Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
File:                     cylEqFODVbKux2ZF_ZSUSIrnAuc.mft (raw, json)
Hash identifier:          7NByzgw77eoAePu91OoMRnuaRgzZLGvlN3+i248GJDc=
Subject key identifier:   37:76:C6:8A:DB:05:34:FD:78:CA:1F:89:B0:39:35:6E:5E:6E:6B:87
Authority key identifier: 73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7
Certificate issuer:       /CN=732944a8538355b2aec76645fd9494488ae702e7
Certificate serial:       01A12DA0AF6824B569F4977534FC4A2C3079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
Manifest number:          0EDC
Signing time:             Mon 12 Oct 2026 01:01:07 +0000
Manifest this update:     Mon 12 Oct 2026 01:01:07 +0000
Manifest next update:     Tue 13 Oct 2026 01:01:07 +0000
Files and hashes:         1: cylEqFODVbKux2ZF_ZSUSIrnAuc.crl (hash: LsOLSsCZQOO/T5O2ApOunabIt7K0Dm1FstLnAlsaAQ8=)
                          2: paBTm9XJ_5OjOsmofXolfSOu8tI.roa (hash: 0BVMqZx9bh/K7mlP8B+uwanGbjjmcCmxI2TQpqnc/3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2d:a0:af:68:24:b5:69:f4:97:75:34:fc:4a:2c:30:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732944a8538355b2aec76645fd9494488ae702e7
        Validity
            Not Before: Oct 12 01:01:07 2026 GMT
            Not After : Oct 13 01:01:07 2026 GMT
        Subject: CN=3776c68adb0534fd78ca1f89b039356e5e6e6b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:12:e5:ab:19:fc:39:84:7e:04:30:d6:4f:39:
                    64:11:bc:9b:a4:a3:7b:e2:00:97:46:35:ed:f0:13:
                    6e:fd:06:80:42:6a:80:80:f8:95:b3:56:38:8a:78:
                    e6:81:f4:ab:39:dc:a1:4d:48:c0:6d:e9:e4:d0:8f:
                    09:65:c3:e7:d3:94:ba:c6:86:e0:e8:ca:99:ef:ff:
                    22:a2:d6:c1:49:c4:94:98:45:0a:3f:33:5b:95:ad:
                    61:e2:22:b4:81:ba:6f:49:55:92:ca:60:d9:db:c5:
                    47:39:60:df:8e:f0:b6:55:fa:cc:ad:66:ac:d5:80:
                    63:6a:1d:19:20:99:49:6a:ce:a2:92:38:b3:db:4d:
                    7d:81:c2:75:30:60:e1:47:19:5c:47:7c:6f:b6:32:
                    95:38:1b:7e:88:9c:df:2f:99:57:56:9f:f9:f2:1c:
                    df:4e:8f:4c:0e:9c:64:8a:8c:aa:2a:92:77:27:6a:
                    62:e8:de:c8:b4:23:72:57:99:a7:ce:55:d6:db:6a:
                    9a:a2:da:e5:a7:77:2e:e1:52:64:a0:db:ff:fd:ec:
                    5e:f0:37:89:cf:cf:ec:8c:b2:72:7f:7e:61:a7:cc:
                    10:1b:f2:0f:bd:37:09:bc:20:0e:f7:04:1e:68:cd:
                    10:57:f6:b9:d6:74:8c:40:be:c6:53:0e:0b:8b:c1:
                    c6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:76:C6:8A:DB:05:34:FD:78:CA:1F:89:B0:39:35:6E:5E:6E:6B:87
            X509v3 Authority Key Identifier:
