Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
File:                     Y8ZXGQ_tc_a752X0toIB_VVV48g.mft (raw, json)
Hash identifier:          n56FiADXkbzE18TvjArgt5/q/N9/6vGVUTDWGLMkFMQ=
Subject key identifier:   55:26:4C:CF:28:84:12:5C:A8:65:4F:9B:BD:AF:13:0C:6A:F6:EC:10
Authority key identifier: 63:C6:57:19:0F:ED:73:F6:BB:E7:65:F4:B6:82:01:FD:55:55:E3:C8
Certificate issuer:       /CN=63c657190fed73f6bbe765f4b68201fd5555e3c8
Certificate serial:       019D28BBDC1B66DEBF1AE6A0AB346D8ABB98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
Manifest number:          0E1D
Signing time:             Thu 26 Mar 2026 06:01:33 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:33 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:33 +0000
Files and hashes:         1: Y8ZXGQ_tc_a752X0toIB_VVV48g.crl (hash: kW4ahiuUCXh1pqMlv1ggsmHVQvUmdnwS9Uf4mdgqGw8=)
                          2: gx3ZjvhcUY6pyu4b18aAL4EQ4DA.roa (hash: yu6Abnv4m7/X+tce/TjsiGFwlxUQI9uzktykpDdAWEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:dc:1b:66:de:bf:1a:e6:a0:ab:34:6d:8a:bb:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63c657190fed73f6bbe765f4b68201fd5555e3c8
        Validity
            Not Before: Mar 26 06:01:33 2026 GMT
            Not After : Mar 27 06:01:33 2026 GMT
        Subject: CN=55264ccf2884125ca8654f9bbdaf130c6af6ec10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:94:b0:38:67:76:f1:d2:f1:66:6d:46:68:70:
                    bc:62:f7:df:68:3c:42:0e:ea:2a:c7:5d:ac:8c:d3:
                    89:e5:b4:71:b6:16:9b:d7:6d:7a:26:c6:4d:bb:bd:
                    3b:ce:52:9a:92:1c:5b:fb:9a:21:27:4a:c7:f4:fa:
                    d4:53:5b:08:fb:e2:82:9d:05:4c:da:1f:6d:6b:0f:
                    12:29:9f:f5:3f:4e:08:6c:88:18:f6:45:f8:40:05:
                    43:6d:1a:e9:87:34:db:e9:cc:5b:79:3e:1f:f4:d1:
                    b8:ae:9b:40:2a:60:2d:93:61:6b:12:2c:2a:d2:98:
                    09:56:39:2c:a0:96:7f:77:50:cd:ab:9f:ac:ef:25:
                    33:5b:06:98:94:41:ff:31:50:f7:0a:4d:51:3e:cf:
                    5a:45:ab:e3:28:db:7a:e0:09:9c:ef:7e:e6:f8:c3:
                    e9:d3:b1:9d:4f:1d:45:37:e7:ee:1e:e9:22:c7:f1:
                    ee:ab:a1:eb:8f:7f:a4:9c:b5:c1:6d:64:1a:31:be:
                    60:f4:6b:85:ee:37:9a:28:17:bb:b6:ea:84:62:96:
                    f1:e7:a2:eb:6c:8a:f3:f1:92:c7:fe:8d:0c:7e:aa:
                    30:fc:ea:55:af:0a:9c:e4:34:8b:30:36:17:5e:a3:
                    87:90:aa:b1:91:07:bd:0a:79:a0:78:84:5a:d8:e1:
                    da:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:26:4C:CF:28:84:12:5C:A8:65:4F:9B:BD:AF:13:0C:6A:F6:EC:10
            X509v3 Authority Key Identifier:
                keyid:63:C6:57:19:0F:ED:73:F6:BB:E7:65:F4:B6:82:01:FD:55:55:E3:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:45:a9:0d:06:30:fc:dc:f6:46:8c:07:e1:4a:dd:2f:ef:8b:
         e5:79:e8:d0:39:f8:ed:9e:f5:9f:f8:d6:a0:d7:f9:2f:ba:2e:
         bb:e7:c5:3e:97:e9:c4:d5:12:fa:53:48:c6:11:95:97:d6:24:
         4f:72:b5:84:a1:ed:96:46:0a:14:3d:27:fe:b1:5f:b0:43:c7:
         9c:b7:07:29:40:1b:cf:45:bd:9d:7a:09:24:4d:87:80:71:ca:
         59:5a:ec:0a:a4:cb:fd:29:0f:96:94:a3:d5:dd:ee:49:70:d7:
         07:63:82:eb:e0:23:bc:85:c2:b1:c6:5e:67:a1:fb:c5:18:ea:
         63:72:51:dc:3a:b2:45:16:ce:52:9a:34:28:38:9b:1d:ce:c9:
         e5:98:a1:e6:c0:aa:b0:26:91:c4:95:1d:d0:37:72:e0:1d:be:
         70:05:2b:6f:c2:a5:eb:68:b4:c8:d4:ee:2d:7e:2f:ef:d5:92:
         52:e0:3d:8d:f1:0b:91:57:c5:7b:c4:ca:3f:f0:4c:3a:3d:d5:
         88:41:b6:55:89:22:b0:e4:5c:0f:fa:33:2b:a0:9a:2a:da:b2:
         7f:2c:f2:74:01:56:fe:b5:2d:89:38:d0:90:38:17:fb:cd:c5:
         5f:ea:df:ab:ea:fc:48:1f:0a:e7:f7:a2:4d:0e:2a:5b:0f:cd:
         89:af:37:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:36:52 2026 by rpki-client