Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft
File:                     cybGPef_oxXiAl1pZw11dSWf98c.mft (raw, json)
Hash identifier:          Ac/xh9zrZQ/5NSrdNSyZBe5X2Y3XDEA1WwLmK/CLHe8=
Subject key identifier:   47:DC:B6:80:67:C2:9B:B7:D5:8F:00:88:35:99:02:CA:B4:05:5D:A7
Authority key identifier: 73:26:C6:3D:E7:FF:A3:15:E2:02:5D:69:67:0D:75:75:25:9F:F7:C7
Certificate issuer:       /CN=7326c63de7ffa315e2025d69670d7575259ff7c7
Certificate serial:       0198D6CD0737A91F5835CFA61FD4C6ADCE60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft
Manifest number:          0688
Signing time:             Sat 23 Aug 2025 12:00:17 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:17 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:17 +0000
Files and hashes:         1: cybGPef_oxXiAl1pZw11dSWf98c.crl (hash: n1pgWNVLpTTHd+JHuyThfEF9+fRsF4cW4w9sFMDqdO4=)
                          2: ysTrPVZVxXb25-RsUjAAsVm9Fhs.roa (hash: wMiYBEmRQakoObcIju3eVEr8bEdfvqRbzn+KIxKAXDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:07:37:a9:1f:58:35:cf:a6:1f:d4:c6:ad:ce:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7326c63de7ffa315e2025d69670d7575259ff7c7
        Validity
            Not Before: Aug 23 12:00:17 2025 GMT
            Not After : Aug 24 12:00:17 2025 GMT
        Subject: CN=47dcb68067c29bb7d58f0088359902cab4055da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:2c:6e:48:56:52:63:2b:98:ba:fe:b4:af:
                    c5:fd:4f:dc:59:d3:96:84:d7:35:6f:dd:89:ed:c7:
                    a3:ee:bc:2c:b1:8f:84:30:00:e2:b2:50:39:48:82:
                    c7:76:65:81:0d:df:a7:a5:55:ea:6a:90:92:a7:71:
                    d0:7d:f9:56:d5:b2:ab:71:4c:76:a8:a1:c3:12:7e:
                    e2:89:c1:17:2e:39:cb:ef:af:8a:6a:a9:10:81:b8:
                    85:94:e9:16:2d:21:b1:5d:28:ec:19:0b:25:43:16:
                    8a:fa:8c:50:9b:55:79:6b:83:8f:fc:45:eb:44:f4:
                    4c:09:43:30:ff:10:f6:59:69:f6:42:a3:c3:99:cc:
                    09:41:4c:22:56:30:39:a2:ad:aa:47:6f:93:b6:f1:
                    ea:09:af:9d:2e:44:bd:7b:fe:6c:9a:49:a6:c2:f5:
                    37:19:cf:c8:82:25:48:97:9c:fc:41:67:93:35:67:
                    ce:9c:2c:ef:12:20:4d:5b:80:49:7e:c1:ab:1a:ab:
                    4a:0f:c5:1f:f4:2b:66:f2:88:c6:7c:12:c4:50:9d:
                    6a:aa:59:97:e2:9c:86:3f:9e:d1:9b:01:a5:72:ce:
                    8e:58:10:48:b4:20:94:17:0b:bf:27:38:65:81:eb:
                    5e:20:7a:03:75:cb:b7:43:6f:a2:c8:69:54:98:12:
                    6c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DC:B6:80:67:C2:9B:B7:D5:8F:00:88:35:99:02:CA:B4:05:5D:A7
            X509v3 Authority Key Identifier:
