Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
File:                     66zZjeeRkjV63PnfCtvoMZIii9U.mft (raw, json)
Hash identifier:          QYDyB0UHXq9ODlimykQnsQSTQG9mOo3frzcxZhKkUC8=
Subject key identifier:   87:3F:CE:7D:31:29:38:9B:61:03:79:57:54:43:3F:72:8F:B8:7A:EF
Authority key identifier: EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
Certificate issuer:       /CN=ebacd98de79192357adcf9df0adbe83192228bd5
Certificate serial:       019D9C62FAF4087138FEB4409FDE3E4D1266
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
Manifest number:          02D9
Signing time:             Fri 17 Apr 2026 17:00:25 +0000
Manifest this update:     Fri 17 Apr 2026 17:00:25 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:25 +0000
Files and hashes:         1: 66zZjeeRkjV63PnfCtvoMZIii9U.crl (hash: U1fasS4gJzkuXW8dLEC9hQ88QCgsWMphQU6f5/VRiYo=)
                          2: gxySuvg8u5BuoAl8tcXCHUIQr6c.roa (hash: NaDIju3NwOnk+CGyy3F8idBsnH8FhBIsHnDgcS1uXRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:62:fa:f4:08:71:38:fe:b4:40:9f:de:3e:4d:12:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebacd98de79192357adcf9df0adbe83192228bd5
        Validity
            Not Before: Apr 17 17:00:25 2026 GMT
            Not After : Apr 18 17:00:25 2026 GMT
        Subject: CN=873fce7d3129389b6103795754433f728fb87aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:a5:9e:79:fc:29:e5:2a:bb:80:8f:e6:df:
                    37:9c:1f:36:de:a3:49:b5:2e:74:9c:62:63:91:19:
                    4d:34:b8:79:85:97:2b:c2:7d:35:28:e9:93:81:4b:
                    d4:d5:71:dd:03:2c:9c:6d:9d:ec:3c:5e:a1:3a:46:
                    d2:8b:cf:20:fa:ed:c9:76:33:f1:4c:f2:03:24:16:
                    ad:56:d5:b8:e3:48:c5:61:d2:11:6d:14:12:42:b9:
                    d3:cc:47:17:2f:87:e5:15:e0:2e:0a:82:f6:eb:35:
                    ae:a5:bd:76:43:92:b7:13:fa:e4:f4:20:6a:07:68:
                    81:4b:3b:e6:d7:b3:31:90:e4:7c:74:12:fd:94:f5:
                    ce:48:56:4e:15:0f:f4:d5:fd:5e:83:63:00:e4:97:
                    5b:82:30:ef:b4:48:65:38:78:1a:d6:5a:39:42:8e:
                    1a:f7:41:16:14:49:41:78:c6:33:f0:bf:9c:25:9f:
                    b5:96:e6:f6:9a:97:8f:32:19:a9:45:87:d4:0f:78:
                    22:b6:de:53:08:67:94:a6:65:ad:39:0a:82:08:bf:
                    64:3d:68:ac:d3:b2:0b:b1:74:33:1c:3a:a5:8a:c5:
                    72:2f:78:1d:99:ed:51:9c:f8:8e:58:75:16:00:8c:
                    bd:ce:d9:4a:62:65:83:76:06:c0:53:e5:84:60:da:
                    2d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3F:CE:7D:31:29:38:9B:61:03:79:57:54:43:3F:72:8F:B8:7A:EF
            X509v3 Authority Key Identifier:
                keyid:EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:02:a5:03:7b:02:ee:f8:cd:fc:ee:5c:ec:53:0f:00:d6:52:
         d2:c5:55:2d:20:c9:09:da:e2:ac:56:18:95:34:23:24:32:6f:
         d1:32:0e:ed:f7:4d:60:61:17:30:dc:fa:f6:8d:b2:6a:fc:05:
         42:3e:24:b7:a1:f6:53:cb:c3:f5:34:8c:92:3a:01:3d:33:06:
         bd:b6:c1:5b:e3:08:44:99:eb:9b:f3:0a:ea:80:ec:8e:ce:1c:
         54:81:a8:7c:01:27:4a:bf:d3:60:58:5f:fb:bf:8b:6c:a4:e7:
         bd:b2:08:86:ce:89:27:96:32:9e:6a:f1:96:e6:86:88:92:5c:
         40:ff:eb:1d:03:39:b0:33:46:a7:2c:51:5b:22:48:df:c9:2a:
         1c:15:ab:7f:00:b3:d9:aa:f2:0a:96:d4:e4:ac:54:b7:c9:e3:
         cb:c4:78:ac:a6:3a:44:85:21:e5:00:1a:d4:47:0a:f4:a6:6a:
         cb:6c:5a:20:10:f7:e6:f4:49:64:a2:bf:09:98:21:cd:39:cc:
         45:4b:ae:09:f4:2d:68:4e:22:26:94:db:dd:7f:56:34:21:92:
         22:b8:fc:67:74:ea:81:1c:17:bf:f3:e5:f3:9e:2d:26:45:24:
         0a:fc:9d:ac:ba:20:c8:4a:28:dc:76:f1:be:59:19:e6:19:f1:
         ee:9e:94:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:24:15 2026 by rpki-client