Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
File:                     62eoQOQaxm-PNZzL1lNUyRcEK78.mft (raw, json)
Hash identifier:          PjovktSeT3GkpmFXRxGlw+VqYaeQF4qhN6ECLeJGCBM=
Subject key identifier:   DE:DA:64:63:06:C9:C8:AF:3E:01:B8:25:49:DC:72:19:6E:14:DB:17
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Certificate issuer:       /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial:       019E300538AA376E1A38CF67AEEB79F9C742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
Manifest number:          0D3E
Signing time:             Sat 16 May 2026 09:01:48 +0000
Manifest this update:     Sat 16 May 2026 09:01:48 +0000
Manifest next update:     Sun 17 May 2026 09:01:48 +0000
Files and hashes:         1: 62eoQOQaxm-PNZzL1lNUyRcEK78.crl (hash: K3ubnwVln9D4/CDe9ZW6xSFF8nz3fpUEdJ9ITzCbFTg=)
                          2: y_DN1NlT3WxnHFjjy8yM8EUu98c.roa (hash: xlreRmvPkwb20CmAYP76if0DKA37CnCWemcHHd4gTDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:38:aa:37:6e:1a:38:cf:67:ae:eb:79:f9:c7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
        Validity
            Not Before: May 16 09:01:48 2026 GMT
            Not After : May 17 09:01:48 2026 GMT
        Subject: CN=deda646306c9c8af3e01b82549dc72196e14db17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:3a:2b:3c:a3:d2:3e:0e:da:f5:cd:53:cf:
                    6d:41:c2:e5:34:ba:dd:56:5b:8d:a8:82:0b:ca:0d:
                    e4:d3:cc:3f:94:bd:f2:82:f5:3d:4f:5c:79:3f:d1:
                    1d:b8:c5:da:b8:23:b7:80:5a:ef:69:67:2d:89:b9:
                    05:e1:1a:74:b1:57:7d:6f:e8:5c:f6:70:db:93:53:
                    b4:38:23:5c:54:36:f2:84:99:04:81:27:6b:12:82:
                    31:ed:93:28:da:9a:3e:98:1b:3c:d0:0e:5d:2c:ef:
                    a0:5a:80:a6:31:35:8c:5f:95:5e:df:b3:e4:64:b0:
                    b8:6c:41:85:5e:8b:d6:f2:9c:eb:c4:f2:44:4a:f7:
                    43:67:41:f5:83:ea:b8:8e:dd:9c:10:d9:0d:57:da:
                    b3:40:00:34:71:1d:28:a8:23:31:14:4d:f8:ce:17:
                    70:77:27:4f:e2:0e:3c:75:06:6c:56:51:78:dd:ba:
                    1c:dd:06:46:02:1c:da:53:0c:e4:51:0f:8c:2f:79:
                    ed:7c:f7:dd:01:48:16:60:48:b2:1b:08:cd:87:48:
                    59:de:d1:2b:48:1a:f1:5f:a6:25:15:63:c1:58:92:
                    1e:da:b2:16:95:e5:ef:83:0e:10:14:fe:e1:bf:91:
                    da:bb:ae:bf:56:d5:b1:52:88:0e:d7:c3:a5:31:54:
                    06:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DA:64:63:06:C9:C8:AF:3E:01:B8:25:49:DC:72:19:6E:14:DB:17
            X509v3 Authority Key Identifier:
                keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:37:3d:de:47:e4:10:d1:c1:86:6c:04:bb:1f:3f:c9:24:4a:
         20:a8:3e:b7:2a:ae:83:a2:15:a7:98:69:45:bc:4f:3b:23:0e:
         24:97:2e:da:bb:a2:7b:40:c0:bd:63:33:18:0b:bd:13:1c:fb:
         3d:79:b4:74:a8:e2:2a:e5:fb:67:3e:72:ca:68:dc:f7:3f:e6:
         2a:d7:ac:b5:06:c7:dd:52:4c:c3:2e:6b:a1:bd:21:fa:6e:92:
         21:5a:57:a1:40:f2:4e:25:f7:6d:c8:de:c0:8d:1b:cb:56:58:
         28:5a:2f:ad:f5:54:3a:c8:75:e9:f1:87:f4:98:54:e7:0d:66:
         c0:91:61:f4:f1:61:f6:da:89:a2:63:79:a9:3c:69:0c:9d:07:
         85:b4:52:5c:2a:ac:de:7d:11:0e:f4:53:5d:fb:95:22:6b:d4:
         c2:2b:36:cc:0f:9a:2c:21:63:21:54:c0:c8:08:57:48:43:5d:
         bf:94:f6:2b:5e:d9:d9:8d:95:a4:6e:c6:e0:a3:18:1c:91:76:
         bf:7f:c6:89:38:62:13:d3:70:c7:61:0a:d7:31:22:7d:35:55:
         04:de:e5:58:fa:8c:7e:6a:14:52:ad:2e:08:23:31:4e:05:8e:
         be:55:ce:04:b9:d9:24:c2:92:83:6c:cb:da:3f:85:8b:43:cc:
         22:c7:ef:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:23 2026 by rpki-client