Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
File:                     62eoQOQaxm-PNZzL1lNUyRcEK78.mft (raw, json)
Hash identifier:          Qhij9MCw+n5t+xjKxrjMdyAHGu0dfH+84thMGN56nEM=
Subject key identifier:   A5:FD:66:D4:ED:74:BC:33:D6:39:B4:FB:56:C6:0C:09:CE:4F:68:93
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Certificate issuer:       /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial:       01A0DBA9E711B0C6EAF6EEFD1C019C62E1BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
Manifest number:          0EA0
Signing time:             Sat 26 Sep 2026 03:02:20 +0000
Manifest this update:     Sat 26 Sep 2026 03:02:20 +0000
Manifest next update:     Sun 27 Sep 2026 03:02:20 +0000
Files and hashes:         1: 62eoQOQaxm-PNZzL1lNUyRcEK78.crl (hash: qAdA73HVKXhoM5x/6/lqRq/nuZH4QPnZc4Z/rfo3kY8=)
                          2: y_DN1NlT3WxnHFjjy8yM8EUu98c.roa (hash: xlreRmvPkwb20CmAYP76if0DKA37CnCWemcHHd4gTDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a9:e7:11:b0:c6:ea:f6:ee:fd:1c:01:9c:62:e1:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
        Validity
            Not Before: Sep 26 03:02:20 2026 GMT
            Not After : Sep 27 03:02:20 2026 GMT
        Subject: CN=a5fd66d4ed74bc33d639b4fb56c60c09ce4f6893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:87:f5:8a:d4:e8:5b:9a:f5:77:a0:bf:24:09:
                    01:bb:c1:72:e3:6a:55:88:b1:1a:fc:3d:76:4a:df:
                    73:17:b8:24:8a:8d:ab:cc:34:2a:f0:be:e0:49:45:
                    7b:54:98:4e:ff:91:d9:56:1a:d0:2a:72:c3:02:8d:
                    70:16:8f:73:0c:37:b7:ca:41:ba:79:a1:6e:ba:1a:
                    96:9d:af:75:98:0e:04:70:a9:22:18:19:25:4a:96:
                    cb:34:96:1e:8d:19:e3:b7:61:d5:f8:39:dc:e8:50:
                    4a:34:d7:d3:99:91:af:44:a9:52:34:ec:8e:d0:64:
                    12:e8:24:84:b3:1f:f2:cb:07:78:59:56:6c:92:89:
                    07:ac:b5:31:13:b9:64:21:48:67:95:42:72:1a:e4:
                    90:70:1a:c1:3e:63:84:53:b9:23:f5:c9:9d:7f:00:
                    13:11:e5:86:cb:67:74:14:7f:87:df:1e:60:d7:85:
                    28:71:c4:d4:54:db:8f:92:d4:b2:73:ec:58:09:25:
                    09:f2:bd:ad:ec:7c:d5:f6:9e:8d:06:b1:a7:90:7d:
                    50:8b:50:1c:e7:99:81:25:95:0b:67:f0:9c:c1:fc:
                    73:35:8b:87:0d:9d:ee:f3:ae:7a:4e:db:89:76:15:
                    bc:c3:ed:07:38:16:b1:fd:84:04:aa:c9:37:e6:bd:
                    c8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FD:66:D4:ED:74:BC:33:D6:39:B4:FB:56:C6:0C:09:CE:4F:68:93
            X509v3 Authority Key Identifier:
                keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:35:ab:bf:2b:38:a2:13:ca:7f:76:53:91:c7:3f:05:a3:04:
         d2:f5:da:bd:e1:4d:a4:69:a6:1b:09:9a:b5:51:c2:71:26:16:
         8f:77:e5:8e:09:6e:cf:6d:72:43:b3:15:8e:30:80:23:bc:15:
         a9:79:c3:97:db:f1:d3:fd:0e:0d:71:06:3a:a1:4d:6d:f1:f0:
         22:0a:13:6f:77:57:4d:c8:d2:b5:06:d6:52:e0:5a:40:4e:23:
         70:19:41:1e:43:c7:45:b3:ac:b1:84:37:e5:93:39:01:ed:2b:
         2f:68:ec:f9:d8:89:6f:c2:7c:c8:f5:a5:05:b7:43:7a:ce:b1:
         07:c6:ff:19:48:63:64:24:94:28:e0:bc:2a:1c:9b:76:b7:ad:
         3e:b6:91:56:f2:7f:b1:0d:1f:9a:93:d3:f7:76:eb:70:ec:fd:
         a5:f7:d5:63:e6:39:34:f7:dc:bd:ab:d5:67:29:a0:67:d3:c3:
         78:9a:b9:4d:13:10:d1:e9:c2:f2:f5:da:6c:31:55:ab:c5:75:
         d9:83:12:1d:d9:4d:f3:92:2e:4c:52:3d:ba:1e:8b:67:7b:90:
         51:25:1b:46:dd:2d:5d:e4:d5:d5:7b:4d:06:1e:3b:6a:c7:7d:
         34:53:8f:66:6e:b2:d4:d2:d9:eb:6f:ac:02:f9:24:38:14:a6:
         f2:1d:1f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:53:31 2026 by rpki-client