Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
File:                     bCynx_AN7ET0jEnyKldylIaaqbo.mft (raw, json)
Hash identifier:          uZEm+orApMgW2+K3c/o22b6hzUgvEYl/C3iyT4J3Fng=
Subject key identifier:   3C:95:EA:0A:C1:94:99:17:44:16:C9:2A:45:4C:E9:7E:6D:8D:13:B2
Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
Certificate issuer:       /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Certificate serial:       0198D515DF8B6794AEF4192975CB9BB5F0BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 04:00:37 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:37 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:37 +0000
Files and hashes:         1: CFjxJzCmd6HUFa7VuE6yI0I0AMQ.roa (hash: MIyflourwhBuhTA+A0FwkrenrfoY9JbHcdU1eop0jPQ=)
                          2: bCynx_AN7ET0jEnyKldylIaaqbo.crl (hash: T6JcvIQm9xRRHQURpLqje5DDEN1acTyXM+MnBCWiLAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:df:8b:67:94:ae:f4:19:29:75:cb:9b:b5:f0:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
        Validity
            Not Before: Aug 23 04:00:37 2025 GMT
            Not After : Aug 24 04:00:37 2025 GMT
        Subject: CN=3c95ea0ac19499174416c92a454ce97e6d8d13b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2d:26:6a:63:fe:38:c5:ee:5d:cd:e8:67:61:
                    e6:7c:8a:f2:ac:3b:b8:23:f1:f0:00:a2:16:69:62:
                    60:78:3b:97:2c:01:37:44:04:c3:6f:c9:f4:3c:62:
                    cc:9f:a7:33:23:96:32:25:75:13:da:53:84:6b:b5:
                    c6:d5:72:44:aa:d2:01:c2:c0:9e:d7:8e:70:25:da:
                    dc:0f:4b:6d:75:99:60:54:16:12:d1:7c:d5:58:3f:
                    0a:dc:61:96:4a:52:53:94:5d:d3:1b:2f:0e:a5:ac:
                    d3:b6:ad:ab:0f:30:4e:9d:a2:f9:4f:0a:58:20:de:
                    0f:ca:f1:e9:87:7a:f6:4f:1c:e4:52:b2:a5:a0:0e:
                    f8:0d:5f:4e:bb:eb:29:b3:e7:c7:da:c8:d0:1d:ab:
                    5a:18:e2:bd:8d:27:e0:c7:fc:54:89:6b:6b:11:42:
                    dc:e6:33:b3:5d:d8:d6:80:f6:8d:d0:5f:f2:4b:7e:
                    ae:1f:7e:01:2a:49:5b:35:1f:f9:43:25:28:52:0f:
                    4a:ad:eb:b9:6a:9f:6d:4d:5c:2a:13:58:96:b8:70:
                    e8:a5:55:83:b4:0a:77:5e:57:16:ae:34:f6:b8:74:
                    f4:f9:85:4c:2f:36:da:28:2f:e0:a5:62:ff:d4:e9:
                    f4:be:aa:72:6e:24:25:83:c2:0c:2a:b7:b9:09:b5:
                    0c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:95:EA:0A:C1:94:99:17:44:16:C9:2A:45:4C:E9:7E:6D:8D:13:B2
            X509v3 Authority Key Identifier:
                keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:64:cb:e1:81:c2:f0:19:d6:ab:ec:bd:df:ec:e6:ee:2c:93:
         18:7b:b0:51:59:02:68:86:c5:8a:5e:9d:81:55:9f:22:cc:38:
         5d:39:0a:81:93:37:77:bf:e9:43:02:cf:c1:09:46:fe:88:e5:
         f7:a3:11:19:ab:9d:6c:19:fc:d6:0f:22:28:ea:ae:fe:97:c1:
         13:04:6f:38:1b:e7:9e:42:6b:09:bb:f4:7e:7d:a2:93:82:f3:
         00:c8:1d:ed:68:b7:40:bc:f4:19:ee:b5:94:1a:2e:e7:01:2e:
         f3:7e:83:fd:9e:08:8c:49:c9:89:e1:50:cc:a5:1c:1f:bc:92:
         c1:3b:3a:d4:4a:2f:9f:65:92:06:c2:02:12:da:9c:eb:e3:0d:
         c5:bd:12:26:34:da:73:54:9f:61:6d:3b:56:7b:97:33:9a:77:
         24:7b:a5:d3:6e:6e:db:66:5e:7a:2f:b8:4c:4b:fe:a2:97:f9:
         4d:83:ed:1a:a7:cb:93:8a:1d:82:ec:0c:cb:67:c5:9c:29:05:
         eb:c9:b7:76:00:d0:55:02:85:c9:92:ab:22:e9:5b:bf:ce:98:
         6e:52:fb:ea:67:0b:ee:36:1a:1c:fb:52:53:3c:60:c4:ed:f2:
         72:d3:6a:07:96:1f:5e:f8:35:e5:87:ff:fb:69:84:35:aa:97:
         34:26:bf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:43 2025 by rpki-client