Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
File:                     66jbO1TQgcML9Rvcexnk9kgLf1M.mft (raw, json)
Hash identifier:          tGdOBWsLqKVZ2QeIip1dz8Lj9zS62vmxxD1bv+pZarE=
Subject key identifier:   43:E8:37:DA:56:99:50:6C:56:E5:18:02:FC:03:3C:70:B1:B0:2D:17
Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
Certificate issuer:       /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Certificate serial:       01A0B4D16F5034DE4B23BD5285BAABC3E833
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
Manifest number:          153E
Signing time:             Fri 18 Sep 2026 14:00:19 +0000
Manifest this update:     Fri 18 Sep 2026 14:00:19 +0000
Manifest next update:     Sat 19 Sep 2026 14:00:19 +0000
Files and hashes:         1: 66jbO1TQgcML9Rvcexnk9kgLf1M.crl (hash: i570TJCfZ769RdEsnk9zUMyvxkW2jnwKOUYTdpNO7kA=)
                          2: JTmHSniL19sfbMbH8Ye17j9afA0.roa (hash: NJ1K/kjPj+5282ppidKGTbSxnlHWPqBZ+E9JpQMjbSA=)
                          3: _gDnsGaDxX5qfjhTgT91rNbt8PQ.roa (hash: chKbqu7AGPQnm2cfa+TKPacAMDJqQQv70h7pTEPw45U=)
                          4: nJb4Xuh2R72e5h53vUEdD9OOPSk.roa (hash: TV9t2IL706DHQsp3CsiDYhb5n1v7wClr7OHnz0RCyAg=)
                          5: nbBdckUEspBVGSHKC4SpFpPe-2o.roa (hash: GNVJtI2mfDROc5AVzq7KuYAoChVGFURdFa/LW7JWb7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 08:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b4:d1:6f:50:34:de:4b:23:bd:52:85:ba:ab:c3:e8:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
        Validity
            Not Before: Sep 18 14:00:19 2026 GMT
            Not After : Sep 19 14:00:19 2026 GMT
        Subject: CN=43e837da5699506c56e51802fc033c70b1b02d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8f:02:c5:6e:e3:76:42:f5:4d:45:0e:25:75:
                    b9:65:5c:cc:91:fc:5e:2a:10:f4:7e:08:94:46:c8:
                    33:7c:fe:4e:83:66:b7:75:a2:11:c8:9e:18:a7:fc:
                    03:47:a9:78:66:6f:dd:4c:03:d9:b0:2e:d7:86:18:
                    96:84:9a:d6:3b:dc:1e:26:59:68:cf:28:30:bf:3c:
                    a0:c0:31:3a:d2:17:94:5c:4a:08:90:91:ae:0f:4c:
                    38:c3:88:a0:dc:62:d0:64:17:0a:e6:7f:54:25:1a:
                    f9:f4:87:d2:b1:ee:f7:a0:dc:26:59:9e:75:a0:f3:
                    da:7c:2c:43:ce:2b:17:c5:b1:3e:5b:00:02:a8:a0:
                    32:cd:4b:95:29:9f:41:16:42:62:da:3c:91:95:39:
                    24:50:ca:65:3a:b2:7d:47:55:54:90:fd:79:a0:77:
                    fc:dc:be:fb:5d:f8:81:53:ad:3e:3c:90:75:a6:88:
                    62:5e:49:e2:ca:1f:51:6b:3d:2e:fc:a5:ab:fb:26:
                    54:64:d1:5a:fe:ec:43:36:7b:7c:a0:96:33:c3:4d:
                    0e:30:9b:d5:73:ad:78:22:ac:99:67:2f:a0:bb:1b:
                    63:66:5b:64:b2:73:a2:ba:7e:e8:f9:95:be:f8:76:
                    b7:7a:12:82:60:0d:e8:2d:4e:dd:bb:e7:a2:00:77:
                    30:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E8:37:DA:56:99:50:6C:56:E5:18:02:FC:03:3C:70:B1:B0:2D:17
            X509v3 Authority Key Identifier:
                keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:40:b2:32:ff:52:d5:57:3d:b6:17:dd:ea:b4:08:a1:b6:fd:
         54:7b:14:be:dc:d2:dc:bf:70:55:d0:ff:32:26:21:8f:b2:cd:
         6a:5c:96:3a:24:e8:1c:1c:a2:c9:c2:3c:a0:78:66:09:3a:33:
         cd:3f:7b:01:49:7c:37:8e:14:2a:55:52:83:8f:c9:ed:b8:5e:
         d8:35:fc:de:46:47:da:64:05:22:ec:0e:93:ee:dc:29:15:73:
         f8:41:5b:25:f0:2f:88:64:23:4d:f4:ae:19:d9:9a:75:fb:99:
         8b:25:37:59:c7:79:27:74:ce:5b:2a:3c:8d:47:43:1e:fb:ab:
         1e:69:15:06:b4:60:79:85:9b:59:1d:25:37:49:cf:05:61:53:
         80:51:0c:05:12:48:ca:fe:79:ee:c0:00:64:f1:91:98:4a:ae:
         e6:24:18:a0:d6:c9:2d:8e:97:38:e7:f8:2c:ef:33:21:80:64:
         b3:ae:71:3f:dc:ce:04:68:ba:17:5b:20:47:67:2e:c9:2b:95:
         7d:55:d5:b9:d8:9a:67:08:fc:4f:75:50:7c:82:b2:3f:50:1f:
         d1:91:77:ae:4e:46:78:a1:06:4a:34:04:a2:a9:ee:55:9e:6f:
         97:82:20:0f:c3:18:c7:f1:cd:35:70:8b:23:c5:29:55:57:fe:
         cd:89:0b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:10:43 2026 by rpki-client