Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
File:                     66zZjeeRkjV63PnfCtvoMZIii9U.mft (raw, json)
Hash identifier:          vp0J5GPsk9QlCFJXXIimQcDv4zkKVidJ2Z6OjdjFDV8=
Subject key identifier:   2D:91:B3:75:5D:4B:82:F9:3C:96:2D:DA:6D:E6:3E:07:2E:BE:32:4F
Authority key identifier: EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
Certificate issuer:       /CN=ebacd98de79192357adcf9df0adbe83192228bd5
Certificate serial:       019FAB9A568D0E54C5B37C739D5E1D401002
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
Manifest number:          03EA
Signing time:             Wed 29 Jul 2026 02:00:46 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:46 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:46 +0000
Files and hashes:         1: 66zZjeeRkjV63PnfCtvoMZIii9U.crl (hash: xg9t59r6IoTXb5rnY7nzmILEiL+QO9+KsHvXarnn9Mc=)
                          2: gxySuvg8u5BuoAl8tcXCHUIQr6c.roa (hash: NaDIju3NwOnk+CGyy3F8idBsnH8FhBIsHnDgcS1uXRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:56:8d:0e:54:c5:b3:7c:73:9d:5e:1d:40:10:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebacd98de79192357adcf9df0adbe83192228bd5
        Validity
            Not Before: Jul 29 02:00:46 2026 GMT
            Not After : Jul 30 02:00:46 2026 GMT
        Subject: CN=2d91b3755d4b82f93c962dda6de63e072ebe324f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:ee:7b:3a:07:d4:a4:65:f0:7b:19:4f:97:
                    bb:16:15:ca:cc:8f:62:c6:20:50:c2:a3:31:6a:d4:
                    00:d3:42:86:2e:d1:a6:c9:9e:2d:92:59:01:aa:fe:
                    ea:c0:2f:85:2d:54:9b:6d:be:42:2a:ca:6d:84:f9:
                    51:b4:a5:57:eb:6d:0b:71:a2:19:c0:a3:ff:2a:eb:
                    e1:ec:f1:4a:5b:99:fa:65:a6:7f:96:e9:e6:95:cc:
                    d2:23:f8:82:0f:33:78:f4:62:0f:31:f9:f6:33:49:
                    1a:2b:d5:23:ec:c9:34:1e:02:ab:3f:b0:94:2e:68:
                    67:e1:cd:e4:f7:c4:b1:ae:b5:dd:f2:e7:85:c2:46:
                    a0:87:53:43:07:fb:99:09:4e:e8:67:a8:18:f1:32:
                    2e:54:63:32:29:bc:94:a1:ff:de:48:f3:a7:95:00:
                    6c:f3:92:26:36:9a:90:97:8a:6e:df:e0:10:4f:d0:
                    bb:52:ba:01:6f:19:d7:d6:a0:15:e5:73:4c:ae:f0:
                    c9:c2:e5:a9:d2:6b:5f:20:e5:0d:f1:9c:69:29:e0:
                    f2:c4:a4:8f:bc:a6:10:9f:b9:93:64:92:65:03:dd:
                    ec:10:30:70:c9:bc:d3:51:af:c0:0c:f3:fe:f3:d5:
                    12:e7:4c:8f:bb:65:2b:f6:fe:1c:ae:9c:c6:47:1b:
                    8e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:91:B3:75:5D:4B:82:F9:3C:96:2D:DA:6D:E6:3E:07:2E:BE:32:4F
            X509v3 Authority Key Identifier:
                keyid:EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6a:76:b6:b7:83:b3:57:da:2a:66:73:fc:54:c6:c4:2b:0c:
         6b:8b:63:bc:57:91:b6:07:ee:74:9a:ae:9a:25:33:e9:05:48:
         17:0a:c5:be:70:2b:b3:71:9e:c3:ec:af:9f:20:fb:d8:88:af:
         8d:53:90:dc:fe:a9:1e:bb:fd:7f:31:f7:6b:94:d2:f1:61:ff:
         07:4e:f2:a0:8c:ae:3c:e7:00:91:37:b6:19:7d:04:e0:f2:f2:
         d9:17:f1:59:b5:3b:70:98:f2:46:70:83:e6:d2:4e:f0:22:ca:
         bc:57:15:4e:7e:f8:b1:b4:1c:7b:17:ce:be:97:ee:ca:70:60:
         a2:ed:a8:d6:f5:14:7c:68:db:b4:8e:3c:b2:eb:23:ed:64:ff:
         0f:60:a0:a6:d2:74:af:53:3b:ba:89:f0:bf:fd:67:66:95:8f:
         d8:ea:33:3a:38:67:f3:3f:db:2b:e6:80:1e:fb:b6:92:7a:fa:
         74:d4:ae:12:1f:58:17:83:df:be:67:d2:65:8f:5f:2f:95:c4:
         b5:00:c6:03:7b:59:97:64:fc:74:1d:f1:b4:6d:15:d4:84:c6:
         b1:7a:73:b1:54:a6:ab:55:06:22:ad:fd:28:dd:8d:8f:cf:c5:
         45:ff:a6:1e:07:a1:3a:b6:65:a3:c9:4c:66:21:51:be:9e:a8:
         28:11:a1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:22 2026 by rpki-client