Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
File:                     66jbO1TQgcML9Rvcexnk9kgLf1M.mft (raw, json)
Hash identifier:          y77OVsMyaDAbFg1BMEWK8wBADhtfD9+3xBKBSYe+zoE=
Subject key identifier:   9B:9C:0D:8D:63:B3:E1:FB:4C:D4:69:3C:88:FF:C5:54:01:12:41:B5
Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
Certificate issuer:       /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Certificate serial:       019FAA8869430A6E4A4A6553989B18EFA303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
Manifest number:          14B3
Signing time:             Tue 28 Jul 2026 21:01:34 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:34 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:34 +0000
Files and hashes:         1: 66jbO1TQgcML9Rvcexnk9kgLf1M.crl (hash: 6Zp2hOxJL7Or1nU3NYfPHDYNz51GKKKDBBci1cF+B8k=)
                          2: JTmHSniL19sfbMbH8Ye17j9afA0.roa (hash: NJ1K/kjPj+5282ppidKGTbSxnlHWPqBZ+E9JpQMjbSA=)
                          3: _gDnsGaDxX5qfjhTgT91rNbt8PQ.roa (hash: chKbqu7AGPQnm2cfa+TKPacAMDJqQQv70h7pTEPw45U=)
                          4: gDmNfyo2pwQXQHNPMBhDcPR1ut8.roa (hash: e/eKhQXOYdcX2mvHX19L23nQ2fqxt3RSAqyp2KP3N3o=)
                          5: nbBdckUEspBVGSHKC4SpFpPe-2o.roa (hash: GNVJtI2mfDROc5AVzq7KuYAoChVGFURdFa/LW7JWb7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:69:43:0a:6e:4a:4a:65:53:98:9b:18:ef:a3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
        Validity
            Not Before: Jul 28 21:01:34 2026 GMT
            Not After : Jul 29 21:01:34 2026 GMT
        Subject: CN=9b9c0d8d63b3e1fb4cd4693c88ffc554011241b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:07:df:c0:99:08:b9:57:d4:98:1b:24:49:
                    e2:03:58:bb:9c:a2:9c:6c:e3:ec:32:17:f4:26:ff:
                    0a:18:e9:64:6a:80:50:08:2d:f4:b9:2a:37:f5:b3:
                    d1:2b:54:ee:13:ad:6d:c4:6d:03:ab:28:d6:6e:30:
                    f8:f5:17:0d:b1:59:e2:e7:d4:60:0e:38:8b:32:70:
                    98:a7:a7:b3:d8:74:2f:e1:5f:ef:3f:90:61:de:48:
                    7b:74:eb:d0:61:c0:af:3b:c2:de:75:df:0a:61:76:
                    be:2b:b5:4f:03:60:33:b9:61:25:81:c4:b4:00:ea:
                    08:70:4d:eb:9b:26:36:ba:0a:63:cc:be:e9:e8:50:
                    fa:9e:e4:68:fa:d1:3b:66:2f:55:91:ea:2a:71:c8:
                    ca:d7:b4:03:19:00:af:45:b7:07:2d:0f:16:4e:23:
                    91:d1:be:33:e0:8c:d8:5d:bf:ca:2c:fe:9f:97:fb:
                    3d:85:75:db:f0:48:60:d1:7e:98:65:49:87:1d:9e:
                    10:7c:97:f2:13:a1:0d:72:e8:f9:dc:71:82:62:f9:
                    57:1d:53:e0:dc:e1:1e:f7:3f:2a:b8:63:b2:02:5d:
                    80:96:37:c7:1b:c8:f5:7a:62:16:84:f8:b4:bf:3f:
                    42:7b:9b:30:82:84:7c:eb:c6:37:53:08:6d:d1:a7:
