Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft
File:                     cybGPef_oxXiAl1pZw11dSWf98c.mft (raw, json)
Hash identifier:          ykcsykSCwNGsz4j2lm2GQblRw4vspQNmgD4i0THmoeo=
Subject key identifier:   05:8C:86:FB:BA:9D:A8:77:CA:4E:C1:A4:2B:9E:02:58:9F:EA:D4:00
Authority key identifier: 73:26:C6:3D:E7:FF:A3:15:E2:02:5D:69:67:0D:75:75:25:9F:F7:C7
Certificate issuer:       /CN=7326c63de7ffa315e2025d69670d7575259ff7c7
Certificate serial:       019D29618777B5FD0D3117350EF3C217E8C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft
Manifest number:          08C6
Signing time:             Thu 26 Mar 2026 09:02:30 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:30 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:30 +0000
Files and hashes:         1: GUuJhcl8f0M0h59VihggyBetMq0.roa (hash: A3VUCATxRPVh4qDk02Ww7oGbu3Bfo6JMWCxecH//PTY=)
                          2: cybGPef_oxXiAl1pZw11dSWf98c.crl (hash: av17gqUubwcj2Qt1eIAOl0sKY6Rl7nKj7MgTCZC4fgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:87:77:b5:fd:0d:31:17:35:0e:f3:c2:17:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7326c63de7ffa315e2025d69670d7575259ff7c7
        Validity
            Not Before: Mar 26 09:02:30 2026 GMT
            Not After : Mar 27 09:02:30 2026 GMT
        Subject: CN=058c86fbba9da877ca4ec1a42b9e02589fead400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:eb:e8:b9:b4:1a:fc:58:17:bf:dd:92:08:
                    42:24:4f:aa:3c:26:d2:27:18:e7:ef:48:3b:be:ef:
                    70:86:e0:de:7e:59:8e:37:4f:63:a5:f9:a5:79:58:
                    c5:82:f8:65:b6:55:1c:0e:94:cd:70:25:2d:41:73:
                    b6:9d:35:c7:7a:1c:3d:40:4f:60:6c:af:72:0b:0b:
                    62:37:74:68:5d:41:30:b7:e9:65:b9:d2:51:8c:30:
                    b6:6b:fb:46:56:21:4a:f1:ac:97:17:ea:03:d7:8c:
                    81:78:aa:39:2d:e1:4d:e1:33:54:54:42:a6:02:0c:
                    26:c1:f6:d3:54:0b:d1:04:aa:bc:7d:d7:fc:a9:da:
                    f5:c6:fe:91:5a:21:cb:6b:40:e5:a2:29:7d:5c:c4:
                    6d:11:79:40:77:33:18:0b:7e:99:00:5a:e1:12:84:
                    f1:1a:f1:b0:eb:6b:b5:8f:63:e8:e3:59:d4:41:c4:
                    81:9e:d6:ad:64:6d:84:f4:a0:4d:e3:48:3f:77:43:
                    12:8b:a3:81:c0:5a:24:de:c4:65:ee:f2:c8:bc:55:
                    4a:36:3e:1f:23:98:d6:e8:1f:df:c3:d9:49:ab:a7:
                    5a:8a:4b:8f:90:14:ad:21:8d:67:8a:4c:0e:c2:e5:
                    19:44:3e:bd:40:d7:c6:24:8c:2e:9d:92:ba:88:1c:
                    ec:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8C:86:FB:BA:9D:A8:77:CA:4E:C1:A4:2B:9E:02:58:9F:EA:D4:00
            X509v3 Authority Key Identifier:
