Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
File:                     62eoQOQaxm-PNZzL1lNUyRcEK78.mft (raw, json)
Hash identifier:          X+8X5vqPF31L8dz+rQm6oNOakC1Rceh0+zcDBdCsfwo=
Subject key identifier:   09:39:82:3A:26:6F:37:54:D0:0C:E5:75:4E:5C:85:32:CA:16:D1:5C
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Certificate issuer:       /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial:       01A15176C62E3407FD617124E9A65D521943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
Manifest number:          0EDD
Signing time:             Mon 19 Oct 2026 00:01:40 +0000
Manifest this update:     Mon 19 Oct 2026 00:01:40 +0000
Manifest next update:     Tue 20 Oct 2026 00:01:40 +0000
Files and hashes:         1: 62eoQOQaxm-PNZzL1lNUyRcEK78.crl (hash: l4DXctfKI1D3x9UkNsq/L3SdZ2AvcgUeTRboBFjRMFM=)
                          2: y_DN1NlT3WxnHFjjy8yM8EUu98c.roa (hash: xlreRmvPkwb20CmAYP76if0DKA37CnCWemcHHd4gTDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 00:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:51:76:c6:2e:34:07:fd:61:71:24:e9:a6:5d:52:19:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
        Validity
            Not Before: Oct 19 00:01:40 2026 GMT
            Not After : Oct 20 00:01:40 2026 GMT
        Subject: CN=0939823a266f3754d00ce5754e5c8532ca16d15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5e:6c:e7:3f:30:02:15:cd:1a:ed:e5:40:81:
                    81:26:e7:ba:41:2c:41:6c:1b:13:6c:06:08:61:b2:
                    15:50:0e:11:c1:ff:37:e1:23:9a:50:0f:dc:3e:cb:
                    40:fd:4c:2f:e5:2a:5a:7c:81:f6:cd:00:b2:55:97:
                    f1:c0:6b:40:52:c1:98:50:58:13:76:b5:67:e7:1a:
                    6a:b3:0c:88:50:45:13:aa:60:df:73:37:80:b3:89:
                    93:06:7b:22:2c:c1:6a:7f:35:c2:c1:78:2b:56:02:
                    5b:3f:70:56:61:bc:0d:c2:09:14:30:96:cc:1a:36:
                    e5:de:55:7d:16:00:b8:52:81:1c:83:40:69:35:ac:
                    34:68:ad:a2:df:4b:1c:c3:42:bb:e1:a0:61:47:3e:
                    af:b8:a1:95:05:b7:53:ea:c4:36:02:70:0a:e1:25:
                    e9:51:ed:77:ad:f9:fd:67:2f:8d:6e:f9:72:fd:de:
                    e7:2b:e1:68:80:73:93:e1:7a:f8:56:72:2a:49:9a:
                    23:d0:76:4e:30:48:3c:9f:9e:6a:e6:3a:af:ca:e2:
                    2a:61:e5:04:40:6f:30:00:b0:fd:7a:97:62:a1:4e:
                    d4:11:57:d6:12:b8:1e:ac:e4:e3:bf:8a:81:d4:40:
                    5d:ca:52:fd:ce:60:c1:d4:01:0f:c7:3e:b0:66:a9:
                    ec:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:39:82:3A:26:6F:37:54:D0:0C:E5:75:4E:5C:85:32:CA:16:D1:5C
            X509v3 Authority Key Identifier:
                keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9d:ff:38:72:27:72:90:10:ad:2d:38:7c:31:b1:66:10:de:
         1a:bc:73:ed:db:10:a6:69:58:2c:cd:3a:3c:f4:51:37:f6:51:
         d6:cb:ad:13:34:f7:66:87:35:bf:a9:a1:6e:d9:cc:3a:37:0c:
         c9:6e:b7:4d:92:c8:c0:a3:a4:fa:83:a5:e5:37:fd:52:51:ff:
         67:18:06:88:0f:69:00:49:a9:d5:36:a1:4d:20:ff:50:52:5b:
         63:e8:ca:9a:50:e0:4f:09:36:75:4a:ef:0f:57:e4:d4:23:70:
         72:15:de:e5:cc:c3:69:24:ec:a2:83:1b:08:f4:0c:a6:23:6c:
         44:6f:ea:56:cc:83:8f:e5:93:51:6d:dd:aa:e2:69:a4:a4:f0:
         77:cf:9f:a9:5c:a5:34:37:71:6f:d2:cd:a4:5d:5c:12:dd:f4:
         5b:b6:73:48:15:9c:31:a9:ca:0f:d5:7a:72:f4:b6:29:4c:08:
         0b:db:0d:c8:e8:1d:0d:d8:45:a1:b3:9c:2d:3f:90:8d:ef:02:
         8f:17:b2:8e:3e:3e:64:90:32:84:9d:21:88:d7:26:5c:74:42:
         a0:66:24:db:2a:f2:d1:3d:59:89:c3:0b:e1:76:b4:e3:37:38:
         70:f3:0e:ea:b8:db:e5:bd:b9:95:fb:1c:08:dc:3a:83:ca:29:
         22:fa:89:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:06:17 2026 by rpki-client