Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
File:                     Y8ZXGQ_tc_a752X0toIB_VVV48g.mft (raw, json)
Hash identifier:          WBepuYjeOwEugM2LIhcXt0PBSia+vhqkejBHP5DFiG0=
Subject key identifier:   C0:E5:CE:95:32:CD:BD:91:B6:79:01:D8:7D:D5:C0:1D:5C:AC:16:88
Authority key identifier: 63:C6:57:19:0F:ED:73:F6:BB:E7:65:F4:B6:82:01:FD:55:55:E3:C8
Certificate issuer:       /CN=63c657190fed73f6bbe765f4b68201fd5555e3c8
Certificate serial:       01A089E7AE06FB2E06271CCA62BB4636C54D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
Manifest number:          0FDD
Signing time:             Thu 10 Sep 2026 06:00:56 +0000
Manifest this update:     Thu 10 Sep 2026 06:00:56 +0000
Manifest next update:     Fri 11 Sep 2026 06:00:56 +0000
Files and hashes:         1: Y8ZXGQ_tc_a752X0toIB_VVV48g.crl (hash: kVh1SUPHDF3bIIjnsMZ9xXRyg3X1NshIXTN6d/liRR8=)
                          2: gx3ZjvhcUY6pyu4b18aAL4EQ4DA.roa (hash: yu6Abnv4m7/X+tce/TjsiGFwlxUQI9uzktykpDdAWEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 06:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:e7:ae:06:fb:2e:06:27:1c:ca:62:bb:46:36:c5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63c657190fed73f6bbe765f4b68201fd5555e3c8
        Validity
            Not Before: Sep 10 06:00:56 2026 GMT
            Not After : Sep 11 06:00:56 2026 GMT
        Subject: CN=c0e5ce9532cdbd91b67901d87dd5c01d5cac1688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:50:da:db:15:61:c5:31:2f:37:08:fd:50:44:
                    ae:13:ac:ca:7b:68:dc:a1:01:9b:d0:9f:59:93:bc:
                    f4:9d:e5:72:1d:65:82:b1:05:7b:ed:04:ef:c3:a5:
                    e9:32:57:33:f4:79:00:ff:c0:65:4d:54:aa:e9:65:
                    fe:23:a9:8e:7a:19:7d:88:bf:16:67:36:16:1a:9c:
                    d2:b2:ff:7f:3d:f6:08:3e:56:29:c2:39:9b:fb:00:
                    9e:ba:8a:a1:41:ea:23:84:d4:25:8e:37:92:46:68:
                    44:f5:ba:0f:f2:0e:af:e4:0d:26:b7:60:4a:17:1f:
                    54:d2:d2:4c:b9:10:f3:5c:38:a8:ef:2c:8c:63:ce:
                    ef:c6:ac:c6:17:35:7d:d8:f3:b0:bf:52:3b:c1:bb:
                    8c:a2:90:5b:0a:41:b6:0d:f9:40:21:65:b2:ee:b2:
                    29:44:f0:8c:a5:4c:61:3b:ce:04:8a:5d:1c:b1:08:
                    6a:d1:eb:76:7c:4d:e0:f1:21:b3:17:ba:8a:a9:2a:
                    5a:49:62:ef:1a:28:ac:e5:dd:f7:82:db:68:fd:2b:
                    02:86:54:eb:4e:c8:b9:87:d5:61:58:00:93:84:f2:
                    64:2a:9c:c5:c4:91:b9:be:ad:53:cc:1d:94:7a:10:
                    28:73:63:5d:b2:af:3b:9c:2f:bd:22:6d:1c:d2:2e:
                    53:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E5:CE:95:32:CD:BD:91:B6:79:01:D8:7D:D5:C0:1D:5C:AC:16:88
            X509v3 Authority Key Identifier:
                keyid:63:C6:57:19:0F:ED:73:F6:BB:E7:65:F4:B6:82:01:FD:55:55:E3:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:98:56:c7:99:0b:76:71:b3:7d:1a:09:9b:41:dd:22:d0:ac:
         0b:2a:b0:a1:24:63:51:7f:e7:df:39:eb:c8:59:19:19:c3:f0:
         4b:1a:98:e7:96:72:0a:0b:f8:fe:71:35:03:06:e0:c6:4f:a3:
         18:a8:ce:fb:81:cf:67:a6:5f:04:5f:46:01:c3:ed:2c:b8:8a:
         41:a4:e2:4e:77:a5:5d:0a:05:20:f4:37:62:b3:c2:0b:2f:69:
         5b:c0:67:9a:30:74:ef:ed:1c:e4:97:65:f6:3c:ae:53:72:b7:
         d9:22:c2:d2:c6:34:79:8b:18:83:aa:2a:1e:8c:fb:2a:c5:8b:
         98:b7:b0:42:9d:7b:b7:86:db:92:77:41:1d:b9:b7:c5:1d:49:
         da:6e:47:b4:55:8b:9f:3d:dd:54:2e:b9:4e:fd:ce:3f:e5:79:
         ae:5c:c3:fa:31:5e:a0:2e:77:e0:0d:5f:b7:9c:3b:13:17:50:
         89:8e:93:be:8a:0b:27:4e:d1:92:a3:4f:0a:3e:2b:34:cb:64:
         24:9f:81:8e:ff:11:71:2a:f1:58:95:45:3d:87:52:58:bc:76:
         35:50:12:19:5d:28:fe:e8:84:07:d5:65:3d:2f:6a:0f:d1:f8:
         e0:1e:f9:49:93:40:83:88:55:c0:ff:2e:9d:63:cd:f0:d1:4e:
         01:88:21:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:11:53 2026 by rpki-client