Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
File:                     62eoQOQaxm-PNZzL1lNUyRcEK78.mft (raw, json)
Hash identifier:          WA1rbe8zaeys5HHuxjnxNCk6iZfJf6VnbF9DRRe+2Yw=
Subject key identifier:   C6:DE:85:37:5F:34:64:1E:5B:E1:85:17:04:3D:59:DF:4E:A7:59:43
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Certificate issuer:       /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial:       019CABD9F84B07E4E7CE43473157C554477F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
Manifest number:          0C75
Signing time:             Mon 02 Mar 2026 00:01:54 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:54 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:54 +0000
Files and hashes:         1: 62eoQOQaxm-PNZzL1lNUyRcEK78.crl (hash: IU2ghZVUs2BmG8VzQ1m66r1fPdIBTsvW4SQk1Abs6DA=)
                          2: y_DN1NlT3WxnHFjjy8yM8EUu98c.roa (hash: xlreRmvPkwb20CmAYP76if0DKA37CnCWemcHHd4gTDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:f8:4b:07:e4:e7:ce:43:47:31:57:c5:54:47:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
        Validity
            Not Before: Mar  2 00:01:54 2026 GMT
            Not After : Mar  3 00:01:54 2026 GMT
        Subject: CN=c6de85375f34641e5be18517043d59df4ea75943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cb:6e:71:4c:ae:e6:e3:01:80:09:f5:bb:1e:
                    f9:18:e2:df:97:8e:9d:4c:49:d2:24:46:6d:b8:5e:
                    02:05:79:7e:5e:0b:e1:25:42:aa:8b:05:2b:43:77:
                    59:82:a2:d2:f0:3f:c4:7a:bd:79:65:e9:13:ae:47:
                    b7:b8:23:db:c4:1f:7a:b3:19:32:90:df:04:ad:ca:
                    4a:95:2c:5e:a4:b9:c0:8a:fb:c8:bd:b5:f0:aa:6b:
                    88:72:2e:4d:20:ee:8d:4b:1e:92:2d:7d:11:44:da:
                    df:b3:d0:33:3f:45:93:b0:ba:f4:dd:cc:3a:6c:75:
                    9f:0c:ee:95:b1:4f:0c:50:f4:ec:24:7e:1d:35:c2:
                    1e:65:17:bb:50:2e:59:3a:29:dd:27:20:5a:93:d4:
                    cb:01:72:1e:62:cf:12:71:61:87:14:de:6a:26:54:
                    ef:f0:bc:e5:1f:60:8a:1f:3e:b7:97:ab:d7:21:09:
                    db:e6:94:63:5a:c1:da:bd:b5:27:63:83:d0:57:f7:
                    c2:d0:63:5e:72:76:47:a4:44:ac:49:85:dc:ab:a3:
                    9b:38:da:13:22:a6:87:13:e3:ee:53:a0:5f:9f:36:
                    2f:eb:bf:78:57:73:7d:5c:8c:e5:5e:19:26:b9:a9:
                    e9:f1:28:88:63:78:20:6e:b4:bf:c7:e5:e7:c7:7e:
                    6d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DE:85:37:5F:34:64:1E:5B:E1:85:17:04:3D:59:DF:4E:A7:59:43
            X509v3 Authority Key Identifier:
                keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:30:da:bb:48:43:23:44:d8:76:b3:9a:0b:ee:59:13:aa:6a:
         5a:04:3c:fc:d3:42:f3:51:ec:5d:55:eb:5a:85:49:10:bf:71:
         4b:03:97:d7:d2:03:80:15:76:ae:e5:78:6a:7f:c5:30:ed:95:
         5a:39:9d:24:d1:81:21:30:01:ff:d9:d8:3d:df:41:b9:89:7c:
         b3:a8:7d:10:cf:17:55:8b:2a:6c:bc:12:39:77:97:ec:cc:7d:
         a6:95:9d:93:3d:81:0a:2c:5c:1f:f8:fd:72:ad:8d:03:b3:79:
         b1:4a:ac:c6:db:61:a0:86:44:29:8c:64:68:5b:fe:e7:5f:60:
         62:6f:2a:62:2e:42:f5:ba:03:fe:77:34:a3:5e:33:78:a2:52:
         ca:36:8e:e5:ba:61:4e:f2:bc:28:a7:4a:8b:5c:32:03:2a:0d:
         f6:c0:4a:21:f0:e1:d2:63:44:f0:d5:8a:82:b5:cb:42:40:4e:
         31:d1:26:ec:29:9e:b5:76:73:86:03:2c:32:80:5c:f2:21:18:
         8e:0e:ca:bd:69:22:e0:f0:be:47:d2:98:19:ed:26:eb:15:bf:
         22:7b:7c:67:ba:0c:72:aa:ec:c8:6f:08:f7:be:0d:c3:e2:fb:
         70:8a:6f:b7:b8:3f:b6:f5:27:f3:1e:92:a5:7c:01:06:d4:8d:
         d4:65:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:33 2026 by rpki-client