Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
File:                     62eoQOQaxm-PNZzL1lNUyRcEK78.mft (raw, json)
Hash identifier:          PcXzZv4zykfTSEiW4xj/+mYnMpzwcwn9d/OXyVFpoI8=
Subject key identifier:   4E:F6:35:66:EB:8F:B0:9F:F3:0D:65:BF:E4:F9:D2:91:C1:8E:D0:16
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Certificate issuer:       /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial:       01A0016FA93B7CE31B10F3D47A8FB5729E97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
Manifest number:          0E2F
Signing time:             Fri 14 Aug 2026 18:01:30 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:30 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:30 +0000
Files and hashes:         1: 62eoQOQaxm-PNZzL1lNUyRcEK78.crl (hash: 51hUtXYj/FWCWO2+FF3fRTvHMDN3g3BbUHaw2MdzueQ=)
                          2: y_DN1NlT3WxnHFjjy8yM8EUu98c.roa (hash: xlreRmvPkwb20CmAYP76if0DKA37CnCWemcHHd4gTDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:a9:3b:7c:e3:1b:10:f3:d4:7a:8f:b5:72:9e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
        Validity
            Not Before: Aug 14 18:01:30 2026 GMT
            Not After : Aug 15 18:01:30 2026 GMT
        Subject: CN=4ef63566eb8fb09ff30d65bfe4f9d291c18ed016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:da:b8:f6:d1:29:66:11:8c:f1:d8:36:ad:c8:
                    ec:14:7e:bf:63:2c:89:3f:01:7b:66:b1:0a:f3:ff:
                    02:98:8a:98:26:6d:1d:c8:11:35:ad:ee:e0:c4:ce:
                    f9:bf:f0:f2:a3:cb:46:e5:31:e1:08:25:4a:e8:09:
                    f2:c3:4f:7e:24:5a:76:94:79:67:b8:e6:fc:61:ec:
                    75:b8:19:09:75:47:05:af:54:2a:56:f9:e3:42:83:
                    79:1b:8e:2c:43:96:ab:50:81:c2:1e:14:02:41:bc:
                    ca:3a:75:e1:08:59:17:8f:38:cb:55:1b:20:09:d6:
                    fb:6c:bf:92:a9:09:28:90:e3:48:fa:82:ef:e1:33:
                    44:54:57:67:99:fe:32:af:f7:82:52:98:cf:f6:c3:
                    37:08:e5:01:6d:35:27:35:94:7b:a0:13:79:61:0f:
                    45:f6:a1:b0:43:01:3a:cb:3a:6e:d1:f8:d6:59:be:
                    ec:a8:ed:7f:b5:2e:1a:ad:e4:33:7e:b7:7a:17:a0:
                    32:99:f8:57:60:a7:6c:80:ca:4f:b6:3f:56:74:80:
                    70:0e:d2:ca:cf:0c:71:f3:e3:b8:21:c5:d3:24:a2:
                    e1:c3:96:a3:33:5a:30:49:49:66:7f:15:df:b9:1a:
                    30:c9:ef:e9:a6:ac:82:7e:60:a5:52:90:32:b9:23:
                    a1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F6:35:66:EB:8F:B0:9F:F3:0D:65:BF:E4:F9:D2:91:C1:8E:D0:16
            X509v3 Authority Key Identifier:
                keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:9f:49:e4:9d:f0:0d:0c:b7:88:86:a3:ba:61:72:2c:48:39:
         9f:49:6c:0c:ac:0f:19:00:f1:c0:2d:d8:4b:30:ff:e8:5c:38:
         f0:e9:db:16:95:47:0b:38:db:d5:8d:37:ac:9a:10:b0:12:91:
         cd:c6:38:d5:1e:45:46:ca:34:38:1c:e9:05:bf:56:0a:01:94:
         6e:ed:e1:2d:53:d3:f0:d7:29:f9:2b:b1:5e:27:04:87:c2:e2:
         d7:d3:88:fd:86:ad:dc:ac:c1:36:a7:c3:80:94:46:17:7e:12:
         fe:82:e8:18:16:1a:39:e3:0f:86:ed:b7:fe:96:a3:42:e8:44:
         3e:da:5c:2a:95:47:69:c9:56:07:85:d2:b5:43:e4:5f:bb:3d:
         32:22:1e:fc:34:c3:4b:af:a3:fa:dd:5f:0b:7d:1a:d3:50:3d:
         e1:7d:fc:9f:84:32:e0:ae:2a:55:c2:57:d1:a9:47:27:be:87:
         0a:82:3b:f4:41:8b:fe:92:89:fc:57:4c:bb:1c:8e:fe:b9:14:
         92:36:cc:16:6f:c3:dd:07:04:15:7a:0f:c2:58:dc:2f:e7:ca:
         a2:cb:18:26:cc:a1:ce:1e:dc:e7:e9:8d:76:1c:3f:5d:dd:d4:
         30:a8:e3:b5:a3:38:3a:eb:3f:22:13:2f:03:f6:9f:0c:1b:d3:
         47:06:19:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:10 2026 by rpki-client