Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
File:                     62eoQOQaxm-PNZzL1lNUyRcEK78.mft (raw, json)
Hash identifier:          wBCuhBNmp7oletgE3zEYF4+oDMBQRmxQMemf8hHvtxY=
Subject key identifier:   9E:34:B3:52:EF:B7:FB:C5:01:85:BA:69:A4:C4:31:5D:08:F3:63:A4
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Certificate issuer:       /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial:       0199221E5E333EBB79547A3FC715E510CF86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
Manifest number:          0A9F
Signing time:             Sun 07 Sep 2025 03:00:39 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:39 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:39 +0000
Files and hashes:         1: 62eoQOQaxm-PNZzL1lNUyRcEK78.crl (hash: HL3GRdXegM81ccLbCJUzQ+TM3JSTElRZIxVmNs5SJXY=)
                          2: ydc0mYwR1Dzs-G0ezBD3ZjOvohc.roa (hash: uyL4dK+GxQJBMXh9UYIbcUhltwwIoPW7biUU7zD77zg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:5e:33:3e:bb:79:54:7a:3f:c7:15:e5:10:cf:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
        Validity
            Not Before: Sep  7 03:00:39 2025 GMT
            Not After : Sep  8 03:00:39 2025 GMT
        Subject: CN=9e34b352efb7fbc50185ba69a4c4315d08f363a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dc:5f:f9:a7:c2:54:1a:fd:79:be:69:d9:5e:
                    10:e9:c3:12:39:3b:3b:6c:5a:51:e2:a5:e6:ee:20:
                    05:ba:13:40:b3:88:3e:c0:7b:e0:f0:45:ba:8a:a2:
                    47:b3:3e:c1:53:cb:cc:7c:5b:7d:d4:2f:e1:27:a0:
                    c0:e9:f6:97:56:0b:e2:1b:0a:f8:ac:5b:d1:f8:8a:
                    c6:57:45:51:99:56:89:12:fd:9a:0c:9d:7e:69:ae:
                    9d:8d:c0:c2:6a:a7:38:3f:d6:5a:25:c6:88:4f:1d:
                    61:91:b4:b3:eb:df:4b:e3:00:c9:5c:99:9a:11:5c:
                    54:6a:be:cb:82:5e:b7:bd:ec:dd:4e:87:fb:24:a1:
                    0b:54:35:7e:4a:6d:3a:85:ee:67:c5:55:a3:fb:50:
                    f8:52:ee:5b:a6:e2:95:63:e0:f2:0d:6c:2a:bf:b9:
                    e2:e8:32:07:c2:95:84:b8:75:a9:4c:c1:4f:75:4f:
                    e6:62:a6:76:6b:05:41:b4:5e:03:6c:a4:eb:91:c4:
                    e8:20:e9:9c:5f:02:df:da:92:ea:82:b0:e6:dc:5b:
                    1c:32:cf:ec:48:ff:03:26:0b:44:56:11:16:30:02:
                    81:90:cb:2a:1d:23:0e:84:41:23:db:72:e6:3e:1a:
                    df:bb:db:87:7e:b8:d4:e4:cf:86:f5:31:89:48:d7:
                    f3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:34:B3:52:EF:B7:FB:C5:01:85:BA:69:A4:C4:31:5D:08:F3:63:A4
            X509v3 Authority Key Identifier:
                keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:fd:f5:c1:3e:f8:65:41:3e:37:cf:6c:a3:d2:fa:b0:f8:e5:
         02:31:ac:57:0f:29:08:91:ae:f6:59:d8:b2:02:a4:71:21:a6:
         54:e8:ac:ea:43:78:77:e6:9b:00:59:c0:8c:03:cb:49:d0:18:
         e4:63:7a:f2:e6:12:87:7e:e2:05:a7:2c:e2:8a:5b:4c:6c:b0:
         d2:e2:3b:76:3e:61:68:0d:e7:1a:99:a2:4d:3a:c0:58:d9:4b:
         1b:f1:47:62:b0:5f:4b:0e:78:d5:e7:68:e9:6d:79:d5:13:6a:
         c4:6b:fa:e4:40:b7:54:9c:26:7f:19:90:de:c7:8a:e0:1b:07:
         a4:ba:7c:d2:b0:ef:12:33:63:97:31:9e:ad:09:eb:7d:ee:48:
         ac:ee:18:7b:31:56:a6:68:94:a3:28:bc:de:bf:f9:d4:ae:02:
         fe:1f:4c:9f:fd:c9:3c:e2:f4:c2:7c:ce:74:e1:7b:97:29:44:
         e1:e4:8d:e6:a1:42:20:ac:a4:05:da:34:5c:18:bf:cb:f5:bb:
         65:19:7e:3d:2b:01:15:03:0f:a9:33:a0:3c:6a:16:7c:3f:f5:
         11:d7:d4:4f:25:44:e6:fa:b7:3a:51:a0:c2:c9:0d:61:b6:02:
         09:a7:f0:1f:af:a7:9d:fb:38:26:35:24:0f:95:d3:e7:b3:31:
         3b:55:d8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:11 2025 by rpki-client