Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft
File:                     cybGPef_oxXiAl1pZw11dSWf98c.mft (raw, json)
Hash identifier:          y1eaJEya3wvEt8Vy+zic+AJqk6Z6tbmJKjfsTf6my7Y=
Subject key identifier:   3F:C7:0F:CE:14:67:78:87:03:4B:62:A0:34:43:C3:B7:D1:DF:47:C1
Authority key identifier: 73:26:C6:3D:E7:FF:A3:15:E2:02:5D:69:67:0D:75:75:25:9F:F7:C7
Certificate issuer:       /CN=7326c63de7ffa315e2025d69670d7575259ff7c7
Certificate serial:       0197B70E79B8572DF22C948EEEE858314A37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft
Manifest number:          05F3
Signing time:             Sat 28 Jun 2025 15:01:08 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:08 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:08 +0000
Files and hashes:         1: cybGPef_oxXiAl1pZw11dSWf98c.crl (hash: cVXADgdXsJY+MSZLVuw90I78S9qgo7AEal/NkSIzmXI=)
                          2: ysTrPVZVxXb25-RsUjAAsVm9Fhs.roa (hash: wMiYBEmRQakoObcIju3eVEr8bEdfvqRbzn+KIxKAXDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:79:b8:57:2d:f2:2c:94:8e:ee:e8:58:31:4a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7326c63de7ffa315e2025d69670d7575259ff7c7
        Validity
            Not Before: Jun 28 15:01:08 2025 GMT
            Not After : Jun 29 15:01:08 2025 GMT
        Subject: CN=3fc70fce14677887034b62a03443c3b7d1df47c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b0:95:e6:a9:07:3a:c6:ab:ca:fe:3a:1c:78:
                    92:3a:fe:f2:7d:74:fa:21:36:c9:ad:b8:11:d7:ed:
                    e8:a0:7f:68:51:de:dd:84:06:29:ed:29:7e:9b:c6:
                    bf:4a:e4:d2:59:00:08:5d:57:04:27:7b:c3:5a:72:
                    6a:7f:ca:bb:30:0c:6f:f0:c4:d2:31:22:52:3a:04:
                    79:7e:c5:aa:8d:34:5b:12:7e:50:cb:34:4b:63:b8:
                    15:27:a8:79:ee:a5:6e:4d:0a:8d:e5:b3:8a:d7:ec:
                    0a:b1:99:89:d6:62:8f:f3:6b:ec:53:a9:ab:10:fa:
                    ac:22:44:3b:fb:5c:66:46:fc:3e:a1:5b:da:7e:4b:
                    a8:36:10:4d:6b:6f:6a:98:3a:6f:61:4f:71:21:e1:
                    14:22:bb:30:dd:47:38:34:ef:62:69:d5:90:5f:6e:
                    6f:a4:59:4e:b6:10:40:5f:78:13:b8:7d:5a:6c:d9:
                    7a:76:b7:0d:54:46:a8:28:2b:ec:c3:34:48:4f:24:
                    d8:50:1b:f3:58:18:f5:ea:23:6d:ff:d5:4a:f5:00:
                    a0:ba:a7:e9:ba:55:ae:fa:0b:1b:80:4e:14:1b:e8:
                    bf:f1:f6:98:63:37:58:48:75:93:c3:2e:03:95:58:
                    13:e3:dd:a1:3f:6a:ca:97:ed:b5:e9:fa:e7:91:5f:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C7:0F:CE:14:67:78:87:03:4B:62:A0:34:43:C3:B7:D1:DF:47:C1
            X509v3 Authority Key Identifier:
                keyid:73:26:C6:3D:E7:FF:A3:15:E2:02:5D:69:67:0D:75:75:25:9F:F7:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:cc:3c:eb:68:97:12:03:a7:a6:df:35:48:b8:34:97:9b:b3:
         13:7d:62:5d:15:7e:29:39:07:21:27:5d:0e:fd:d1:0f:6e:dd:
         79:98:48:71:c6:9f:37:fb:a3:41:e5:c5:8a:d0:17:8b:dc:ef:
         6b:37:40:59:1a:b1:70:e7:ba:40:57:ea:83:79:fa:04:ce:91:
         d4:85:43:b3:04:b8:d6:89:1a:d1:6a:b7:70:16:6b:c7:5e:dc:
         94:ed:b3:a6:c8:96:3d:e7:12:4e:78:7a:4d:4c:ea:b3:66:96:
         45:d5:48:c0:1f:78:9a:7c:0a:92:36:86:a6:b4:49:66:81:14:
         6c:20:ea:d1:52:03:6a:74:80:0c:f5:84:83:8c:62:d6:1a:9e:
         c6:3f:24:ee:d4:25:26:98:22:20:5e:37:16:cb:b0:6c:c7:2d:
         dd:e0:e9:11:af:ae:52:44:b6:c1:70:bd:bf:f3:c5:fb:8d:1c:
         4a:ea:1f:15:aa:52:1e:2e:bd:91:b6:61:cb:70:70:2e:b1:3f:
         b2:23:9d:cb:99:49:47:e4:af:90:34:bd:be:dc:b4:42:ad:e6:
         0f:75:06:9c:af:28:53:cd:e0:7c:c8:e5:4a:db:d8:17:47:70:
         40:35:d7:c8:51:20:a6:cb:23:67:fa:31:ae:1d:ed:7c:14:e2:
         8e:6f:c8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:23 2025 by rpki-client