                    46:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9C:0D:8D:63:B3:E1:FB:4C:D4:69:3C:88:FF:C5:54:01:12:41:B5
            X509v3 Authority Key Identifier:
                keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:66:0b:75:45:2a:37:d1:c5:e5:37:92:e7:0d:6b:e7:58:56:
         4c:f8:96:61:63:83:67:27:a7:a0:49:47:5e:26:cc:aa:80:3d:
         a7:be:6e:7c:08:c4:32:03:84:ce:33:5c:7b:e4:cb:c3:26:ec:
         b7:e4:1e:4c:a3:31:9d:c3:2f:e3:cb:08:21:3a:95:75:61:01:
         e4:c8:e4:0f:95:98:0e:54:db:b5:bf:6a:e4:26:6d:53:e3:15:
         66:d1:48:42:4e:60:dd:9d:44:49:b5:9f:c4:01:39:c5:95:1f:
         7b:22:58:62:b7:1b:51:f6:92:8b:af:21:16:5e:41:77:72:90:
         30:ac:bc:eb:52:6d:8e:32:07:17:e5:34:6a:ca:fb:0f:58:01:
         b8:50:f0:37:4a:80:05:ac:e2:29:df:5b:df:12:e2:80:7d:0b:
         db:9e:7e:bb:23:e7:ff:31:be:5a:e6:89:a1:fc:69:a1:0c:42:
         2d:43:79:b9:c4:07:e6:f0:7a:58:16:3e:9d:28:32:d1:be:38:
         44:27:f7:80:d6:d6:c6:64:0c:15:b6:23:84:4a:25:ca:94:28:
         2a:4a:60:1f:b5:40:09:b0:11:34:16:94:ba:4c:4f:fc:7a:8e:
         9b:6b:7f:ea:96:f5:d9:ba:a0:07:d4:c6:2b:f7:4d:48:c0:43:
         1d:04:b1:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiGlDCm5KSmVTmJsY76MDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYThkYjNiNTRkMDgxYzMwYmY1MWJkYzdiMTllNGY2NDgw
YjdmNTMwHhcNMjYwNzI4MjEwMTM0WhcNMjYwNzI5MjEwMTM0WjAzMTEwLwYDVQQD
Eyg5YjljMGQ4ZDYzYjNlMWZiNGNkNDY5M2M4OGZmYzU1NDAxMTI0MWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL4H38CZCLlX1JgbJEniA1i7nKKc
bOPsMhf0Jv8KGOlkaoBQCC30uSo39bPRK1TuE61txG0DqyjWbjD49RcNsVni59Rg
DjiLMnCYp6ez2HQv4V/vP5Bh3kh7dOvQYcCvO8Ledd8KYXa+K7VPA2AzuWElgcS0
AOoIcE3rmyY2ugpjzL7p6FD6nuRo+tE7Zi9VkeoqccjK17QDGQCvRbcHLQ8WTiOR
0b4z4IzYXb/KLP6fl/s9hXXb8Ehg0X6YZUmHHZ4QfJfyE6ENcuj53HGCYvlXHVPg
3OEe9z8quGOyAl2AljfHG8j1emIWhPi0vz9Ce5swgoR868Y3Uwht0adGFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJucDY1js+H7TNRpPIj/xVQBEkG1MB8GA1UdIwQY
MBaAFOuo2ztU0IHDC/Ub3HsZ5PZIC39TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjZqYk8xVFFnY01MOVJ2Y2V4bms5a2dMZjFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82Y2NmMDMtMDkwZC00MTZlLTg2Y2Yt
ZTlkYzNmMWNmODI0LzEvNjZqYk8xVFFnY01MOVJ2Y2V4bms5a2dMZjFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi82Y2NmMDMtMDkwZC00MTZlLTg2Y2YtZTlkYzNmMWNmODI0
LzEvNjZqYk8xVFFnY01MOVJ2Y2V4bms5a2dMZjFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2GYLdUUq
N9HF5TeS5w1r51hWTPiWYWODZyenoElHXibMqoA9p75ufAjEMgOEzjNce+TLwybs
t+QeTKMxncMv48sIITqVdWEB5MjkD5WYDlTbtb9q5CZtU+MVZtFIQk5g3Z1ESbWf
xAE5xZUfeyJYYrcbUfaSi68hFl5Bd3KQMKy861JtjjIHF+U0asr7D1gBuFDwN0qA
BaziKd9b3xLigH0L255+uyPn/zG+WuaJofxpoQxCLUN5ucQH5vB6WBY+nSgy0b44
RCf3gNbWxmQMFbYjhEolypQoKkpgH7VACbARNBaUukxP/HqOm2t/6pb12bqgB9TG
K/dNSMBDHQSxDQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:28 2026 by rpki-client