Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
File:                     66zZjeeRkjV63PnfCtvoMZIii9U.mft (raw, json)
Hash identifier:          zxMfb/ORtY/axNHkQjnjpma26uIQ2hNxGM6yxAID1Sw=
Subject key identifier:   84:E7:61:10:6A:FB:61:2B:37:81:67:BD:25:09:2C:9D:CA:01:CB:4E
Authority key identifier: EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
Certificate issuer:       /CN=ebacd98de79192357adcf9df0adbe83192228bd5
Certificate serial:       0198D5160879047EF5AC290F03362397BA47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
Manifest number:          56
Signing time:             Sat 23 Aug 2025 04:00:47 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:47 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:47 +0000
Files and hashes:         1: 66zZjeeRkjV63PnfCtvoMZIii9U.crl (hash: 3a15/Y5j2vbd0TEazciwx7riMyB4yTu8B/7SVwHPg8Y=)
                          2: eGSHlG0EkLHxKJr3m4XWKvi4FDE.roa (hash: KSBVppHXh5GaOp6rIqFzma8M+CxkT9xkf7FurYUushA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:08:79:04:7e:f5:ac:29:0f:03:36:23:97:ba:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebacd98de79192357adcf9df0adbe83192228bd5
        Validity
            Not Before: Aug 23 04:00:47 2025 GMT
            Not After : Aug 24 04:00:47 2025 GMT
        Subject: CN=84e761106afb612b378167bd25092c9dca01cb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:7b:0b:7d:bd:5b:f3:69:c7:4e:4b:fa:7e:
                    7b:4d:2e:7b:73:83:a3:2d:64:bc:f5:94:5d:e8:14:
                    d2:5e:16:e2:0c:13:d1:1b:41:b9:e1:7d:67:93:b4:
                    c4:fa:da:91:4c:0d:a4:d0:c7:f9:a0:89:08:5e:91:
                    e4:05:17:c6:ef:e5:4a:8d:42:11:81:c2:79:16:bf:
                    80:60:22:02:bb:0f:84:15:1d:8a:5e:dd:8d:f2:66:
                    01:0c:95:9f:92:67:38:e6:02:3e:05:88:c6:6c:0c:
                    1b:a1:86:31:26:89:e5:64:e4:10:75:f3:c7:c1:7e:
                    26:aa:68:88:32:db:3a:87:e4:e7:ad:4d:74:8c:35:
                    8c:27:3a:ae:6f:70:e4:cb:27:cc:36:31:9d:60:46:
                    0c:4c:33:8d:f6:55:54:c0:e2:d0:21:9a:41:48:82:
                    71:58:70:6a:3d:d5:ed:a0:29:ff:8c:b1:31:73:8d:
                    b8:9a:4a:87:e0:24:32:84:58:84:05:a6:e5:2b:0b:
                    c8:a7:3c:93:3d:ad:8f:6c:91:51:0b:dd:cf:79:80:
                    28:f1:1c:26:fa:08:84:17:c4:70:0a:fa:7c:37:5c:
                    dc:8a:e8:1e:0a:cf:ec:c3:1e:d1:0d:89:91:6e:ae:
                    09:ac:c8:58:ff:c3:85:e6:6c:93:9e:ad:2c:f5:c7:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E7:61:10:6A:FB:61:2B:37:81:67:BD:25:09:2C:9D:CA:01:CB:4E
            X509v3 Authority Key Identifier:
                keyid:EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:eb:67:6f:54:bf:7e:b0:8b:4e:6b:2d:71:f0:11:eb:d3:5d:
         f8:83:a2:76:79:52:e0:f7:fb:21:8f:0f:32:bc:fc:9a:5f:21:
         a7:44:8b:85:af:7d:ab:a0:c9:19:d6:aa:6e:86:36:6e:23:a2:
         89:93:ef:44:e7:36:98:74:66:56:02:66:02:be:16:6e:c9:36:
         4a:21:e6:45:f2:8b:57:b9:f0:c8:d7:65:79:52:c3:5c:7a:21:
         2d:09:c2:bf:cd:1c:6f:d2:64:5a:c4:09:f5:66:15:63:26:e6:
         b7:96:a3:d1:30:d1:75:94:12:6d:1c:44:1f:58:19:61:a7:dd:
         a4:07:0a:df:e3:a3:b9:7d:75:c8:c0:b7:2c:43:87:2e:80:10:
         df:93:ed:92:2f:1e:b9:40:e3:69:e7:bd:64:d2:e8:30:96:ca:
         90:b4:d1:c0:89:1f:9a:0f:68:d3:9e:32:2b:9f:13:1f:5e:e8:
         59:c4:bb:28:08:3f:f1:af:42:6b:d6:f8:c4:5a:6a:0f:50:d9:
         f7:70:04:bd:82:a9:12:b3:8c:69:35:e8:f4:99:ec:6e:42:28:
         6a:1e:52:d7:ff:d4:05:45:89:3f:ab:60:5c:80:db:d4:4d:60:
         29:a7:34:0c:40:7b:79:2b:31:56:9b:07:81:a2:bf:33:e1:9d:
         0b:fd:73:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:24 2025 by rpki-client