
                    82:5f:7c:d8:0f:d1:ab:3f:a1:8a:25:dc:1a:38:5d:
                    91:7b:08:56:09:9c:42:09:38:0e:43:e9:1c:71:87:
                    db:c0:00:c8:03:f5:8b:7c:e1:76:2d:38:52:60:a3:
                    05:7f:14:22:5d:20:c1:75:2d:d5:89:9a:c4:76:18:
                    e6:2d:f6:7e:3a:1e:e3:19:3a:36:34:be:83:10:a6:
                    62:ce:2e:df:8f:b9:e8:a1:a2:3f:48:6f:96:90:3e:
                    d2:db:93:b5:15:ee:49:92:cc:30:dc:36:69:30:26:
                    7d:50:80:86:59:07:aa:b7:ed:74:af:d8:09:fc:e1:
                    a7:70:c3:ea:b9:07:c9:2b:08:5f:89:72:8a:5d:cd:
                    53:a4:19:11:69:e1:ef:12:95:cb:86:66:73:30:bf:
                    4f:33:67:6f:7a:40:26:dc:70:64:43:60:79:d8:6c:
                    53:4a:1e:a9:db:0c:37:ab:f5:ce:3a:2d:c9:d4:fd:
                    a8:54:d2:6b:cd:e2:7d:35:9c:17:9a:2a:70:0c:7b:
                    06:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CA:2D:24:5A:B2:E2:65:B0:EC:29:E0:95:FE:71:4A:65:1D:B2:0E
            X509v3 Authority Key Identifier:
                keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4e:96:5c:9b:34:5e:5c:a6:7d:f6:e2:f4:ed:d0:b7:1f:ba:
         5d:84:46:be:71:da:f8:21:d3:08:52:80:9f:d5:56:9d:0e:96:
         00:52:b1:38:bd:f6:9c:23:28:eb:c1:49:b6:38:e3:6c:aa:85:
         17:d7:db:f2:37:86:f2:89:2a:8c:bd:ce:c6:46:00:54:fe:12:
         5b:eb:97:77:bc:4f:12:19:d3:c7:77:1d:9f:4d:71:c8:00:25:
         ab:a6:16:a7:f1:2f:cd:aa:b4:2f:95:aa:52:84:f5:df:a5:77:
         a4:d4:6f:8c:90:d9:3f:8c:a5:bd:78:7d:fe:eb:74:83:cf:67:
         82:5f:c6:fb:46:af:9e:3d:dc:57:1b:b4:d7:02:25:06:74:6c:
         67:78:d1:be:21:93:6d:a8:97:38:73:78:34:1b:75:aa:2b:18:
         9c:04:ce:cb:78:bb:a1:01:72:be:67:d8:d5:da:87:2f:62:2c:
         e7:56:cf:a2:51:d8:0c:29:d4:f7:4e:ab:77:a6:bd:7d:8d:18:
         bb:25:95:e5:31:26:c3:f7:10:e9:57:50:8d:db:15:5b:27:cc:
         99:8b:05:e2:96:6f:a8:f4:e4:9a:be:c8:c1:f6:70:66:46:f2:
         10:ca:11:7d:ad:61:64:0b:a3:be:2f:a3:1e:8a:6b:85:30:49:
         9a:10:e2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:55 2026 by rpki-client