                keyid:73:26:C6:3D:E7:FF:A3:15:E2:02:5D:69:67:0D:75:75:25:9F:F7:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:38:51:77:8f:3e:28:29:17:32:d2:89:33:76:64:58:9a:a7:
         2f:eb:e6:a5:0b:7a:0c:e0:de:c2:4d:81:d2:5c:39:02:18:c4:
         8c:76:6f:88:54:fe:1c:59:ef:49:bf:c6:65:75:b5:93:f6:f7:
         23:db:6a:a3:ea:07:a0:3d:d3:61:1e:97:de:a0:fa:76:10:e9:
         e4:9f:3a:04:c8:54:31:9a:e2:5a:71:8c:e4:f4:bd:55:d0:43:
         98:e6:ca:d7:6a:da:dc:d5:18:1e:95:c0:c3:77:58:9b:aa:3d:
         6a:b8:1d:cf:eb:40:1e:50:42:94:06:f8:88:be:4e:3f:d0:24:
         f0:4e:f7:d8:f8:47:b5:4b:64:b8:69:cb:3f:fc:15:c2:f5:86:
         5c:bd:7e:05:fa:c6:30:de:ad:6f:c4:e4:e0:6d:94:88:5d:d2:
         ac:16:d7:8e:73:d7:85:18:8d:ed:8f:13:18:7d:a1:aa:e2:30:
         12:23:2d:37:d6:5a:70:b1:aa:f3:36:8c:9c:63:7c:ac:74:49:
         b8:89:14:7d:68:f1:66:c3:3d:0d:a0:09:6a:0d:d8:fe:20:6d:
         54:dd:95:eb:8a:5a:ee:83:f0:2b:82:6d:f2:4a:0a:7f:30:0d:
         14:e1:d1:32:ad:02:be:ca:9a:56:52:ad:27:3d:de:19:f9:bd:
         68:31:12:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzQc3qR9YNc+mH9TGrc5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMjZjNjNkZTdmZmEzMTVlMjAyNWQ2OTY3MGQ3NTc1MjU5
ZmY3YzcwHhcNMjUwODIzMTIwMDE3WhcNMjUwODI0MTIwMDE3WjAzMTEwLwYDVQQD
Eyg0N2RjYjY4MDY3YzI5YmI3ZDU4ZjAwODgzNTk5MDJjYWI0MDU1ZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCssbkhWUmMrmLr+tK/F/U/cWdOW
hNc1b92J7cej7rwssY+EMADislA5SILHdmWBDd+npVXqapCSp3HQfflW1bKrcUx2
qKHDEn7iicEXLjnL76+KaqkQgbiFlOkWLSGxXSjsGQslQxaK+oxQm1V5a4OP/EXr
RPRMCUMw/xD2WWn2QqPDmcwJQUwiVjA5oq2qR2+TtvHqCa+dLkS9e/5smkmmwvU3
Gc/IgiVIl5z8QWeTNWfOnCzvEiBNW4BJfsGrGqtKD8Uf9Ctm8ojGfBLEUJ1qqlmX
4pyGP57RmwGlcs6OWBBItCCUFwu/JzhlgeteIHoDdcu3Q2+iyGlUmBJsPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfctoBnwpu31Y8AiDWZAsq0BV2nMB8GA1UdIwQY
MBaAFHMmxj3n/6MV4gJdaWcNdXUln/fHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3liR1BlZl9veFhpQWwxcFp3MTFkU1dmOThjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xZGNlYTktYjNhMS00MGY2LWI2ZmYt
Y2RkM2U1NWVhNGZjLzEvY3liR1BlZl9veFhpQWwxcFp3MTFkU1dmOThjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8xZGNlYTktYjNhMS00MGY2LWI2ZmYtY2RkM2U1NWVhNGZj
LzEvY3liR1BlZl9veFhpQWwxcFp3MTFkU1dmOThjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejhRd48+
KCkXMtKJM3ZkWJqnL+vmpQt6DODewk2B0lw5AhjEjHZviFT+HFnvSb/GZXW1k/b3
I9tqo+oHoD3TYR6X3qD6dhDp5J86BMhUMZriWnGM5PS9VdBDmObK12ra3NUYHpXA
w3dYm6o9argdz+tAHlBClAb4iL5OP9Ak8E732PhHtUtkuGnLP/wVwvWGXL1+BfrG
MN6tb8Tk4G2UiF3SrBbXjnPXhRiN7Y8TGH2hquIwEiMtN9ZacLGq8zaMnGN8rHRJ
uIkUfWjxZsM9DaAJag3Y/iBtVN2V64pa7oPwK4Jt8koKfzANFOHRMq0CvsqaVlKt
Jz3eGfm9aDESQg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:46:21 2025 by rpki-client