Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/62OPgXVfFgvzkxYiA4aYJGDR_xQ.mft
File:                     62OPgXVfFgvzkxYiA4aYJGDR_xQ.mft (raw, json)
Hash identifier:          FcDCK/lq0x4lf7q3bJlywa1gMT7QRnfH7cG/LEwFj7o=
Subject key identifier:   37:0D:65:FA:3E:D3:F1:1E:F6:46:9C:8D:54:3E:8F:8F:A4:EA:5E:23
Authority key identifier: EB:63:8F:81:75:5F:16:0B:F3:93:16:22:03:86:98:24:60:D1:FF:14
Certificate issuer:       /CN=eb638f81755f160bf39316220386982460d1ff14
Certificate serial:       01A10BF0C5C01D06252A9F17EDB55ED8E0D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/62OPgXVfFgvzkxYiA4aYJGDR_xQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/62OPgXVfFgvzkxYiA4aYJGDR_xQ.mft
Manifest number:          0104
Signing time:             Mon 05 Oct 2026 12:01:30 +0000
Manifest this update:     Mon 05 Oct 2026 12:01:30 +0000
Manifest next update:     Tue 06 Oct 2026 12:01:30 +0000
Files and hashes:         1: 62OPgXVfFgvzkxYiA4aYJGDR_xQ.crl (hash: HGjPlatkKG1cQ1NtwU5EGYX5dnAbOmBcsP88kFu2MWY=)
                          2: P5m8X2QZ-kvt8VS-yB1NvVymMtI.roa (hash: M7ivDyo094WRXU5Z+KQ9NZ8+Nxc6V9FBYqrJglVRrNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/62OPgXVfFgvzkxYiA4aYJGDR_xQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/62OPgXVfFgvzkxYiA4aYJGDR_xQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/62OPgXVfFgvzkxYiA4aYJGDR_xQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 12:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0b:f0:c5:c0:1d:06:25:2a:9f:17:ed:b5:5e:d8:e0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb638f81755f160bf39316220386982460d1ff14
        Validity
            Not Before: Oct  5 12:01:30 2026 GMT
            Not After : Oct  6 12:01:30 2026 GMT
        Subject: CN=370d65fa3ed3f11ef6469c8d543e8f8fa4ea5e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:28:d7:64:44:9d:1c:d8:47:35:0b:12:f0:b3:
                    31:70:28:de:78:13:9c:64:07:80:82:bc:5c:0e:57:
                    da:51:27:19:3e:16:f5:14:8a:30:44:56:a5:5d:9c:
                    72:3f:17:74:4c:7c:57:ba:17:45:84:23:73:2d:75:
                    c7:55:64:3b:58:71:01:5b:1f:49:aa:35:0d:12:3f:
                    e9:83:1e:93:cd:38:d5:7f:4e:12:bf:cd:b1:74:be:
                    ca:44:75:af:ef:89:7c:e6:ef:a4:8b:4a:8e:bf:2f:
                    de:3e:43:c1:9a:6a:5a:17:30:5e:b0:df:97:10:c1:
                    32:b4:6c:46:f5:8d:c4:cd:3a:da:ce:02:01:f7:d6:
                    6d:2f:a1:15:91:5a:25:12:42:d0:53:58:a5:a1:d7:
                    bd:db:8f:e9:00:83:a9:36:4e:44:eb:c4:f2:77:05:
                    0f:a5:e8:6b:1a:4b:e8:d5:d7:d3:f4:0c:6a:c8:49:
                    2f:7f:ca:6b:da:94:c0:52:b7:cd:4d:08:91:77:c7:
                    15:75:f6:10:00:91:79:6a:19:e9:b9:b7:24:e0:23:
                    98:d8:80:33:c0:3a:e7:a6:aa:1f:13:45:66:b4:2e:
                    d5:8d:46:2f:48:e0:a4:a0:d0:91:8c:b8:30:8a:0e:
                    08:7d:9b:f3:42:2b:fc:1a:af:3c:75:76:b2:b5:9a:
                    df:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0D:65:FA:3E:D3:F1:1E:F6:46:9C:8D:54:3E:8F:8F:A4:EA:5E:23
