Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.mft
File:                     hI0Or-_oL8OxIQ5EaSsFNFkcpvU.mft (raw, json)
Hash identifier:          yuaGYzEIStXo0QOraLfqFrwPTE3hE8ZEVj8I1pEIQdM=
Subject key identifier:   62:03:0C:E3:75:0C:68:77:E1:BD:01:D4:A3:E0:49:79:80:93:D3:19
Authority key identifier: 84:8D:0E:AF:EF:E8:2F:C3:B1:21:0E:44:69:2B:05:34:59:1C:A6:F5
Certificate issuer:       /CN=848d0eafefe82fc3b1210e44692b0534591ca6f5
Certificate serial:       01A15741C10A8D172D96D43EA3613BC67424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.mft
Manifest number:          012B
Signing time:             Tue 20 Oct 2026 03:01:29 +0000
Manifest this update:     Tue 20 Oct 2026 03:01:29 +0000
Manifest next update:     Wed 21 Oct 2026 03:01:29 +0000
Files and hashes:         1: 1bcxGH1cZpyTI4YIKUDBVrfhG8M.roa (hash: NC/8TtzYxM2Ha7m2JXk7QATNUCXczyQpVMeqDxeavJg=)
                          2: hI0Or-_oL8OxIQ5EaSsFNFkcpvU.crl (hash: awiM9jwcgY7jF6jqaKGKl9X+m5dhj0pu4eYo4xAExEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 23:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:57:41:c1:0a:8d:17:2d:96:d4:3e:a3:61:3b:c6:74:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=848d0eafefe82fc3b1210e44692b0534591ca6f5
        Validity
            Not Before: Oct 20 03:01:29 2026 GMT
            Not After : Oct 21 03:01:29 2026 GMT
        Subject: CN=62030ce3750c6877e1bd01d4a3e049798093d319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6b:1a:7e:04:a1:5a:c0:b1:80:b4:f3:55:1c:
                    b8:b3:03:06:ac:a9:42:4b:bf:4a:91:c6:ed:18:8b:
                    51:73:f7:cb:8f:64:3b:6b:80:e6:e9:47:0a:15:f1:
                    2a:ee:73:32:f0:bd:5d:7e:20:0d:98:0c:7e:62:1d:
                    7c:6a:aa:88:28:8e:41:0b:b6:c6:a9:54:f4:bc:30:
                    8f:a7:ca:da:68:a5:55:3a:31:88:6b:98:d0:88:6e:
                    1f:d9:c0:b6:cd:56:33:0c:13:92:d9:de:4a:ca:b4:
                    57:c3:3e:fe:9c:cd:2e:cc:06:31:da:14:8c:ab:80:
                    5a:a0:6a:16:3f:0e:fe:52:82:0c:5e:ac:f5:ed:62:
                    51:e0:81:08:9a:4e:d5:d4:2d:20:3f:fb:28:6f:a2:
                    80:ba:b4:31:38:fc:a4:c1:23:1e:81:e5:a2:c3:e9:
                    e2:97:5c:db:2b:ed:72:6d:ee:b8:c0:41:44:ce:d7:
                    9c:cc:6d:ff:62:94:dd:aa:a3:ff:73:e4:be:14:39:
                    a3:4d:30:ff:62:88:67:7b:0a:d2:08:9e:68:f7:14:
                    66:21:24:27:69:f3:1e:ab:29:a9:cb:9b:9b:b5:db:
                    03:5e:ac:b6:bc:f8:b4:c5:7b:36:d2:00:10:3c:75:
                    f3:92:b1:a7:85:a9:2c:9e:29:6d:0d:38:4b:dc:3b:
                    6b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:03:0C:E3:75:0C:68:77:E1:BD:01:D4:A3:E0:49:79:80:93:D3:19
            X509v3 Authority Key Identifier:
                keyid:84:8D:0E:AF:EF:E8:2F:C3:B1:21:0E:44:69:2B:05:34:59:1C:A6:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:3f:38:48:13:43:d3:9a:77:fa:08:5c:4c:3c:ab:b3:76:b2:
         a6:a2:c7:ef:ec:61:5e:35:c9:ed:ab:74:34:f5:7f:80:06:3b:
         81:01:dc:13:40:36:2d:a8:27:bc:45:00:d9:71:a3:62:11:b1:
         78:08:eb:8d:a5:8b:1a:30:5b:6b:91:7d:0f:d8:16:ca:b6:ce:
         c2:8f:e7:17:be:cf:2a:8a:97:f0:69:7c:92:52:dc:ca:d0:e0:
         0d:91:a4:1c:e4:76:ea:8a:2f:61:2b:27:2c:7c:48:4a:92:be:
         bb:b6:ef:46:3b:e4:33:be:d0:ec:f8:cc:95:d4:d2:df:e5:9b:
         0c:80:a4:07:95:30:f9:7c:b7:42:77:cd:5e:76:fa:00:85:17:
         56:9c:fe:67:e3:1d:0a:e2:02:45:f2:90:59:28:6f:4a:0d:b8:
         9b:c4:c3:70:be:d1:d9:4c:0d:f7:33:6d:1b:82:ec:0c:f9:97:
         b9:51:4a:a4:4e:e5:d6:68:d5:fe:a4:e1:6a:46:87:fb:11:9f:
         a8:c2:59:2e:d4:4c:cf:b5:8c:bc:c8:0a:1b:e2:7e:75:4c:6d:
         30:1f:d8:b2:43:33:5e:af:d1:15:0b:b4:8d:f9:a3:05:72:cd:
         64:07:0c:01:29:6f:45:d8:d2:9b:90:34:8b:be:0d:2b:86:f7:
         48:6b:73:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:54:39 2026 by rpki-client