Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.mft
File:                     66ruVpuHPHsF7NIh27fzQnS3v1E.mft (raw, json)
Hash identifier:          p9cbyIE+s5wTKPHx5bIlCvyASFdOLItEgItaEY4CPuc=
Subject key identifier:   8C:6D:51:42:C2:CD:C1:E9:44:88:8F:67:1B:E7:40:48:D7:8B:AB:AF
Authority key identifier: EB:AA:EE:56:9B:87:3C:7B:05:EC:D2:21:DB:B7:F3:42:74:B7:BF:51
Certificate issuer:       /CN=ebaaee569b873c7b05ecd221dbb7f34274b7bf51
Certificate serial:       01A0C8C69519515F42B736C91A94BC2D6B9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66ruVpuHPHsF7NIh27fzQnS3v1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.mft
Manifest number:          60
Signing time:             Tue 22 Sep 2026 11:00:52 +0000
Manifest this update:     Tue 22 Sep 2026 11:00:52 +0000
Manifest next update:     Wed 23 Sep 2026 11:00:52 +0000
Files and hashes:         1: 66ruVpuHPHsF7NIh27fzQnS3v1E.crl (hash: xEBh37/UoKNUXuyIwEzNBCAC0Emsm35tqNTsQRJRIWM=)
                          2: _J6pdmckPgHyz2FG0GKqWH27YPI.roa (hash: g+6dKk+dtRpdHiyAdn0zdGS/dJUE/LqkB+mPs4d91gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/66ruVpuHPHsF7NIh27fzQnS3v1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:c6:95:19:51:5f:42:b7:36:c9:1a:94:bc:2d:6b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebaaee569b873c7b05ecd221dbb7f34274b7bf51
        Validity
            Not Before: Sep 22 11:00:52 2026 GMT
            Not After : Sep 23 11:00:52 2026 GMT
        Subject: CN=8c6d5142c2cdc1e944888f671be74048d78babaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:11:ba:52:bb:cb:65:2c:22:a8:64:40:4b:f3:
                    d3:9f:f2:fc:8e:be:9d:a8:c3:c1:f8:60:12:de:90:
                    90:d0:cf:fa:c0:0d:a3:ca:d8:ff:87:54:8e:5e:a2:
                    cd:f9:48:ba:bd:f2:7a:be:7b:7d:03:0d:f6:f2:3a:
                    30:3a:51:47:e3:02:e0:44:6e:16:b7:a0:14:46:7f:
                    a0:35:8a:5f:db:6e:eb:b0:a1:a0:ec:97:54:c6:fb:
                    74:8a:3a:8d:1a:16:d0:8e:62:a9:d7:59:80:bf:1b:
                    3d:9b:83:29:0f:bc:23:a2:22:1e:ef:f0:2f:c9:b6:
                    f7:04:7e:a1:2c:f0:e6:ef:78:df:b0:54:b5:c1:8f:
                    b7:8e:86:26:0e:eb:6a:82:cb:21:d7:e1:13:8f:ec:
                    f5:59:45:3e:d8:b9:ad:ce:25:94:4e:51:1b:d7:db:
                    9f:c7:b9:d9:74:4a:d9:de:5e:1f:29:b0:40:9f:4d:
                    3c:14:9d:fb:da:63:df:a2:fc:62:a8:9c:bb:39:60:
                    4b:a4:0e:29:c1:07:b4:41:2f:e8:32:33:2d:8a:c3:
                    02:7b:ab:a0:52:fc:d1:83:a3:c6:a9:b8:5f:c3:99:
                    ac:9f:d9:9e:f4:0e:eb:e4:6f:df:74:a5:37:a1:8f:
                    19:f7:b5:34:98:35:c5:a4:66:69:f2:33:f3:b8:3d:
                    f9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6D:51:42:C2:CD:C1:E9:44:88:8F:67:1B:E7:40:48:D7:8B:AB:AF
