Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.mft
File:                     66ruVpuHPHsF7NIh27fzQnS3v1E.mft (raw, json)
Hash identifier:          gEsMBB6Lpl15VgoLyc0FC+oqFXo79W7I852B7f1mC5Q=
Subject key identifier:   A9:03:01:C4:4F:50:17:FD:EA:B5:9B:21:8D:32:74:CF:70:AB:10:6A
Authority key identifier: EB:AA:EE:56:9B:87:3C:7B:05:EC:D2:21:DB:B7:F3:42:74:B7:BF:51
Certificate issuer:       /CN=ebaaee569b873c7b05ecd221dbb7f34274b7bf51
Certificate serial:       01A17C60919E98E0A52E7A97A417D229334D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66ruVpuHPHsF7NIh27fzQnS3v1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.mft
Manifest number:          BD
Signing time:             Tue 27 Oct 2026 08:01:05 +0000
Manifest this update:     Tue 27 Oct 2026 08:01:05 +0000
Manifest next update:     Wed 28 Oct 2026 08:01:05 +0000
Files and hashes:         1: 66ruVpuHPHsF7NIh27fzQnS3v1E.crl (hash: GfjQbGI9rqqblQSkTs5B7fs/Y9hIyhIb/iMb+xswGTI=)
                          2: _J6pdmckPgHyz2FG0GKqWH27YPI.roa (hash: g+6dKk+dtRpdHiyAdn0zdGS/dJUE/LqkB+mPs4d91gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/66ruVpuHPHsF7NIh27fzQnS3v1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:60:91:9e:98:e0:a5:2e:7a:97:a4:17:d2:29:33:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebaaee569b873c7b05ecd221dbb7f34274b7bf51
        Validity
            Not Before: Oct 27 08:01:05 2026 GMT
            Not After : Oct 28 08:01:05 2026 GMT
        Subject: CN=a90301c44f5017fdeab59b218d3274cf70ab106a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b4:a2:30:10:ff:7f:0c:52:d2:5f:28:34:7a:
                    0d:27:35:81:7b:cf:ee:94:83:5e:21:d3:15:f9:af:
                    8e:e0:5c:14:bd:23:c2:88:ab:46:45:a1:f1:99:5a:
                    88:cf:8f:33:c3:7a:18:22:93:f3:5b:c1:82:b3:6d:
                    23:dd:96:35:06:2e:8d:40:7a:1e:64:ab:c1:d6:8a:
                    c5:45:5c:1a:b7:6c:78:b2:99:18:e0:ab:d3:52:7a:
                    6d:7e:be:cc:b7:ba:38:46:f6:dc:ad:22:43:49:53:
                    c9:88:8f:f1:6f:fc:9e:d7:2a:ab:ea:b6:64:ac:a0:
                    a4:96:d8:e5:57:08:09:42:13:be:00:b2:04:fe:82:
                    f8:e5:c6:f1:6a:d6:99:fb:43:c8:5e:73:92:de:c9:
                    09:9a:b9:4e:29:7f:92:75:db:4d:a1:b7:f7:a9:10:
                    79:17:17:6e:cd:6c:9a:da:39:8c:cc:65:b7:2d:64:
                    16:9e:07:3a:ec:53:40:d4:c3:86:21:8f:06:39:f6:
                    2a:c9:e4:87:e9:d3:8a:8c:8f:a9:a6:5b:b1:2c:33:
                    32:f8:69:bb:92:5a:99:34:8f:93:d0:2d:64:73:35:
                    df:3c:b9:28:95:54:a6:ea:50:b4:fa:fa:58:dd:84:
                    c1:24:9f:1f:2f:58:e4:b6:b3:b8:4b:88:66:c1:3f:
                    02:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:03:01:C4:4F:50:17:FD:EA:B5:9B:21:8D:32:74:CF:70:AB:10:6A