                keyid:73:26:C6:3D:E7:FF:A3:15:E2:02:5D:69:67:0D:75:75:25:9F:F7:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5c:0d:1e:cc:8e:9d:b0:1a:3a:fa:ea:de:95:6c:04:81:ef:
         86:6b:a5:e2:b5:30:af:5c:1c:2a:3d:41:b8:53:46:b9:70:0c:
         71:c7:dc:86:be:f9:86:98:3a:6a:d0:6c:61:02:87:c2:fd:39:
         85:40:c4:b3:03:4d:62:87:75:43:7c:99:63:6d:4a:04:1b:b5:
         40:da:95:05:08:9b:4a:dc:1b:03:e3:d0:35:e9:95:95:70:40:
         57:1a:d6:bc:cd:e7:61:a0:9b:b7:f5:63:9b:76:eb:ad:e9:22:
         fd:e0:86:7c:89:1a:14:ec:0b:62:62:4f:f1:90:5b:32:87:c5:
         4a:51:46:52:9b:2d:15:da:3e:2e:22:9f:77:68:ca:b7:66:f9:
         ea:3c:9c:ad:cf:32:72:d6:11:23:8b:c4:41:21:21:bd:8c:99:
         7f:aa:ff:ab:1d:f0:73:d5:f8:b4:54:cd:18:51:c7:d4:5e:f3:
         bc:c1:4e:13:67:ce:c0:96:dc:14:1e:3f:2f:bb:56:95:0a:ee:
         ff:70:ca:5e:7a:e4:3f:76:10:3a:0c:2f:89:6f:94:63:45:f1:
         b4:e3:b9:41:1c:36:bc:84:d2:b5:45:48:8a:66:81:23:ce:fb:
         2d:e3:38:26:50:48:70:42:94:2c:33:67:88:ae:76:ae:06:e0:
         ec:2c:f1:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYYd3tf0NMRc1DvPCF+jAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMjZjNjNkZTdmZmEzMTVlMjAyNWQ2OTY3MGQ3NTc1MjU5
ZmY3YzcwHhcNMjYwMzI2MDkwMjMwWhcNMjYwMzI3MDkwMjMwWjAzMTEwLwYDVQQD
EygwNThjODZmYmJhOWRhODc3Y2E0ZWMxYTQyYjllMDI1ODlmZWFkNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2vr6Lm0GvxYF7/dkghCJE+qPCbS
Jxjn70g7vu9whuDeflmON09jpfmleVjFgvhltlUcDpTNcCUtQXO2nTXHehw9QE9g
bK9yCwtiN3RoXUEwt+lludJRjDC2a/tGViFK8ayXF+oD14yBeKo5LeFN4TNUVEKm
AgwmwfbTVAvRBKq8fdf8qdr1xv6RWiHLa0Dloil9XMRtEXlAdzMYC36ZAFrhEoTx
GvGw62u1j2Po41nUQcSBntatZG2E9KBN40g/d0MSi6OBwFok3sRl7vLIvFVKNj4f
I5jW6B/fw9lJq6daikuPkBStIY1nikwOwuUZRD69QNfGJIwunZK6iBzsfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWMhvu6nah3yk7BpCueAlif6tQAMB8GA1UdIwQY
MBaAFHMmxj3n/6MV4gJdaWcNdXUln/fHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3liR1BlZl9veFhpQWwxcFp3MTFkU1dmOThjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xZGNlYTktYjNhMS00MGY2LWI2ZmYt
Y2RkM2U1NWVhNGZjLzEvY3liR1BlZl9veFhpQWwxcFp3MTFkU1dmOThjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8xZGNlYTktYjNhMS00MGY2LWI2ZmYtY2RkM2U1NWVhNGZj
LzEvY3liR1BlZl9veFhpQWwxcFp3MTFkU1dmOThjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1wNHsyO
nbAaOvrq3pVsBIHvhmul4rUwr1wcKj1BuFNGuXAMccfchr75hpg6atBsYQKHwv05
hUDEswNNYod1Q3yZY21KBBu1QNqVBQibStwbA+PQNemVlXBAVxrWvM3nYaCbt/Vj
m3brreki/eCGfIkaFOwLYmJP8ZBbMofFSlFGUpstFdo+LiKfd2jKt2b56jycrc8y
ctYRI4vEQSEhvYyZf6r/qx3wc9X4tFTNGFHH1F7zvMFOE2fOwJbcFB4/L7tWlQru
/3DKXnrkP3YQOgwviW+UY0XxtOO5QRw2vITStUVIimaBI877LeM4JlBIcEKULDNn
iK52rgbg7CzxbA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:14:56 2026 by rpki-client