Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File:                     Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier:          3PcDexlrO1uiW9w2pETD4lczIQxIfMZSJpOVARQNBRo=
Subject key identifier:   D7:8B:3E:2B:7C:AC:E9:15:11:3E:17:42:FE:71:82:46:61:DE:DE:EC
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer:       /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial:       01A0D6B99907CFEEE980FE19C5C12E6321DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number:          183A
Signing time:             Fri 25 Sep 2026 04:01:22 +0000
Manifest this update:     Fri 25 Sep 2026 04:01:22 +0000
Manifest next update:     Sat 26 Sep 2026 04:01:22 +0000
Files and hashes:         1: 98w4EMI8QkhWIDJ_tUXvrrCXD2w.roa (hash: fm9WJHd48Zrl9TNehwCEgvrHjrg07KinzQkYGEQj/xw=)
                          2: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: p59uYGWpcSmw3T1mhbiNfavt+SFnlqXGDeAgRClywyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 04:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:b9:99:07:cf:ee:e9:80:fe:19:c5:c1:2e:63:21:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
        Validity
            Not Before: Sep 25 04:01:22 2026 GMT
            Not After : Sep 26 04:01:22 2026 GMT
        Subject: CN=d78b3e2b7cace915113e1742fe71824661dedeec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:77:c6:cd:3b:e1:a7:76:3d:7d:a2:d1:7d:
                    b0:5e:cd:b1:c2:d1:3b:8d:24:26:1b:c6:ad:e0:34:
                    23:ef:85:57:11:a6:f3:1a:54:ec:eb:a8:d3:25:9f:
                    b2:47:0d:71:fe:9a:2a:f6:05:5d:a4:0e:14:c7:94:
                    86:b5:b6:5d:f3:05:af:d1:98:89:18:ca:eb:cb:be:
                    55:df:f0:4a:46:f4:a9:1c:a7:0e:33:23:46:3c:72:
                    db:a9:ed:08:df:56:e6:6d:2c:6f:fa:21:59:da:87:
                    73:b4:bd:60:21:f2:dd:a9:cd:3a:b3:59:14:07:0d:
                    f9:9f:69:aa:ec:73:81:1e:06:26:54:e1:df:d0:a4:
                    ad:37:ac:13:f1:61:5c:28:c0:71:90:dc:22:17:76:
                    55:22:4f:1f:01:bd:55:59:3f:37:d8:3d:16:d2:79:
                    9a:8e:9a:19:31:0f:a1:7e:26:e7:17:c7:08:99:a8:
                    ba:e0:c1:de:e5:44:c1:83:87:bc:32:51:ce:54:55:
                    93:b9:6d:2e:92:f9:47:04:b2:9b:42:24:b8:8a:3a:
                    59:c8:7a:42:37:bc:e2:a1:5a:0f:82:a6:f7:73:01:
                    76:02:7f:2f:11:fc:46:0d:cb:84:fe:4f:28:77:19:
                    17:43:ee:15:71:29:b9:c3:49:79:a8:ac:0d:92:6b:
                    2b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8B:3E:2B:7C:AC:E9:15:11:3E:17:42:FE:71:82:46:61:DE:DE:EC
            X509v3 Authority Key Identifier:
                keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:53:bd:d2:ce:76:e8:f9:ca:9f:2b:7b:90:35:2f:98:f6:53:
         e2:7b:b3:d4:02:f0:b7:47:11:0a:37:a0:f7:68:57:67:5c:32:
         26:71:62:25:c6:1d:73:e0:bb:eb:c3:18:f2:0f:28:53:5b:bc:
         5f:72:d3:61:40:6e:8b:c5:26:f3:bd:1a:b1:10:2a:7d:22:75:
         4e:4c:5a:9b:f8:ed:cc:32:2b:d7:6d:e5:61:d4:ba:10:4b:66:
         f8:7c:e1:36:96:19:5f:43:55:ec:4e:5d:be:ed:81:62:13:88:
         ae:39:cb:f2:51:4a:f0:ca:45:7c:84:97:13:c5:9c:1c:ee:ce:
         5d:d4:6a:d4:b0:40:47:cd:34:f3:df:cb:65:96:7a:1c:e0:8a:
         d9:cd:0c:5d:93:72:53:72:23:00:15:39:f0:e5:c0:d1:fc:73:
         a8:39:a9:38:37:64:09:e0:81:83:d2:5a:d2:6f:e8:a8:e2:d8:
         d2:cd:51:fb:55:8c:61:60:7f:3e:19:7a:98:58:00:e0:75:56:
         15:66:23:23:97:0a:98:d3:64:c8:78:6a:36:58:28:1f:cd:24:
         32:a9:3c:23:c9:00:9f:9c:62:5f:33:2e:99:90:83:d9:21:0a:
         d7:d3:58:9b:33:0e:e7:d9:e8:e7:31:61:ce:ab:02:63:b0:be:
         92:a4:3d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:29:27 2026 by rpki-client