                keyid:73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ac:4d:01:83:3a:13:e7:54:c1:f1:e1:a5:b3:c6:e2:43:60:
         84:91:7b:45:00:48:ad:bc:3f:25:b8:3b:7d:9b:59:0b:3e:4b:
         e8:65:f2:74:6c:23:14:02:58:34:9e:87:69:cc:40:09:6e:25:
         39:7b:9e:59:07:73:3b:8c:09:c8:02:ef:ba:29:5e:8f:3d:ec:
         fa:b3:bf:00:b0:70:d8:4c:9e:ba:26:f4:62:2c:8e:32:e1:a9:
         11:f6:fc:f4:9e:c0:31:41:be:4f:a9:ae:70:50:b6:40:e1:4e:
         5a:01:f5:c8:ce:f5:30:e8:91:99:5c:38:27:26:1d:4e:6d:3c:
         71:4e:23:64:f6:e7:7c:74:6a:2e:64:c0:d8:83:2e:e3:31:71:
         32:4f:24:5a:da:4c:c1:9c:81:38:c6:48:41:b9:ee:54:16:6f:
         c3:a4:ae:a6:c9:0e:24:5e:51:cf:ee:83:9b:b9:3d:74:30:5c:
         6f:d4:f1:1e:bd:e3:7f:91:ea:70:f0:d6:d7:4d:7c:24:29:e6:
         3f:4a:53:e0:da:a0:ec:f3:16:3f:4c:c1:5e:cb:3b:a9:cf:a8:
         99:50:b3:7a:6d:3f:e2:b5:c1:c4:89:8a:d0:4d:a4:91:2a:d1:
         78:13:9b:82:10:95:68:8d:40:cc:b4:4e:8c:01:5d:16:76:e3:
         3f:37:22:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEtoK9oJLVp9Jd1NPxKLDB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMjk0NGE4NTM4MzU1YjJhZWM3NjY0NWZkOTQ5NDQ4OGFl
NzAyZTcwHhcNMjYxMDEyMDEwMTA3WhcNMjYxMDEzMDEwMTA3WjAzMTEwLwYDVQQD
EygzNzc2YzY4YWRiMDUzNGZkNzhjYTFmODliMDM5MzU2ZTVlNmU2Yjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+RLlqxn8OYR+BDDWTzlkEbybpKN7
4gCXRjXt8BNu/QaAQmqAgPiVs1Y4injmgfSrOdyhTUjAbenk0I8JZcPn05S6xobg
6MqZ7/8iotbBScSUmEUKPzNbla1h4iK0gbpvSVWSymDZ28VHOWDfjvC2VfrMrWas
1YBjah0ZIJlJas6ikjiz2019gcJ1MGDhRxlcR3xvtjKVOBt+iJzfL5lXVp/58hzf
To9MDpxkioyqKpJ3J2pi6N7ItCNyV5mnzlXW22qaotrlp3cu4VJkoNv//exe8DeJ
z8/sjLJyf35hp8wQG/IPvTcJvCAO9wQeaM0QV/a51nSMQL7GUw4Li8HGywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDd2xorbBTT9eMofibA5NW5ebmuHMB8GA1UdIwQY
MBaAFHMpRKhTg1WyrsdmRf2UlEiK5wLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3lsRXFGT0RWYkt1eDJaRl9aU1VTSXJuQXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lMjA2N2MtNTM2Ni00OWY3LWFjOTMt
YzJjZjQ1M2MzZTJlLzEvY3lsRXFGT0RWYkt1eDJaRl9aU1VTSXJuQXVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lMjA2N2MtNTM2Ni00OWY3LWFjOTMtYzJjZjQ1M2MzZTJl
LzEvY3lsRXFGT0RWYkt1eDJaRl9aU1VTSXJuQXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6xNAYM6
E+dUwfHhpbPG4kNghJF7RQBIrbw/Jbg7fZtZCz5L6GXydGwjFAJYNJ6HacxACW4l
OXueWQdzO4wJyALvuilejz3s+rO/ALBw2Eyeuib0YiyOMuGpEfb89J7AMUG+T6mu
cFC2QOFOWgH1yM71MOiRmVw4JyYdTm08cU4jZPbnfHRqLmTA2IMu4zFxMk8kWtpM
wZyBOMZIQbnuVBZvw6SupskOJF5Rz+6Dm7k9dDBcb9TxHr3jf5HqcPDW1018JCnm
P0pT4Nqg7PMWP0zBXss7qc+omVCzem0/4rXBxImK0E2kkSrReBObghCVaI1AzLRO
jAFdFnbjPzci4w==
-----END CERTIFICATE-----
Generated at Mon Oct 12 10:32:33 2026 by rpki-client