Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
File:                     66zZjeeRkjV63PnfCtvoMZIii9U.mft (raw, json)
Hash identifier:          1GfjiTe6jFRUVMuBt7Pdx9iUx0RNCuuUjyR3mCKONz4=
Subject key identifier:   2C:36:92:8C:2E:85:18:57:49:9D:24:DD:7A:2D:B3:62:3B:BA:B9:1F
Authority key identifier: EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
Certificate issuer:       /CN=ebacd98de79192357adcf9df0adbe83192228bd5
Certificate serial:       019E3117BD91ADBEF3784B9CB58E1673451F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
Manifest number:          0326
Signing time:             Sat 16 May 2026 14:01:39 +0000
Manifest this update:     Sat 16 May 2026 14:01:39 +0000
Manifest next update:     Sun 17 May 2026 14:01:39 +0000
Files and hashes:         1: 66zZjeeRkjV63PnfCtvoMZIii9U.crl (hash: +jW42+143EX7FZ2YbcjhzUlXidzdrxocwat/VnFmzyc=)
                          2: gxySuvg8u5BuoAl8tcXCHUIQr6c.roa (hash: NaDIju3NwOnk+CGyy3F8idBsnH8FhBIsHnDgcS1uXRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:bd:91:ad:be:f3:78:4b:9c:b5:8e:16:73:45:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebacd98de79192357adcf9df0adbe83192228bd5
        Validity
            Not Before: May 16 14:01:39 2026 GMT
            Not After : May 17 14:01:39 2026 GMT
        Subject: CN=2c36928c2e851857499d24dd7a2db3623bbab91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:71:aa:3c:9f:cc:6e:12:5c:55:1f:9d:ac:
                    60:9c:cb:f2:9e:22:e3:f0:30:4d:1d:0b:e6:d4:8e:
                    e3:85:6f:90:d4:fc:7d:83:33:ec:1f:62:0b:8c:74:
                    d9:e3:61:22:5a:2f:81:70:99:37:f7:fe:21:93:d2:
                    80:a2:f6:f6:30:d1:bc:3d:a9:de:5c:97:3b:d1:ff:
                    ab:2c:a4:38:b3:65:74:20:16:09:c6:98:3e:fd:ce:
                    c3:77:a2:d8:71:65:a4:c3:25:59:65:9a:5a:a5:26:
                    30:8d:a5:07:84:63:91:17:91:50:47:59:ac:75:d9:
                    a0:69:9c:ce:ec:73:2b:ce:b3:c9:f7:48:82:87:60:
                    52:2a:d9:6b:b2:50:4f:20:17:33:cf:a6:e8:ba:4d:
                    a4:57:57:22:3a:1c:97:f6:f6:01:8c:be:73:da:fe:
                    44:5e:91:9a:8e:83:eb:75:79:61:82:d0:cd:9b:e3:
                    ff:65:f2:a1:20:a5:71:ae:bf:21:3c:13:f6:42:e6:
                    df:1c:26:57:4b:eb:db:0a:ae:4e:d2:49:e8:d4:a3:
                    33:e2:a8:c7:a0:fb:35:a9:79:61:26:1c:c3:9f:77:
                    89:57:69:20:47:41:a7:76:6e:88:59:35:57:f8:86:
                    ad:5e:5e:2b:11:fd:08:c7:62:32:ae:ed:6d:d8:75:
                    3c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:36:92:8C:2E:85:18:57:49:9D:24:DD:7A:2D:B3:62:3B:BA:B9:1F
            X509v3 Authority Key Identifier:
                keyid:EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:70:58:e1:e7:9a:8e:08:e6:9d:58:57:65:30:60:62:d5:89:
         05:91:99:2e:30:48:a7:ae:e7:22:c8:61:51:d9:d5:06:ea:6e:
         74:bb:d6:7e:21:b7:34:87:a7:ab:4b:94:2d:51:fc:1b:2e:37:
         80:33:eb:79:3c:4b:ba:ac:e6:e8:d5:f7:73:ad:f2:a6:bc:d7:
         e2:d1:59:0a:a0:ba:b5:4c:1d:d9:b8:ac:3a:1b:b7:b8:58:6c:
         e8:84:7e:e8:89:50:ea:85:21:e9:be:ae:bd:5e:ce:57:5c:73:
         66:79:16:25:41:cf:2c:3f:50:09:d2:ae:bf:7a:dd:7b:e0:97:
         2e:0a:4d:9a:17:b7:34:bc:22:ee:b2:40:92:c5:31:e3:a3:a3:
         42:af:60:ee:53:d5:e0:4c:96:70:3f:ba:aa:02:59:cb:df:e7:
         07:18:de:f2:6b:e2:ac:ec:7b:e3:62:35:2c:a1:35:81:cb:4c:
         13:98:9a:81:a6:95:3e:97:6f:1c:9c:f5:43:cd:2a:e3:98:d6:
         80:c0:01:49:dd:e4:a8:ea:ad:fa:fd:6c:4d:c1:2b:02:32:b4:
         f3:42:00:7b:b7:74:4b:24:81:64:09:fd:b8:b7:25:40:0a:3f:
         6c:15:ca:68:31:52:63:be:51:8d:3c:75:b3:a8:e5:3f:85:00:
         9f:b5:45:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:14 2026 by rpki-client