Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
File:                     bCynx_AN7ET0jEnyKldylIaaqbo.mft (raw, json)
Hash identifier:          h4MAJNMNm0AtWL4/s9WphRHzJsIe+sL1tTYGnqwegwA=
Subject key identifier:   9D:BF:D2:66:9C:3E:59:6E:EF:BB:5A:D5:A3:69:93:F8:BD:A5:9E:07
Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
Certificate issuer:       /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Certificate serial:       019D2695CB68FCA758757FB0C55A9CD402D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
Manifest number:          1885
Signing time:             Wed 25 Mar 2026 20:00:44 +0000
Manifest this update:     Wed 25 Mar 2026 20:00:44 +0000
Manifest next update:     Thu 26 Mar 2026 20:00:44 +0000
Files and hashes:         1: JfKoDtrhJ-i-G9aVy_3EyZTHhdQ.roa (hash: YvPO7VlYOdBTaEg9nBYo6BImKnaR242b+DsMusahNWM=)
                          2: bCynx_AN7ET0jEnyKldylIaaqbo.crl (hash: y3+nR5UmXqH9XWIdpqSI2SvSw5e0FQIYvhpq9VMoh9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:95:cb:68:fc:a7:58:75:7f:b0:c5:5a:9c:d4:02:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
        Validity
            Not Before: Mar 25 20:00:44 2026 GMT
            Not After : Mar 26 20:00:44 2026 GMT
        Subject: CN=9dbfd2669c3e596eefbb5ad5a36993f8bda59e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:60:43:ac:8a:31:cb:da:a7:e7:e0:bc:b6:28:
                    30:7b:59:c7:70:ff:bd:51:66:8e:8b:13:3c:6f:19:
                    72:c3:e9:7a:6e:d8:83:61:39:78:a3:76:bb:de:76:
                    4c:ce:83:ab:4f:40:d0:82:ac:14:4a:5a:f1:06:77:
                    a0:ef:1e:80:02:81:c0:e8:0d:49:b6:6b:89:99:a7:
                    f5:28:92:cf:a4:c7:dc:05:57:ca:24:d7:7d:de:25:
                    fe:b9:7b:ae:27:71:3a:f1:90:8b:97:08:5b:0d:cb:
                    6a:e3:e1:ec:96:6e:f1:89:6f:98:ac:54:a3:d8:94:
                    62:d2:10:18:05:73:2f:6b:0d:44:29:21:a5:ab:3d:
                    5e:07:3d:84:b0:93:41:b4:a6:a7:1a:10:8b:69:6d:
                    a5:cc:3e:e0:a1:c1:1b:1a:9a:89:ae:2e:18:07:e4:
                    e6:17:5d:40:af:f9:6f:a3:44:84:37:1d:97:a0:71:
                    3d:bd:8f:67:b7:26:e5:69:57:8d:0d:64:59:51:d5:
                    fd:50:7b:83:2e:8b:6f:a4:26:52:ff:da:ea:27:33:
                    2f:eb:b0:bb:ae:cb:e0:55:c0:16:91:f2:65:88:fe:
                    c6:4e:8b:17:fa:d0:35:76:b9:5d:df:93:1c:6f:c9:
                    69:b4:3b:87:7a:d8:45:4c:d0:cc:d3:68:55:81:3c:
                    c9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BF:D2:66:9C:3E:59:6E:EF:BB:5A:D5:A3:69:93:F8:BD:A5:9E:07
            X509v3 Authority Key Identifier:
                keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:2f:c2:56:f8:cf:83:c1:3b:a8:e0:b2:5e:84:ab:55:1b:97:
         08:b9:07:17:30:fe:3a:6b:5a:a0:ec:b5:3a:ad:bf:6d:09:e2:
         ed:b1:f1:9e:bb:7c:94:8c:3c:ce:94:20:29:35:50:22:f2:a4:
         d7:7a:0f:79:16:25:5e:a7:61:4c:87:4d:7c:ee:11:96:90:0e:
         39:55:14:49:47:16:b5:e8:be:29:ed:a7:5e:cb:ef:0e:4f:66:
         99:75:df:80:34:2d:53:6c:7f:58:3c:21:fd:d9:df:49:da:e3:
         33:4c:30:88:1d:3d:e7:21:34:49:37:18:67:9f:2c:fd:15:a2:
         fd:7f:d3:2d:fa:2a:31:32:f2:dc:fd:48:e2:fd:e2:f5:10:68:
         87:5a:c0:ca:c1:b4:ac:95:75:e1:5f:48:ae:0e:1c:d1:de:d7:
         ce:64:4f:25:bd:7f:69:73:a7:6f:ed:b9:23:51:b8:2c:b2:a0:
         61:52:72:48:ba:c3:ed:81:52:d3:23:ac:43:1d:f5:bf:5f:13:
         9e:32:56:eb:d6:a4:a6:5b:41:69:63:98:06:ba:d5:61:b6:f0:
         94:d5:12:eb:08:c1:b8:d5:8f:5c:61:5b:c5:8f:8f:0d:39:90:
         0b:22:ea:28:73:36:0b:59:5f:c5:5a:e3:10:e7:66:55:31:52:
         1b:e1:a8:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlcto/KdYdX+wxVqc1ALQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMmNhN2M3ZjAwZGVjNDRmNDhjNDlmMjJhNTc3Mjk0ODY5
YWE5YmEwHhcNMjYwMzI1MjAwMDQ0WhcNMjYwMzI2MjAwMDQ0WjAzMTEwLwYDVQQD
Eyg5ZGJmZDI2NjljM2U1OTZlZWZiYjVhZDVhMzY5OTNmOGJkYTU5ZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2BDrIoxy9qn5+C8tigwe1nHcP+9
UWaOixM8bxlyw+l6btiDYTl4o3a73nZMzoOrT0DQgqwUSlrxBneg7x6AAoHA6A1J
tmuJmaf1KJLPpMfcBVfKJNd93iX+uXuuJ3E68ZCLlwhbDctq4+Hslm7xiW+YrFSj
2JRi0hAYBXMvaw1EKSGlqz1eBz2EsJNBtKanGhCLaW2lzD7gocEbGpqJri4YB+Tm
F11Ar/lvo0SENx2XoHE9vY9ntyblaVeNDWRZUdX9UHuDLotvpCZS/9rqJzMv67C7
rsvgVcAWkfJliP7GTosX+tA1drld35Mcb8lptDuHethFTNDM02hVgTzJWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2/0macPllu77ta1aNpk/i9pZ4HMB8GA1UdIwQY
MBaAFGwsp8fwDexE9IxJ8ipXcpSGmqm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMt
NDNkYzJiNWVlYjViLzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMtNDNkYzJiNWVlYjVi
LzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApS/CVvjP
g8E7qOCyXoSrVRuXCLkHFzD+OmtaoOy1Oq2/bQni7bHxnrt8lIw8zpQgKTVQIvKk
13oPeRYlXqdhTIdNfO4RlpAOOVUUSUcWtei+Ke2nXsvvDk9mmXXfgDQtU2x/WDwh
/dnfSdrjM0wwiB095yE0STcYZ58s/RWi/X/TLfoqMTLy3P1I4v3i9RBoh1rAysG0
rJV14V9Irg4c0d7XzmRPJb1/aXOnb+25I1G4LLKgYVJySLrD7YFS0yOsQx31v18T
njJW69akpltBaWOYBrrVYbbwlNUS6wjBuNWPXGFbxY+PDTmQCyLqKHM2C1lfxVrj
EOdmVTFSG+GoRg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:15 2026 by rpki-client