Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
File:                     66zZjeeRkjV63PnfCtvoMZIii9U.mft (raw, json)
Hash identifier:          r2f1o0DjpHfz2ghe4yAWRnqYWMZO16M+shOps0sEo34=
Subject key identifier:   B2:2E:8F:B8:27:86:1F:5B:13:17:71:39:0C:B8:AC:9C:4B:2C:F1:C3
Authority key identifier: EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
Certificate issuer:       /CN=ebacd98de79192357adcf9df0adbe83192228bd5
Certificate serial:       019EC1EE1D035A1BF451E84CFB841A3C9E6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
Manifest number:          0371
Signing time:             Sat 13 Jun 2026 17:01:08 +0000
Manifest this update:     Sat 13 Jun 2026 17:01:08 +0000
Manifest next update:     Sun 14 Jun 2026 17:01:08 +0000
Files and hashes:         1: 66zZjeeRkjV63PnfCtvoMZIii9U.crl (hash: yne3gtnudyXAa0hvnCerj+yUutT7uHa/JmuJkXveJUo=)
                          2: gxySuvg8u5BuoAl8tcXCHUIQr6c.roa (hash: NaDIju3NwOnk+CGyy3F8idBsnH8FhBIsHnDgcS1uXRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ee:1d:03:5a:1b:f4:51:e8:4c:fb:84:1a:3c:9e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebacd98de79192357adcf9df0adbe83192228bd5
        Validity
            Not Before: Jun 13 17:01:08 2026 GMT
            Not After : Jun 14 17:01:08 2026 GMT
        Subject: CN=b22e8fb827861f5b131771390cb8ac9c4b2cf1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:75:51:d6:26:f9:1d:ff:61:30:f8:ea:e7:31:
                    61:d9:0c:d2:2e:5a:6a:2d:6f:5f:15:e3:21:7b:42:
                    ba:ab:17:74:e4:a8:8e:88:a7:73:28:55:01:5a:ac:
                    3f:cb:b7:9b:a4:f2:46:92:53:56:46:a0:f2:50:69:
                    90:03:5d:83:6f:ab:10:bd:f7:42:bd:f5:1a:f1:02:
                    c9:82:39:3d:08:e2:ef:f8:01:e5:c4:a2:ac:6c:f0:
                    1c:f8:2b:62:9a:96:1a:ba:a3:ef:46:d0:e7:8e:9d:
                    8f:df:c9:83:93:01:2e:b7:1b:cf:43:63:24:f6:c2:
                    d0:bd:d5:3e:ca:88:91:7c:8b:d3:66:e2:f5:35:11:
                    b2:14:46:41:b3:b1:ff:57:f6:2e:91:ec:80:19:66:
                    7c:f0:9f:eb:7e:e3:e6:20:22:d7:9d:e4:78:fe:fd:
                    33:a0:7b:11:22:d0:c1:45:f6:7f:c9:fc:cf:d6:e2:
                    29:2c:4a:cc:7b:83:7a:3d:fc:7b:d6:dc:5f:58:79:
                    d7:13:20:69:4e:a1:e2:1d:68:20:4c:9e:f1:9a:db:
                    94:fc:0c:39:16:f0:52:8f:cc:05:dc:e3:a5:45:6e:
                    3b:fa:61:ba:e6:1d:1e:58:bf:aa:9c:6b:62:38:82:
                    8b:5e:03:a2:48:9a:49:01:7b:ed:61:71:59:2c:73:
                    38:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2E:8F:B8:27:86:1F:5B:13:17:71:39:0C:B8:AC:9C:4B:2C:F1:C3
            X509v3 Authority Key Identifier:
                keyid:EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:1c:4c:9c:c4:58:b1:a5:1f:8e:91:34:c2:f8:05:9b:2a:a1:
         42:92:a6:9b:3f:e2:75:dc:72:5e:1a:ba:4e:4d:5c:40:07:56:
         b3:3a:9b:f6:df:88:5e:91:b5:2e:67:91:84:5b:6b:53:cc:8c:
         11:c2:31:34:68:a3:f1:0a:9e:b3:11:45:c8:90:ee:de:c3:06:
         62:9a:15:73:30:66:7d:f5:8d:2c:88:93:cb:9c:60:7b:47:58:
         c7:ff:60:11:c8:78:e7:e8:c2:ef:0a:2a:97:2b:26:81:3f:67:
         f9:b9:8a:a6:ca:05:6f:5b:31:4a:44:c5:e9:ee:e7:1e:dd:79:
         be:82:e8:18:1a:e1:fe:82:f1:34:02:2d:3b:63:4d:95:b6:8d:
         e0:e7:ec:91:d4:7b:63:19:fe:95:dd:0e:56:c6:90:8a:cd:c1:
         6d:aa:00:cc:31:86:1e:7b:a6:4d:86:41:52:e4:d9:65:2b:7f:
         79:06:42:1b:7b:dc:8d:03:c5:e4:2c:4f:1b:06:82:e2:84:2c:
         75:2c:9d:42:5c:e0:d3:d5:06:33:25:2a:8c:d0:bf:cf:51:15:
         52:c5:dd:c5:82:b3:43:78:e7:f4:9f:d6:3b:fd:c7:d3:c0:d6:
         4f:db:bf:01:34:b2:6d:42:8d:de:99:e7:68:42:ca:54:5c:49:
         ad:40:71:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:19 2026 by rpki-client