Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
File:                     66jbO1TQgcML9Rvcexnk9kgLf1M.mft (raw, json)
Hash identifier:          kca6okx1qGyXopCVNh61XnEXNsCffgPQDoBLp63j2sQ=
Subject key identifier:   3C:51:5C:F9:01:42:A0:FD:30:4E:50:1E:F7:9A:60:45:3B:7A:E7:15
Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
Certificate issuer:       /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Certificate serial:       019EBEEC95006C6A7F8F9C41193E9B463485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
Manifest number:          1439
Signing time:             Sat 13 Jun 2026 03:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:36 +0000
Files and hashes:         1: 66jbO1TQgcML9Rvcexnk9kgLf1M.crl (hash: HA6TlV8Aqskt11uKTqN7khqTrV1lKMPnNWm1HE19bj0=)
                          2: JTmHSniL19sfbMbH8Ye17j9afA0.roa (hash: NJ1K/kjPj+5282ppidKGTbSxnlHWPqBZ+E9JpQMjbSA=)
                          3: _gDnsGaDxX5qfjhTgT91rNbt8PQ.roa (hash: chKbqu7AGPQnm2cfa+TKPacAMDJqQQv70h7pTEPw45U=)
                          4: gDmNfyo2pwQXQHNPMBhDcPR1ut8.roa (hash: e/eKhQXOYdcX2mvHX19L23nQ2fqxt3RSAqyp2KP3N3o=)
                          5: nbBdckUEspBVGSHKC4SpFpPe-2o.roa (hash: GNVJtI2mfDROc5AVzq7KuYAoChVGFURdFa/LW7JWb7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:95:00:6c:6a:7f:8f:9c:41:19:3e:9b:46:34:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
        Validity
            Not Before: Jun 13 03:00:36 2026 GMT
            Not After : Jun 14 03:00:36 2026 GMT
        Subject: CN=3c515cf90142a0fd304e501ef79a60453b7ae715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:00:3e:2b:00:10:80:9a:5e:f9:2c:bc:90:80:
                    1d:6d:52:79:fe:41:5f:f1:f5:20:87:fd:4e:4a:a8:
                    b2:07:d5:54:30:57:d3:20:39:9f:55:02:82:8a:7c:
                    0b:2c:e0:5d:42:78:bb:8a:15:d0:a2:1b:db:ef:5e:
                    60:36:55:52:12:d5:e6:b5:e8:df:0a:87:e4:93:10:
                    f8:6e:a9:ef:e7:e5:13:63:94:58:ab:ec:12:ac:b3:
                    55:31:4d:a5:17:f2:93:f0:0d:c9:c4:40:21:06:83:
                    e2:88:b1:a7:30:37:75:27:4a:dc:d6:bd:ee:8b:5b:
                    72:08:70:6a:83:99:f3:3b:a2:eb:dd:15:63:7c:6b:
                    34:4c:1e:e9:b9:ad:65:0a:2f:b9:86:a2:23:49:fd:
                    77:a2:cb:e0:97:fc:80:3f:29:52:a7:a3:5e:df:ca:
                    d4:0d:43:ba:3c:94:16:7b:24:0a:ed:82:1c:c9:9f:
                    61:74:d9:9f:c5:49:21:d5:41:6e:17:9c:42:f8:34:
                    2f:3a:e0:a3:f3:04:a7:6e:b1:0f:dc:58:e4:e1:b7:
                    55:5d:09:7a:b7:62:75:9c:3a:25:f5:1e:14:9d:4d:
                    02:4c:94:3c:96:eb:6e:92:ad:fd:bd:b7:7a:bb:ab:
                    3b:69:24:72:f1:ba:8b:77:25:54:81:45:06:7b:30:
                    89:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:51:5C:F9:01:42:A0:FD:30:4E:50:1E:F7:9A:60:45:3B:7A:E7:15
            X509v3 Authority Key Identifier:
                keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:51:49:f5:1e:ed:f3:26:fd:0b:8f:29:4b:94:c7:83:6e:df:
         56:19:db:0d:e1:c3:ab:fa:df:34:21:96:44:33:93:63:61:c8:
         52:33:03:60:bd:7f:08:11:f7:eb:02:ca:d5:8a:42:0d:18:c9:
         c3:71:11:ea:82:98:b0:ce:6c:f8:d9:d5:71:5a:37:a4:be:ad:
         e4:16:36:55:6d:64:7a:65:4e:2a:e8:fc:f6:cb:98:47:37:0f:
         d4:6e:b3:f0:65:27:35:89:d0:46:79:90:7a:e7:c2:8a:64:f6:
         44:f1:4c:d0:e3:b3:5e:63:c2:b4:60:2d:fd:94:ac:9e:95:9f:
         9b:45:e4:2b:e1:15:15:8a:8d:cc:f1:5c:6c:d0:03:3e:7c:2d:
         06:bd:b9:34:a8:26:ab:a0:d2:57:72:42:90:78:63:37:35:fa:
         cd:a8:8e:9b:45:48:be:d2:52:ae:5c:f8:47:ed:0b:57:73:12:
         37:52:8a:b3:10:ec:87:8a:7b:b0:a4:22:53:aa:e3:82:6f:d8:
         7d:45:84:48:20:76:ea:e3:9f:0d:16:c7:a7:07:8c:18:4c:3f:
         2d:ca:17:33:78:75:2e:6c:c0:4a:dc:d8:07:78:df:c7:1d:d2:
         45:0e:d0:4c:a4:0e:7d:5d:f3:be:d6:fd:d4:07:98:a2:be:69:
         c7:9f:77:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:18:08 2026 by rpki-client