Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File:                     CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier:          Vze8gk2FVnh7PiJK1cN4RV0H2GQyjgErIr3GFk+MEjQ=
Subject key identifier:   71:EF:63:8B:25:49:54:FF:1D:07:85:C0:FA:85:BB:56:97:52:82:F4
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer:       /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial:       019A4F62765D5D710C730DE6302893CDF6E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number:          0BB7
Signing time:             Tue 04 Nov 2025 15:00:44 +0000
Manifest this update:     Tue 04 Nov 2025 15:00:44 +0000
Manifest next update:     Wed 05 Nov 2025 15:00:44 +0000
Files and hashes:         1: AtIP5ngZsZvLRLdKp4SplghlszA.roa (hash: YOwr+/qAiLn7cRZe8CWbtE+p57/1ofu78ENjFkLRmHY=)
                          2: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: cGSUo4mf1W/lTODQ8KFioUUyw/nxDTCLmKJ70Lqq+kw=)
                          3: I8Nmh37tFNFzjXmw0t9bEIAE8Eo.roa (hash: YNeRziRUhmhLTOn+PVSXP3A/jlP0J/ORfeC6qUdAH/s=)
                          4: JLrvN6gy-l8oqZZ6A2f-EeS0QQc.roa (hash: kxEu7XapzO+8FKwUNiG2TUK6bp7351KlBBspHS3oFSo=)
                          5: MGVL3PWcg672eUJnE3OmpM02shQ.roa (hash: jaWN7PLFw0laWd8mU2a0x2xqPQpnAcAJ/82ZDzopnzE=)
                          6: c4yvyMKIOxEnq8qnOJowF2Jzm7s.roa (hash: s8IHGFPKGHVe+UT4NM56ryEb8GnNOyNh3KVfvOyTvrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:76:5d:5d:71:0c:73:0d:e6:30:28:93:cd:f6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
        Validity
            Not Before: Nov  4 15:00:44 2025 GMT
            Not After : Nov  5 15:00:44 2025 GMT
        Subject: CN=71ef638b254954ff1d0785c0fa85bb56975282f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:7c:7e:06:35:b4:a5:bc:00:5e:33:08:6e:
                    f2:c1:de:9a:20:c1:a2:4f:12:34:ab:26:79:e4:3c:
                    9c:36:f2:62:ff:53:d8:a4:63:57:58:b4:d2:0a:76:
                    bd:c7:a8:d2:8c:58:c4:e3:7d:54:ff:44:20:d7:7f:
                    9e:32:9a:88:9b:19:50:c5:42:ee:67:e9:a0:bf:d2:
                    1b:db:db:e1:ef:a8:d8:3f:ba:3a:d3:15:21:95:99:
                    a1:65:bc:04:d6:2e:ba:0d:82:e2:66:f6:b5:af:cc:
                    ab:ec:0f:38:62:c4:0d:62:3d:72:67:7f:e1:c4:1f:
                    d0:62:bd:1b:31:e6:71:fc:93:12:e2:b6:6c:9b:03:
                    b7:1f:a3:86:55:7d:25:58:92:86:c1:3f:1c:a6:dc:
                    ce:32:cf:1f:36:dd:c6:33:ab:bd:45:4b:6a:94:bf:
                    9c:4a:42:89:69:19:80:28:10:0d:a9:b3:58:d3:19:
                    42:31:c9:dd:a5:bd:f5:0a:5b:06:b6:f4:fb:ca:7a:
                    90:b7:ed:2a:2b:c7:24:c6:62:f2:48:30:47:2f:f9:
                    82:6d:4a:41:df:5e:38:86:3a:54:a2:5c:3e:1b:30:
                    dc:89:58:7c:d3:f8:fc:e6:54:76:8b:fc:3e:1c:b5:
                    3b:cc:58:61:cf:1d:8a:b7:8d:b9:5a:cb:7b:d4:1a:
                    91:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EF:63:8B:25:49:54:FF:1D:07:85:C0:FA:85:BB:56:97:52:82:F4
            X509v3 Authority Key Identifier:
                keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:44:12:34:dd:b3:2b:80:30:a4:a5:19:a5:8d:c9:56:f8:8b:
         7e:82:93:a2:bc:48:3c:5b:75:0a:49:ec:70:c2:ca:a2:7f:7e:
         4c:61:06:9d:d9:e2:1b:e1:9f:02:be:f8:6d:d6:d2:c8:2b:82:
         3c:25:cc:d2:36:38:ac:40:eb:01:c4:77:90:92:91:a3:de:d9:
         45:cc:12:cf:b6:1f:a0:19:c0:a6:c3:46:5e:59:ce:b1:37:b7:
         46:65:73:bd:1c:b2:28:bf:c1:11:22:fa:96:a1:c9:8d:f8:53:
         3b:37:51:f6:56:56:df:e9:9e:c0:c5:1f:3f:20:16:ee:e4:9d:
         7d:f7:31:f2:90:c5:04:f8:66:de:da:b6:e7:d6:85:77:af:48:
         8e:8b:6d:3f:db:c0:7f:2f:a0:68:68:a6:52:1d:88:86:ea:ee:
         f1:16:fc:f2:66:74:c6:dc:13:14:49:49:31:de:8c:37:79:52:
         1d:e5:9b:30:a0:83:2f:10:44:f1:59:76:3d:c0:2a:e0:d0:22:
         8e:5a:d1:bd:d8:ff:5a:d3:20:74:9a:ef:7b:12:bc:15:d0:11:
         9d:17:f1:09:e8:25:f1:23:cc:ff:86:67:72:e1:63:b5:fa:ab:
         ef:c8:99:b7:99:36:2c:ca:0d:84:16:9a:e0:8b:81:d0:7f:ad:
         84:1e:93:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:45 2025 by rpki-client