            X509v3 Authority Key Identifier:
                keyid:EB:AA:EE:56:9B:87:3C:7B:05:EC:D2:21:DB:B7:F3:42:74:B7:BF:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66ruVpuHPHsF7NIh27fzQnS3v1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6b:79:f6:5b:9c:23:cf:ac:a8:0d:14:07:f8:76:80:d6:ef:
         4a:40:ec:0f:53:5a:be:54:dd:b0:5d:6f:ca:75:40:6c:85:ad:
         31:bd:4f:01:18:0b:1a:33:f7:77:5f:3f:a0:a5:91:55:05:f8:
         a2:d3:57:8a:a8:c7:cd:93:9b:6a:0f:7d:46:8c:71:c2:ba:f0:
         89:15:8e:96:ef:ff:a8:7b:a6:7e:90:f9:93:58:8d:40:82:c6:
         65:da:6e:8a:fd:2c:38:64:d8:2c:db:87:1a:50:19:7a:36:cf:
         ba:de:18:de:16:30:de:18:6c:e6:64:c5:63:b9:55:4f:ea:d6:
         05:df:42:ee:a0:84:99:55:6c:c7:3d:51:48:3e:72:d0:4e:23:
         98:6c:52:36:7e:a7:85:59:c5:b5:0a:cc:7f:e2:2f:5f:77:a3:
         2e:d5:6f:88:68:0a:99:9c:19:3e:eb:5f:0a:f4:7b:58:d0:ae:
         97:63:a8:15:fb:0a:08:08:fc:53:50:55:76:d5:b9:6f:ae:8c:
         18:33:fa:75:1d:44:29:e6:83:fa:f4:ab:8e:0a:68:0d:09:6d:
         e2:b6:3c:c9:9f:4d:9c:cf:e9:77:a4:4c:89:0e:58:4c:09:53:
         49:7f:17:e2:98:68:47:73:ac:84:ed:e9:2e:76:60:69:89:da:
         c7:0b:64:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8YJGemOClLnqXpBfSKTNNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYWFlZTU2OWI4NzNjN2IwNWVjZDIyMWRiYjdmMzQyNzRi
N2JmNTEwHhcNMjYxMDI3MDgwMTA1WhcNMjYxMDI4MDgwMTA1WjAzMTEwLwYDVQQD
EyhhOTAzMDFjNDRmNTAxN2ZkZWFiNTliMjE4ZDMyNzRjZjcwYWIxMDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLSiMBD/fwxS0l8oNHoNJzWBe8/u
lINeIdMV+a+O4FwUvSPCiKtGRaHxmVqIz48zw3oYIpPzW8GCs20j3ZY1Bi6NQHoe
ZKvB1orFRVwat2x4spkY4KvTUnptfr7Mt7o4RvbcrSJDSVPJiI/xb/ye1yqr6rZk
rKCkltjlVwgJQhO+ALIE/oL45cbxataZ+0PIXnOS3skJmrlOKX+SddtNobf3qRB5
FxduzWya2jmMzGW3LWQWngc67FNA1MOGIY8GOfYqyeSH6dOKjI+ppluxLDMy+Gm7
klqZNI+T0C1kczXfPLkolVSm6lC0+vpY3YTBJJ8fL1jktrO4S4hmwT8CIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkDAcRPUBf96rWbIY0ydM9wqxBqMB8GA1UdIwQY
MBaAFOuq7labhzx7BezSIdu380J0t79RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjZydVZwdUhQSHNGN05JaDI3ZnpRblMzdjFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hNjk2MjUtODBlMy00OTBlLWJkMmMt
YWIzZGNmYmUxOGU0LzEvNjZydVZwdUhQSHNGN05JaDI3ZnpRblMzdjFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hNjk2MjUtODBlMy00OTBlLWJkMmMtYWIzZGNmYmUxOGU0
LzEvNjZydVZwdUhQSHNGN05JaDI3ZnpRblMzdjFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmt59luc
I8+sqA0UB/h2gNbvSkDsD1NavlTdsF1vynVAbIWtMb1PARgLGjP3d18/oKWRVQX4
otNXiqjHzZObag99RoxxwrrwiRWOlu//qHumfpD5k1iNQILGZdpuiv0sOGTYLNuH
GlAZejbPut4Y3hYw3hhs5mTFY7lVT+rWBd9C7qCEmVVsxz1RSD5y0E4jmGxSNn6n
hVnFtQrMf+IvX3ejLtVviGgKmZwZPutfCvR7WNCul2OoFfsKCAj8U1BVdtW5b66M
GDP6dR1EKeaD+vSrjgpoDQlt4rY8yZ9NnM/pd6RMiQ5YTAlTSX8X4phoR3OshO3p
LnZgaYnaxwtkbA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:36:12 2026 by rpki-client