            X509v3 Authority Key Identifier:
                keyid:EB:AA:EE:56:9B:87:3C:7B:05:EC:D2:21:DB:B7:F3:42:74:B7:BF:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66ruVpuHPHsF7NIh27fzQnS3v1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c3:97:9f:05:ec:8b:4c:1b:fb:c7:06:74:61:ab:9e:81:12:
         c7:6b:c9:27:47:a6:2a:e4:96:ef:6a:e5:60:b8:c3:0f:e7:83:
         8c:70:c6:1f:28:ff:03:ee:26:46:95:7d:76:ca:68:9b:82:33:
         a9:09:29:40:ab:27:01:5b:f8:32:38:94:ac:46:71:dd:f8:29:
         0d:5d:41:d5:b2:32:af:79:d9:13:ec:80:d3:74:00:fa:37:f7:
         bd:27:7e:00:af:2c:19:61:61:cc:ce:b8:f2:63:4f:89:08:8b:
         11:56:61:6a:21:a8:7b:6c:58:d2:08:d0:11:00:e4:ae:ab:0e:
         7a:b1:7b:78:9d:56:fe:38:ef:04:e7:76:0c:5d:3b:d5:88:54:
         e4:d7:7c:09:c8:a4:b1:ae:54:94:77:7d:a7:81:fa:b0:cb:a5:
         be:f5:77:74:e9:36:8c:4f:72:f7:e9:ef:e3:df:a6:30:05:3d:
         ca:f5:bd:a9:74:21:a5:b8:6e:67:09:3c:9e:46:2e:ce:a4:bf:
         b1:5e:19:a4:93:48:f3:3e:cd:a3:a4:90:39:b1:7d:cf:43:bb:
         07:1d:64:1d:af:24:75:50:db:56:a0:76:e0:96:09:4e:27:5e:
         df:f9:d6:ea:9f:a7:85:4b:d1:dd:36:39:44:5b:86:32:35:44:
         eb:c1:b8:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIxpUZUV9CtzbJGpS8LWufMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYWFlZTU2OWI4NzNjN2IwNWVjZDIyMWRiYjdmMzQyNzRi
N2JmNTEwHhcNMjYwOTIyMTEwMDUyWhcNMjYwOTIzMTEwMDUyWjAzMTEwLwYDVQQD
Eyg4YzZkNTE0MmMyY2RjMWU5NDQ4ODhmNjcxYmU3NDA0OGQ3OGJhYmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxG6UrvLZSwiqGRAS/PTn/L8jr6d
qMPB+GAS3pCQ0M/6wA2jytj/h1SOXqLN+Ui6vfJ6vnt9Aw328jowOlFH4wLgRG4W
t6AURn+gNYpf227rsKGg7JdUxvt0ijqNGhbQjmKp11mAvxs9m4MpD7wjoiIe7/Av
ybb3BH6hLPDm73jfsFS1wY+3joYmDutqgssh1+ETj+z1WUU+2LmtziWUTlEb19uf
x7nZdErZ3l4fKbBAn008FJ372mPfovxiqJy7OWBLpA4pwQe0QS/oMjMtisMCe6ug
UvzRg6PGqbhfw5msn9me9A7r5G/fdKU3oY8Z97U0mDXFpGZp8jPzuD35BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxtUULCzcHpRIiPZxvnQEjXi6uvMB8GA1UdIwQY
MBaAFOuq7labhzx7BezSIdu380J0t79RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjZydVZwdUhQSHNGN05JaDI3ZnpRblMzdjFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hNjk2MjUtODBlMy00OTBlLWJkMmMt
YWIzZGNmYmUxOGU0LzEvNjZydVZwdUhQSHNGN05JaDI3ZnpRblMzdjFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hNjk2MjUtODBlMy00OTBlLWJkMmMtYWIzZGNmYmUxOGU0
LzEvNjZydVZwdUhQSHNGN05JaDI3ZnpRblMzdjFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecOXnwXs
i0wb+8cGdGGrnoESx2vJJ0emKuSW72rlYLjDD+eDjHDGHyj/A+4mRpV9dspom4Iz
qQkpQKsnAVv4MjiUrEZx3fgpDV1B1bIyr3nZE+yA03QA+jf3vSd+AK8sGWFhzM64
8mNPiQiLEVZhaiGoe2xY0gjQEQDkrqsOerF7eJ1W/jjvBOd2DF071YhU5Nd8Ccik
sa5UlHd9p4H6sMulvvV3dOk2jE9y9+nv49+mMAU9yvW9qXQhpbhuZwk8nkYuzqS/
sV4ZpJNI8z7No6SQObF9z0O7Bx1kHa8kdVDbVqB24JYJTide3/nW6p+nhUvR3TY5
RFuGMjVE68G4dQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:22:30 2026 by rpki-client