Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
File:                     66zZjeeRkjV63PnfCtvoMZIii9U.mft (raw, json)
Hash identifier:          ejrVmL+fCuc3wFR+ATUjpSRUhE2CdXqBtrdJ5leH39k=
Subject key identifier:   BB:60:87:89:CC:BD:76:6C:DC:07:44:C9:A5:EA:F6:40:A6:EC:02:80
Authority key identifier: EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
Certificate issuer:       /CN=ebacd98de79192357adcf9df0adbe83192228bd5
Certificate serial:       01A00281C0049B3D918A2B7CADFEA945225B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
Manifest number:          0417
Signing time:             Fri 14 Aug 2026 23:00:52 +0000
Manifest this update:     Fri 14 Aug 2026 23:00:52 +0000
Manifest next update:     Sat 15 Aug 2026 23:00:52 +0000
Files and hashes:         1: 66zZjeeRkjV63PnfCtvoMZIii9U.crl (hash: aJ5swhJiWXAY0fshSrEC4W/mSXZ1fywGVPsb2kC0vlg=)
                          2: gxySuvg8u5BuoAl8tcXCHUIQr6c.roa (hash: NaDIju3NwOnk+CGyy3F8idBsnH8FhBIsHnDgcS1uXRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 23:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:c0:04:9b:3d:91:8a:2b:7c:ad:fe:a9:45:22:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebacd98de79192357adcf9df0adbe83192228bd5
        Validity
            Not Before: Aug 14 23:00:52 2026 GMT
            Not After : Aug 15 23:00:52 2026 GMT
        Subject: CN=bb608789ccbd766cdc0744c9a5eaf640a6ec0280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:1f:13:fc:85:49:de:f8:63:52:76:37:68:
                    cf:21:0d:2a:43:8a:cc:13:fc:13:f8:84:3e:9a:28:
                    9f:21:0f:e4:ca:69:be:0c:54:33:06:ac:38:a1:b9:
                    45:5e:dd:41:22:46:e2:38:22:dc:f8:84:bd:2a:50:
                    bb:89:8b:7b:68:29:66:80:b1:60:43:7f:57:74:ae:
                    e4:e5:d9:cc:23:a6:85:66:a6:f7:a8:d5:d7:b6:7d:
                    63:02:b1:f2:63:c6:e2:14:44:31:0c:73:7d:03:58:
                    e3:f5:60:8f:bb:ed:a9:0d:41:d6:5f:bc:86:dd:44:
                    aa:24:1a:5b:24:bd:58:c6:e5:2b:b1:a1:5c:b3:5f:
                    8a:19:1b:32:76:91:d2:96:61:be:e3:83:36:c6:a8:
                    f5:14:b9:8c:57:34:71:c2:a6:0a:39:32:c8:c9:65:
                    a5:0a:d4:5c:c0:3d:31:0f:8e:3f:fc:09:79:25:7e:
                    fb:42:26:9c:89:3f:17:8a:ca:5f:08:47:11:73:94:
                    62:5f:e4:a9:1e:18:71:07:f1:1b:e3:04:40:72:f3:
                    23:a0:35:0e:0f:60:6a:6b:6a:4c:58:3c:2e:c5:2e:
                    49:9f:e1:d5:d9:82:be:97:8d:51:5e:c3:13:66:48:
                    60:e6:8c:95:5f:b5:c2:62:f6:d8:25:f8:0a:17:53:
                    98:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:60:87:89:CC:BD:76:6C:DC:07:44:C9:A5:EA:F6:40:A6:EC:02:80
            X509v3 Authority Key Identifier:
                keyid:EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:8e:ab:7f:c9:ea:69:b6:4d:0e:92:63:8d:f0:52:07:fe:08:
         bc:19:f7:7c:2d:29:a5:62:c4:cd:20:05:ca:f2:c6:8f:34:68:
         be:57:47:d8:08:73:fa:f5:36:de:b6:2c:09:cc:7d:72:61:c0:
         72:46:15:c6:1c:9f:32:ee:43:40:3f:b1:15:43:3c:a5:db:64:
         47:d6:f8:79:cf:18:3e:6a:6a:6f:3b:d5:23:e7:c8:a9:7d:f9:
         d9:bf:18:e4:10:eb:3b:ca:e6:a0:16:ad:86:1c:42:51:0a:72:
         48:bb:cd:6e:2a:fb:78:ce:ea:3a:28:5d:a6:c3:17:31:49:4c:
         15:7f:fc:a1:3e:ec:ed:88:29:c8:13:4e:64:1a:78:92:d2:5b:
         cd:4d:48:4b:69:9a:86:af:74:6c:b6:f2:e7:2b:f6:1e:17:45:
         b8:f4:0d:27:3b:c6:9f:8b:31:35:8f:94:d5:e0:fb:5a:93:a0:
         87:47:e0:66:22:ec:e3:3a:b5:79:01:f4:53:d7:1f:38:29:e4:
         3e:da:fc:57:70:ac:41:ae:0e:9d:e8:03:28:0c:2c:a5:ab:00:
         a4:d7:fc:af:b9:e7:45:c1:ed:48:52:4b:23:b6:7a:08:5f:a7:
         66:6f:6c:34:a5:1a:3c:05:a3:40:de:88:38:7b:9a:4a:1d:be:
         6f:e1:2f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:33:36 2026 by rpki-client