Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
File:                     66jbO1TQgcML9Rvcexnk9kgLf1M.mft (raw, json)
Hash identifier:          03ko9y4IQMSLxh5OCAYg/WGxhzKaSBRzN2j/gr2gd2g=
Subject key identifier:   C5:2B:34:A7:BB:D9:CF:E2:32:86:EE:4F:D6:4A:E3:BB:2E:B8:31:ED
Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
Certificate issuer:       /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Certificate serial:       01A1DA5C906B53EDFF2131C7B17FA90CDF64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
Manifest number:          15D6
Signing time:             Sat 14 Nov 2026 14:01:01 +0000
Manifest this update:     Sat 14 Nov 2026 14:01:01 +0000
Manifest next update:     Sun 15 Nov 2026 14:01:01 +0000
Files and hashes:         1: 66jbO1TQgcML9Rvcexnk9kgLf1M.crl (hash: IxNIK35KWDblH6pFZjS2CCga85QLgyHRXtcGLotnWW0=)
                          2: JTmHSniL19sfbMbH8Ye17j9afA0.roa (hash: NJ1K/kjPj+5282ppidKGTbSxnlHWPqBZ+E9JpQMjbSA=)
                          3: _gDnsGaDxX5qfjhTgT91rNbt8PQ.roa (hash: chKbqu7AGPQnm2cfa+TKPacAMDJqQQv70h7pTEPw45U=)
                          4: nJb4Xuh2R72e5h53vUEdD9OOPSk.roa (hash: TV9t2IL706DHQsp3CsiDYhb5n1v7wClr7OHnz0RCyAg=)
                          5: nbBdckUEspBVGSHKC4SpFpPe-2o.roa (hash: GNVJtI2mfDROc5AVzq7KuYAoChVGFURdFa/LW7JWb7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:5c:90:6b:53:ed:ff:21:31:c7:b1:7f:a9:0c:df:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
        Validity
            Not Before: Nov 14 14:01:01 2026 GMT
            Not After : Nov 15 14:01:01 2026 GMT
        Subject: CN=c52b34a7bbd9cfe23286ee4fd64ae3bb2eb831ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7f:99:e1:fa:ef:be:64:58:02:73:32:0a:56:
                    ea:da:7e:ba:55:a3:66:21:57:98:ad:91:bb:25:5b:
                    06:6d:22:d7:35:4b:b0:9f:9a:f0:c5:ac:57:9e:12:
                    2e:28:f3:fa:91:f8:27:9c:d9:b6:34:a9:fd:2c:40:
                    e7:3d:5d:b7:14:60:a4:84:b7:0c:1b:21:e6:20:1a:
                    ae:e3:35:01:96:26:ad:02:42:29:1b:36:d2:47:80:
                    3f:64:d3:7b:d0:1f:f8:82:e4:47:64:cc:53:e2:6d:
                    84:b4:c6:5b:52:91:8a:70:ca:b8:88:81:9b:09:bb:
                    41:fe:2a:28:06:e6:30:eb:53:e0:27:0a:b9:8f:12:
                    c9:fb:d2:ce:71:f2:22:8b:71:fa:11:3c:87:87:90:
                    ae:2c:cd:41:56:d1:2d:a4:df:f3:2d:91:2e:e0:34:
                    cc:26:81:ff:20:a4:98:20:7e:44:cd:98:aa:51:46:
                    ea:f4:6a:7a:81:98:3f:23:1d:9a:4c:5f:e4:f3:de:
                    5b:2f:d1:c1:91:96:66:b8:52:85:20:e9:07:81:7d:
                    13:17:b0:7e:76:ec:5e:a1:1b:b6:e0:eb:34:fb:3b:
                    3f:a5:66:71:01:11:84:15:3f:35:19:4f:25:5e:9d:
                    95:72:67:95:c8:e6:f5:69:46:28:58:94:df:c2:74:
                    02:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2B:34:A7:BB:D9:CF:E2:32:86:EE:4F:D6:4A:E3:BB:2E:B8:31:ED
            X509v3 Authority Key Identifier:
                keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:42:21:03:5f:26:3a:74:8c:91:ef:16:8a:03:ff:d9:0b:b8:
         01:87:3d:0e:07:79:2b:7c:fd:99:be:74:8d:3a:1d:45:1e:7a:
         f1:04:6e:66:f0:3d:7f:06:8d:81:b9:23:6a:8c:b2:f1:af:19:
         c8:de:e0:8b:c7:e2:44:9f:40:6a:ac:ad:9d:4e:18:b3:9a:1d:
         81:1a:32:94:19:80:57:dc:d6:7e:13:38:d3:0c:0a:87:09:f3:
         b0:db:3c:4f:6f:fd:5c:ae:61:b3:5f:8a:40:2a:f4:96:4b:a6:
         bd:d6:85:56:a7:90:f5:1d:89:77:53:53:05:fc:03:91:d9:b9:
         d6:e7:b8:a8:b4:4a:08:aa:f7:25:ad:b7:8a:15:78:cf:6d:c2:
         25:9d:40:92:30:c5:ae:db:42:52:29:71:25:f8:8d:93:83:cb:
         ad:29:88:9e:5f:4f:81:18:c5:44:63:74:2a:be:b9:30:54:8f:
         25:f0:99:4a:ca:84:41:9d:9b:ac:2f:76:a4:d7:22:a4:71:e2:
         66:0e:a5:97:70:ac:8e:53:55:d9:9a:f0:a3:94:be:ea:f6:d8:
         4e:24:c0:3f:4b:61:e1:30:c2:c1:75:45:e1:04:a9:7b:5e:99:
         8d:64:eb:8f:6b:78:df:b9:f1:71:ed:b1:4d:a4:52:f7:0b:85:
         1c:43:f8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:08:42 2026 by rpki-client