Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
File:                     66jbO1TQgcML9Rvcexnk9kgLf1M.mft (raw, json)
Hash identifier:          PMMDK8HCJ2jhdX0Tl0mSVcSGY9MeVs5z5Q4NY0ypEJg=
Subject key identifier:   0B:11:03:0B:4B:22:08:63:29:B7:D0:B3:43:03:83:26:AD:26:4A:CF
Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
Certificate issuer:       /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Certificate serial:       019F81F91E35392C1F7DD5D12209EA286A06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
Manifest number:          149E
Signing time:             Tue 21 Jul 2026 00:00:14 +0000
Manifest this update:     Tue 21 Jul 2026 00:00:14 +0000
Manifest next update:     Wed 22 Jul 2026 00:00:14 +0000
Files and hashes:         1: 66jbO1TQgcML9Rvcexnk9kgLf1M.crl (hash: ujLuFi7uGtNlTIkVNYKBgX1TFfg91EZl1SsMlizYWlo=)
                          2: JTmHSniL19sfbMbH8Ye17j9afA0.roa (hash: NJ1K/kjPj+5282ppidKGTbSxnlHWPqBZ+E9JpQMjbSA=)
                          3: _gDnsGaDxX5qfjhTgT91rNbt8PQ.roa (hash: chKbqu7AGPQnm2cfa+TKPacAMDJqQQv70h7pTEPw45U=)
                          4: gDmNfyo2pwQXQHNPMBhDcPR1ut8.roa (hash: e/eKhQXOYdcX2mvHX19L23nQ2fqxt3RSAqyp2KP3N3o=)
                          5: nbBdckUEspBVGSHKC4SpFpPe-2o.roa (hash: GNVJtI2mfDROc5AVzq7KuYAoChVGFURdFa/LW7JWb7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:81:f9:1e:35:39:2c:1f:7d:d5:d1:22:09:ea:28:6a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
        Validity
            Not Before: Jul 21 00:00:14 2026 GMT
            Not After : Jul 22 00:00:14 2026 GMT
        Subject: CN=0b11030b4b22086329b7d0b343038326ad264acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2c:9b:68:96:2a:9a:3c:ee:83:4a:97:be:45:
                    c7:b0:ac:39:e8:1e:65:a4:e3:9a:8e:43:e2:ec:d7:
                    cc:21:24:a7:14:6a:58:63:9c:e4:79:b6:9d:42:ee:
                    fa:70:48:6c:d9:c4:c4:47:f5:df:a8:1f:25:af:6d:
                    25:f0:3b:ca:45:3e:52:86:b3:b4:aa:06:76:22:c6:
                    78:62:37:62:93:80:b0:11:52:dc:12:4c:72:3d:30:
                    ea:f0:36:d4:b7:52:7a:c8:29:48:5a:7c:66:38:34:
                    ea:d1:17:1c:66:be:5c:8b:5e:f0:2f:b5:35:cc:0d:
                    ac:3e:52:12:49:de:0a:b0:68:3b:35:2f:cb:12:ef:
                    84:5a:e7:ed:cd:66:fb:bc:dd:c9:14:1f:91:aa:af:
                    fa:3b:01:8d:7a:b9:c5:3e:f7:35:14:60:30:f0:86:
                    a3:f9:23:e5:d0:e7:0f:56:f0:84:ca:83:98:bc:c2:
                    56:06:c2:04:43:79:12:07:a9:f5:6a:5b:67:4b:3b:
                    f5:79:3c:68:10:9b:5b:de:f4:48:38:24:c6:02:24:
                    3d:76:c9:8b:70:da:c5:cf:8e:6b:04:4e:5a:54:c7:
                    4b:a0:61:91:8b:ec:e3:65:15:90:5a:c5:86:c3:28:
                    cf:68:40:24:ed:25:37:4b:30:65:8e:fc:8a:8c:14:
                    ff:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:11:03:0B:4B:22:08:63:29:B7:D0:B3:43:03:83:26:AD:26:4A:CF
            X509v3 Authority Key Identifier:
                keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:91:08:90:07:1c:13:17:4d:8f:a8:8b:02:66:96:c5:47:d7:
         fd:59:44:e7:67:21:73:37:d8:57:fd:f5:84:36:65:53:ae:d0:
         dd:3b:c2:ea:d0:5d:4d:f4:6c:19:80:d6:4f:a1:fc:57:ec:16:
         0c:00:d8:3a:3f:3a:ff:0c:fa:75:7f:e8:cf:34:23:d7:48:8a:
         1b:bc:f6:71:10:ee:d8:cb:70:cb:7c:7f:d9:0c:a9:3f:2f:5e:
         48:d8:51:d2:b5:72:e9:18:ee:36:a2:5f:4b:02:e1:b4:09:0e:
         6a:03:39:b8:06:42:55:01:cc:3b:9e:72:e2:a6:81:0a:ec:a7:
         22:3a:3d:90:c9:4c:de:b5:48:d0:61:3b:74:5e:22:98:57:c8:
         26:e0:df:bd:2f:60:3c:d6:77:9d:99:54:13:a8:66:21:03:a3:
         0d:fe:fe:32:58:a7:4a:60:3b:28:e6:40:1f:72:be:a4:40:ff:
         68:88:10:72:5b:ce:5d:50:31:8e:9b:74:19:a9:62:62:d6:d1:
         37:31:ab:dd:b6:00:5e:a4:5d:93:47:80:51:10:91:47:2f:a5:
         f6:0b:55:87:a6:5d:16:2a:a7:35:95:41:d9:65:cf:dc:ba:73:
         7b:18:85:5c:a4:e7:45:63:34:2a:31:6a:39:2b:02:02:a5:7d:
         60:c8:6f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:59:20 2026 by rpki-client