Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
File:                     Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft (raw, json)
Hash identifier:          8LrrerG5/HQh4/2PgmUbjCkfdYVu+NfCnFGQ7D+CB1o=
Subject key identifier:   B3:D4:DA:51:B6:2D:9C:30:4E:D3:90:75:FF:02:34:B6:20:FC:07:44
Authority key identifier: 63:CB:81:A7:AF:13:6D:96:F0:C7:60:51:DA:6E:4D:05:D1:FF:63:3D
Certificate issuer:       /CN=63cb81a7af136d96f0c76051da6e4d05d1ff633d
Certificate serial:       01A0E174A54C6C8F5EB78BA767CB860A1AAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
Manifest number:          EE
Signing time:             Sun 27 Sep 2026 06:01:53 +0000
Manifest this update:     Sun 27 Sep 2026 06:01:53 +0000
Manifest next update:     Mon 28 Sep 2026 06:01:53 +0000
Files and hashes:         1: 7cTjsLRiYYSxjEiyyxvrM7VcUoM.roa (hash: 9oRDcj/n0yIWrTx9daAB6UyBKfL+1eMjORwY8HvJ18Y=)
                          2: Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl (hash: IWeaFFC0ArTuswx1/njCzPC5rrHmOhQTaSfPeRPrdao=)
                          3: p0eoEVp2ZRfAFQIEeNZFFp6BKKo.roa (hash: 7ygvBpXf/4xZkV++cCRPOzyCKN66G0s7NhzA+lJoryE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:74:a5:4c:6c:8f:5e:b7:8b:a7:67:cb:86:0a:1a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63cb81a7af136d96f0c76051da6e4d05d1ff633d
        Validity
            Not Before: Sep 27 06:01:53 2026 GMT
            Not After : Sep 28 06:01:53 2026 GMT
        Subject: CN=b3d4da51b62d9c304ed39075ff0234b620fc0744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:c3:df:07:88:fc:61:38:e6:51:f1:20:d6:
                    aa:07:5f:90:a9:52:60:ef:c4:68:33:1c:b5:3d:1c:
                    04:17:07:fe:23:70:ab:58:7a:5d:f2:60:db:49:cb:
                    14:dc:36:f9:9a:8c:c9:48:cf:4b:91:ff:ab:00:c8:
                    2e:0a:3d:26:5c:dc:8e:d9:bf:da:ea:9b:78:55:ab:
                    5b:f6:84:7d:88:2b:9c:5d:92:9f:78:3e:36:85:a1:
                    16:bd:9d:1d:6b:12:d1:08:34:15:e3:05:2f:6a:b6:
                    5c:cf:f3:89:bd:fe:a0:62:f6:77:85:a3:6f:27:68:
                    51:6d:cf:19:b1:cd:57:ec:2d:63:78:75:a2:b5:19:
                    a3:d7:39:42:05:57:a6:98:76:66:58:a3:9d:b4:79:
                    c1:cd:42:87:bc:ee:f9:c7:4a:58:20:01:eb:4a:bf:
                    55:1b:f3:72:83:8e:f4:44:8e:fc:70:33:d1:5f:27:
                    18:23:66:e4:c2:0e:be:8b:4e:3f:6e:ea:71:00:c0:
                    fa:60:bd:0d:2f:a3:cc:9c:29:e8:1f:01:f2:de:80:
                    a2:c8:19:2e:0d:ab:f5:86:b5:50:a5:f3:4b:e6:47:
                    17:45:9e:47:e6:23:fe:75:d5:8f:64:d4:b4:95:d7:
                    02:06:b5:e1:8f:41:89:cf:49:d8:dd:15:44:f4:ee:
                    fc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D4:DA:51:B6:2D:9C:30:4E:D3:90:75:FF:02:34:B6:20:FC:07:44
            X509v3 Authority Key Identifier:
                keyid:63:CB:81:A7:AF:13:6D:96:F0:C7:60:51:DA:6E:4D:05:D1:FF:63:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c0:df:0b:7d:2b:60:e3:b2:7f:cf:27:c0:f1:8b:95:58:a8:
         4c:1c:ef:f0:49:b1:5f:00:49:83:8b:be:ab:f0:d4:37:d5:c2:
         58:ab:38:0d:75:07:2f:1b:c7:7d:74:8f:b4:05:65:93:50:64:
         5c:84:b0:d7:08:c6:50:7b:c1:22:24:89:0a:c3:4f:f4:63:d4:
         6d:52:ba:1f:30:63:57:6f:66:f9:fb:0f:cb:17:bf:fe:02:c0:
         24:ab:82:9f:6d:7f:39:ed:40:50:97:9a:4b:f4:7b:b5:f0:b9:
         36:f4:39:5d:c7:40:29:18:4a:9c:e8:77:a6:99:0c:6a:d6:7e:
         f9:b7:22:d7:0a:22:45:68:88:57:bc:2b:3f:49:b2:cc:b3:54:
         8a:c6:62:9b:b6:0f:9f:3a:22:e7:ae:f9:0b:35:c9:44:0d:00:
         49:fe:54:89:cd:ad:2c:47:36:95:34:e7:c3:80:72:03:ad:67:
         93:38:e6:19:c8:7d:e8:51:b7:bf:0f:7a:f8:1d:e9:d2:1a:c5:
         66:48:74:6c:05:f2:a8:32:26:d0:f3:a5:1c:c0:5c:2e:f6:27:
         a0:74:35:c4:69:65:4b:ef:92:e9:50:e2:d9:d9:2d:85:50:7b:
         86:de:a7:2a:3a:84:c6:1e:b7:06:d1:fc:29:06:e1:19:13:5f:
         ab:92:82:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:22:05 2026 by rpki-client