            X509v3 Authority Key Identifier:
                keyid:EB:63:8F:81:75:5F:16:0B:F3:93:16:22:03:86:98:24:60:D1:FF:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62OPgXVfFgvzkxYiA4aYJGDR_xQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/62OPgXVfFgvzkxYiA4aYJGDR_xQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/62OPgXVfFgvzkxYiA4aYJGDR_xQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:8b:5c:a4:5e:96:05:8d:11:2f:bd:5f:29:20:3c:67:d8:89:
         70:49:47:cc:8c:22:73:a9:05:7e:6f:d2:4f:67:9e:28:fa:ae:
         7a:c9:1c:70:0c:40:3f:6c:b1:d3:56:ea:b4:35:ae:e0:fc:df:
         b0:3b:c1:e6:bc:1f:39:35:32:b5:db:0f:96:ae:3f:6e:18:00:
         53:cb:08:0c:b4:93:a6:44:81:2b:89:74:1f:b5:b8:70:81:da:
         a9:76:75:f9:b8:82:f4:f0:b6:71:69:77:b5:88:42:95:ab:73:
         20:99:d5:35:f1:b4:10:fd:43:0f:71:e0:0f:8c:9b:f1:a8:59:
         cd:59:a9:fc:4b:6e:6d:a2:e8:02:0f:ae:8e:97:a6:10:03:7f:
         39:17:6b:82:14:08:08:2c:3c:d9:c7:c1:1d:18:c5:7f:33:c3:
         f0:0b:42:f7:0f:5a:47:e6:5e:c7:28:ad:3c:e4:15:8d:4f:15:
         37:62:d2:2a:31:05:6f:8c:3e:b5:34:87:44:f7:89:1d:e2:2b:
         bb:7f:18:65:3e:6a:af:fd:89:e9:52:3e:cb:63:b1:d5:c5:02:
         7e:f6:85:d8:da:dc:cf:c2:86:ac:45:5d:2a:12:57:4f:4f:27:
         e7:11:f3:e8:5f:94:ff:95:5a:27:f7:50:4c:c9:9f:6e:7d:e6:
         4b:a2:b0:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEL8MXAHQYlKp8X7bVe2ODTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNjM4ZjgxNzU1ZjE2MGJmMzkzMTYyMjAzODY5ODI0NjBk
MWZmMTQwHhcNMjYxMDA1MTIwMTMwWhcNMjYxMDA2MTIwMTMwWjAzMTEwLwYDVQQD
EygzNzBkNjVmYTNlZDNmMTFlZjY0NjljOGQ1NDNlOGY4ZmE0ZWE1ZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCjXZESdHNhHNQsS8LMxcCjeeBOc
ZAeAgrxcDlfaUScZPhb1FIowRFalXZxyPxd0THxXuhdFhCNzLXXHVWQ7WHEBWx9J
qjUNEj/pgx6TzTjVf04Sv82xdL7KRHWv74l85u+ki0qOvy/ePkPBmmpaFzBesN+X
EMEytGxG9Y3EzTrazgIB99ZtL6EVkVolEkLQU1ilode924/pAIOpNk5E68TydwUP
pehrGkvo1dfT9AxqyEkvf8pr2pTAUrfNTQiRd8cVdfYQAJF5ahnpubck4COY2IAz
wDrnpqofE0VmtC7VjUYvSOCkoNCRjLgwig4IfZvzQiv8Gq88dXaytZrfmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcNZfo+0/Ee9kacjVQ+j4+k6l4jMB8GA1UdIwQY
MBaAFOtjj4F1XxYL85MWIgOGmCRg0f8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjJPUGdYVmZGZ3Z6a3hZaUE0YVlKR0RSX3hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81OTU0ZTctM2UwYy00YzNhLTkyZDAt
NDljODljZTI4ODgyLzEvNjJPUGdYVmZGZ3Z6a3hZaUE0YVlKR0RSX3hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81OTU0ZTctM2UwYy00YzNhLTkyZDAtNDljODljZTI4ODgy
LzEvNjJPUGdYVmZGZ3Z6a3hZaUE0YVlKR0RSX3hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhotcpF6W
BY0RL71fKSA8Z9iJcElHzIwic6kFfm/ST2eeKPqueskccAxAP2yx01bqtDWu4Pzf
sDvB5rwfOTUytdsPlq4/bhgAU8sIDLSTpkSBK4l0H7W4cIHaqXZ1+biC9PC2cWl3
tYhClatzIJnVNfG0EP1DD3HgD4yb8ahZzVmp/EtubaLoAg+ujpemEAN/ORdrghQI
CCw82cfBHRjFfzPD8AtC9w9aR+ZexyitPOQVjU8VN2LSKjEFb4w+tTSHRPeJHeIr
u38YZT5qr/2J6VI+y2Ox1cUCfvaF2Nrcz8KGrEVdKhJXT08n5xHz6F+U/5VaJ/dQ
TMmfbn3mS6Kwjg==
-----END CERTIFICATE-----
Generated at Mon Oct 5 22:15:46 2026 by rpki-client