Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File:                     Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier:          65hIdgrDXijnNL7nXTUoPmgboBm06i5axyq6DOxMKDk=
Subject key identifier:   54:40:19:22:9B:40:C7:C9:70:34:DC:98:BC:9A:05:8C:67:6C:A8:D0
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer:       /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial:       01A0C746B9FF895396167CB973633004285C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number:          1832
Signing time:             Tue 22 Sep 2026 04:01:36 +0000
Manifest this update:     Tue 22 Sep 2026 04:01:36 +0000
Manifest next update:     Wed 23 Sep 2026 04:01:36 +0000
Files and hashes:         1: 98w4EMI8QkhWIDJ_tUXvrrCXD2w.roa (hash: fm9WJHd48Zrl9TNehwCEgvrHjrg07KinzQkYGEQj/xw=)
                          2: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: fmkB6rYA+yrDCEzjqxkbYSYSqcpwmcupZcVOsM6pPf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 04:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:46:b9:ff:89:53:96:16:7c:b9:73:63:30:04:28:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
        Validity
            Not Before: Sep 22 04:01:36 2026 GMT
            Not After : Sep 23 04:01:36 2026 GMT
        Subject: CN=544019229b40c7c97034dc98bc9a058c676ca8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c0:bc:2c:fe:16:1f:5f:e2:8f:8a:8b:21:aa:
                    59:e5:1d:bf:af:d8:f7:b8:45:c1:18:dd:ef:51:0f:
                    5f:41:e2:43:a6:f3:49:96:4d:90:0b:27:83:71:1d:
                    9e:91:5d:64:55:c9:8e:de:ba:7b:f7:c9:7a:88:29:
                    5c:b7:67:c7:60:4d:d4:4d:00:2a:fe:19:15:a6:25:
                    b3:7c:fe:dd:a1:79:36:23:ef:b9:c8:8d:64:07:b4:
                    86:27:8f:e7:3c:f3:e6:95:63:4d:43:9d:88:af:ac:
                    9a:40:2c:f6:9c:47:6e:34:14:75:24:6f:cc:81:0d:
                    5e:27:2a:0d:4f:fd:88:8c:94:ec:97:4e:a8:9a:07:
                    3e:46:4f:42:df:44:37:2b:94:b9:27:29:b9:be:c1:
                    a2:1b:73:0e:bd:41:02:41:68:a2:1d:db:a6:27:0f:
                    e3:27:34:60:12:50:20:20:bd:1a:32:c2:1f:aa:23:
                    33:c9:79:ae:e7:04:cf:cb:1c:f4:50:89:5a:bf:9a:
                    5e:03:2f:80:b7:2a:54:62:63:2e:39:52:a3:4e:70:
                    45:92:c1:3a:c9:ff:52:51:92:d4:26:bc:7d:cd:7f:
                    02:9e:e1:2b:67:28:73:96:b4:9b:fd:48:91:64:e9:
                    e2:81:97:c6:3b:68:d6:cd:21:3a:f7:88:68:3d:98:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:40:19:22:9B:40:C7:C9:70:34:DC:98:BC:9A:05:8C:67:6C:A8:D0
            X509v3 Authority Key Identifier:
                keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b7:de:10:87:ff:ca:2a:28:27:e8:51:e6:6e:fc:6f:21:84:
         78:03:79:be:16:fb:2f:53:b3:7f:9b:90:53:fe:55:99:88:15:
         9b:5f:50:9f:a3:9f:be:71:81:c8:23:d5:9b:d4:66:4d:a6:7f:
         53:43:1f:ea:51:9e:42:f2:fb:11:45:f8:48:69:15:05:cd:a9:
         ea:6e:34:42:c9:2e:43:56:a4:a1:63:46:87:be:80:84:b2:ed:
         6d:07:f4:2e:97:b8:c2:34:b2:12:49:1b:d2:c3:14:8d:b2:a1:
         50:b9:e5:c5:fc:f1:1d:61:24:0a:55:4a:3c:76:22:da:f7:ef:
         01:6d:aa:6b:dd:78:a8:06:a6:16:3f:7d:61:f5:30:f4:ca:97:
         22:85:09:c0:24:b2:72:83:75:e6:9a:f1:6e:7d:2b:43:98:3a:
         2d:37:0e:f4:51:ff:26:9d:71:b3:ea:e5:6d:e6:1e:a4:8f:15:
         db:c0:8b:de:24:0e:a7:c5:cc:f4:99:39:a5:a8:8c:ac:59:b4:
         b0:68:97:0a:19:d5:d4:58:76:d6:9f:78:62:12:19:01:49:cd:
         7a:5f:57:93:3d:21:e5:6f:4d:41:a6:cf:2b:9d:c5:40:54:07:
         29:17:cb:d9:b8:f8:a1:f3:5d:c0:c8:dc:33:3d:af:34:14:fa:
         cd:ac:ec:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHRrn/iVOWFny5c2MwBChcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMmNlN2ZkMmY1YjFiNzk3NTdjODk3M2FlM2Y3YjBiZTY4
NjM4NWIwHhcNMjYwOTIyMDQwMTM2WhcNMjYwOTIzMDQwMTM2WjAzMTEwLwYDVQQD
Eyg1NDQwMTkyMjliNDBjN2M5NzAzNGRjOThiYzlhMDU4YzY3NmNhOGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sC8LP4WH1/ij4qLIapZ5R2/r9j3
uEXBGN3vUQ9fQeJDpvNJlk2QCyeDcR2ekV1kVcmO3rp798l6iClct2fHYE3UTQAq
/hkVpiWzfP7doXk2I++5yI1kB7SGJ4/nPPPmlWNNQ52Ir6yaQCz2nEduNBR1JG/M
gQ1eJyoNT/2IjJTsl06omgc+Rk9C30Q3K5S5Jym5vsGiG3MOvUECQWiiHdumJw/j
JzRgElAgIL0aMsIfqiMzyXmu5wTPyxz0UIlav5peAy+AtypUYmMuOVKjTnBFksE6
yf9SUZLUJrx9zX8CnuErZyhzlrSb/UiRZOnigZfGO2jWzSE694hoPZgsVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRAGSKbQMfJcDTcmLyaBYxnbKjQMB8GA1UdIwQY
MBaAFAss5/0vWxt5dXyJc64/ewvmhjhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMt
YTY0MTA5MTllODk4LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMtYTY0MTA5MTllODk4
LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7feEIf/
yiooJ+hR5m78byGEeAN5vhb7L1Ozf5uQU/5VmYgVm19Qn6OfvnGByCPVm9RmTaZ/
U0Mf6lGeQvL7EUX4SGkVBc2p6m40QskuQ1akoWNGh76AhLLtbQf0Lpe4wjSyEkkb
0sMUjbKhULnlxfzxHWEkClVKPHYi2vfvAW2qa914qAamFj99YfUw9MqXIoUJwCSy
coN15prxbn0rQ5g6LTcO9FH/Jp1xs+rlbeYepI8V28CL3iQOp8XM9Jk5paiMrFm0
sGiXChnV1Fh21p94YhIZAUnNel9Xkz0h5W9NQabPK53FQFQHKRfL2bj4ofNdwMjc
Mz2vNBT6zazsyw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:11:20 2026 by rpki-client