Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
File:                     66jbO1TQgcML9Rvcexnk9kgLf1M.mft (raw, json)
Hash identifier:          06i7GMGggmUmC5xZw/mNYTE/5Y7sIxMLM2/ne5W0YXI=
Subject key identifier:   17:AF:18:BF:2E:D3:A8:F3:B1:9C:DF:39:A3:8E:3F:DE:41:D4:E0:3E
Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
Certificate issuer:       /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Certificate serial:       019E8AC8BCC1C88816CF8B067F9C8D69647A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
Manifest number:          141E
Signing time:             Wed 03 Jun 2026 00:01:11 +0000
Manifest this update:     Wed 03 Jun 2026 00:01:11 +0000
Manifest next update:     Thu 04 Jun 2026 00:01:11 +0000
Files and hashes:         1: 66jbO1TQgcML9Rvcexnk9kgLf1M.crl (hash: qWs15fhmymWIhc3YPKz5XetK3AAji3FWv8RsP9xUMQA=)
                          2: JTmHSniL19sfbMbH8Ye17j9afA0.roa (hash: NJ1K/kjPj+5282ppidKGTbSxnlHWPqBZ+E9JpQMjbSA=)
                          3: _gDnsGaDxX5qfjhTgT91rNbt8PQ.roa (hash: chKbqu7AGPQnm2cfa+TKPacAMDJqQQv70h7pTEPw45U=)
                          4: gDmNfyo2pwQXQHNPMBhDcPR1ut8.roa (hash: e/eKhQXOYdcX2mvHX19L23nQ2fqxt3RSAqyp2KP3N3o=)
                          5: nbBdckUEspBVGSHKC4SpFpPe-2o.roa (hash: GNVJtI2mfDROc5AVzq7KuYAoChVGFURdFa/LW7JWb7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8a:c8:bc:c1:c8:88:16:cf:8b:06:7f:9c:8d:69:64:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
        Validity
            Not Before: Jun  3 00:01:11 2026 GMT
            Not After : Jun  4 00:01:11 2026 GMT
        Subject: CN=17af18bf2ed3a8f3b19cdf39a38e3fde41d4e03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d8:08:a3:e2:bb:10:27:11:7a:ad:14:c8:b9:
                    e2:50:e2:41:a2:1e:5f:3a:85:90:4b:43:68:54:71:
                    d1:4b:8d:08:64:06:41:81:25:ce:96:27:53:13:84:
                    f4:68:f1:96:ff:fd:e5:68:6e:d3:01:96:5c:f1:f8:
                    63:bd:3d:25:92:72:96:f8:39:c7:d8:8a:4b:56:c6:
                    50:2c:81:ff:c5:24:d3:b0:9a:6e:b2:4c:36:92:10:
                    95:de:68:fb:85:2f:60:68:ff:d5:be:ae:4d:23:2d:
                    34:6d:24:a7:0d:bd:50:7b:55:9b:d6:3e:63:23:7c:
                    d5:53:c6:26:60:ed:68:56:a5:e7:ea:0f:4d:f7:ac:
                    5f:c6:0c:4b:32:be:43:85:51:db:4b:a2:df:9b:a8:
                    5c:f2:32:30:53:70:05:6a:41:0d:e0:71:38:6a:e3:
                    98:5a:59:9b:dd:bc:f1:51:1d:53:a3:3f:8c:60:39:
                    64:fb:24:89:f4:a8:ce:b7:90:2b:14:dd:6a:da:75:
                    0e:1b:44:7b:ee:ac:26:68:e8:a3:58:f3:9b:5e:93:
                    ea:87:58:ac:96:23:44:a0:2a:3f:de:fe:30:57:82:
                    b1:aa:ef:39:c0:5d:a9:c1:8b:1d:34:96:86:c9:f8:
                    bf:1e:f5:7b:db:af:ce:0c:4e:d0:02:09:9e:20:45:
                    16:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AF:18:BF:2E:D3:A8:F3:B1:9C:DF:39:A3:8E:3F:DE:41:D4:E0:3E
            X509v3 Authority Key Identifier:
                keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:40:ce:f4:48:76:77:a3:19:6b:a9:d6:dc:bd:e8:59:43:f0:
         0f:cd:da:6c:1b:c5:0d:41:36:ec:aa:26:9b:d4:32:96:7c:4a:
         53:fb:c2:bc:e3:6f:6e:51:74:cb:69:a8:ab:9b:f2:47:6c:f3:
         93:15:2f:4e:56:69:27:ff:da:49:44:39:d9:ca:63:3e:7c:cb:
         17:81:29:09:2e:18:cb:f1:4f:50:c8:fc:89:47:ac:cc:97:dd:
         5a:b5:87:11:91:0a:a6:ca:61:22:17:53:ba:83:64:c9:ec:92:
         96:1a:f7:bd:ee:9d:93:f9:36:85:76:89:ca:5a:4b:95:f5:d9:
         bb:30:63:08:29:78:c8:89:90:ce:3b:1e:08:86:04:fc:19:c4:
         d4:4b:e7:77:3b:28:57:2f:5f:58:b3:d2:68:2b:37:68:4d:98:
         88:5d:76:2a:7e:a1:e4:36:18:d4:bb:16:b5:19:fe:db:c5:4d:
         85:9c:23:d7:ad:c9:41:4b:ff:d3:7e:1c:1b:e0:5d:66:6b:5c:
         3e:1a:ad:0b:d8:87:b7:cd:a0:51:c2:e1:21:c9:15:89:c3:e9:
         8e:89:ef:ee:83:3b:4e:df:73:0e:ce:ee:c0:be:a7:ae:84:61:
         05:06:ea:08:57:ed:07:f9:d3:1d:91:c2:97:70:47:1b:5b:3f:
         ad:54:a3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:24:08 2026 by rpki-client