Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File:                     CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier:          C4fCG8cTamSEz8cKclkdFpvxPkgWN+hZsxFlhUu6Y2Y=
Subject key identifier:   B2:BF:65:E3:34:6C:8B:5F:44:F8:0C:7D:FE:F9:6E:CD:5A:D7:24:D2
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer:       /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial:       01A1C1410C1AEC6505C19F4616260E1411BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number:          1AE7
Signing time:             Mon 09 Nov 2026 17:00:27 +0000
Manifest this update:     Mon 09 Nov 2026 17:00:27 +0000
Manifest next update:     Tue 10 Nov 2026 17:00:27 +0000
Files and hashes:         1: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: kqI96PS73IQT/AVzI4iXhtsEXJYsQrnVmx15abnlVLo=)
                          2: LFzzjFaSz6K_Ln1iImOi0GEvjl4.roa (hash: CQgt++gkgy+WEbrupETBLg1kBxLwM/XThjq4nhpIKss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 15:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c1:41:0c:1a:ec:65:05:c1:9f:46:16:26:0e:14:11:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
        Validity
            Not Before: Nov  9 17:00:27 2026 GMT
            Not After : Nov 10 17:00:27 2026 GMT
        Subject: CN=b2bf65e3346c8b5f44f80c7dfef96ecd5ad724d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3d:18:e3:0a:26:d8:25:a5:c9:7a:fd:9c:3e:
                    36:7e:69:55:71:36:23:fd:68:06:b1:5a:70:74:82:
                    26:c4:63:74:6d:0c:33:e6:42:eb:46:cc:fb:c2:42:
                    0e:f2:59:16:6b:2f:e4:8a:7d:5f:c4:35:fc:6e:63:
                    e1:c5:f9:f8:34:57:49:92:00:c2:60:f6:d8:09:bb:
                    0e:24:ae:55:52:b2:a0:06:a7:38:78:61:16:80:df:
                    06:c3:fc:10:a7:05:35:e3:53:b5:f8:2d:32:c9:53:
                    55:de:47:8e:f5:0f:0b:78:78:85:17:d8:84:59:77:
                    8d:2d:d0:6f:78:da:2c:10:1a:fd:9b:d7:e3:49:ee:
                    de:02:80:9a:56:d3:39:61:ff:af:1e:c2:ec:c5:59:
                    2e:f7:58:26:bb:f0:2b:45:cd:86:17:f0:8a:83:ca:
                    90:8d:91:65:b5:41:a1:73:d4:65:4c:e0:2e:c5:a9:
                    4a:ee:51:fe:17:4d:47:3f:1f:47:46:77:b0:28:37:
                    cd:14:e0:f1:6c:79:b3:c9:9c:44:53:fd:ca:a0:41:
                    da:be:b2:b4:b2:cf:e8:5f:ea:51:85:35:0a:3e:87:
                    28:f6:3f:15:ac:8c:a8:e9:f9:0d:ba:a4:e6:6e:58:
                    3b:47:72:f1:7f:78:40:57:79:be:e4:b9:05:d2:e3:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BF:65:E3:34:6C:8B:5F:44:F8:0C:7D:FE:F9:6E:CD:5A:D7:24:D2
            X509v3 Authority Key Identifier:
                keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ac:4d:5e:89:a2:85:08:2e:20:b4:ce:17:87:3a:00:aa:f5:
         16:97:47:d7:c7:a4:87:3c:fd:6e:27:e8:b6:77:ae:f8:bc:56:
         a7:37:14:39:32:ab:55:19:4a:cb:a3:e3:f5:75:b2:7e:38:60:
         32:91:56:0f:f6:4a:e1:ad:2a:a1:0e:0a:cc:bd:82:5b:64:91:
         19:cb:c5:5d:71:07:57:ee:85:ad:e1:99:b7:60:a0:1a:12:f1:
         11:d2:2d:97:2a:d6:7f:ab:c8:d4:f2:01:0a:16:b5:2a:65:8c:
         14:97:9b:29:13:a1:61:26:dc:17:ca:99:a4:3b:06:86:0a:89:
         82:04:00:a1:0e:77:7c:e9:f9:96:b5:51:09:67:ea:95:f4:be:
         cc:83:f4:ad:aa:1d:e9:5d:aa:c6:44:2e:d1:88:f7:82:41:f2:
         1d:4f:d4:ce:b6:06:90:e8:c5:c1:5b:fe:f0:fb:c8:46:90:98:
         55:70:af:7c:07:f4:ec:0a:1d:cc:f2:c7:40:9d:e6:d9:da:4f:
         d7:6e:f9:2c:4b:d9:f6:67:b5:3b:88:92:18:c2:3a:03:16:69:
         d5:b9:cb:60:79:77:c8:11:e5:00:0c:d6:00:33:f4:4c:9b:98:
         18:ad:73:fd:dc:0a:2d:a9:80:00:7c:1c:61:a0:ab:48:a9:c1:
         db:cd:8f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 22:33:09 2026 by rpki-client