Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File:                     ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier:          9xhHz9VpRvmQYZJ/R6KQiTceOe5icE+cFIoweji9Uvk=
Subject key identifier:   EC:48:70:60:31:3C:D3:46:8C:9C:D9:67:E4:1F:7F:1A:5D:3D:45:1E
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       019847782CA2EA9D74AB82C073356D094D7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number:          1609
Signing time:             Sat 26 Jul 2025 16:01:54 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:54 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:54 +0000
Files and hashes:         1: 3jSOaatFzz9swrZhXqD6jHzeDww.roa (hash: tVwdSKcBd6/2MH/mbR0mS1QlYqRRE3gqHsHq5WvFQFw=)
                          2: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: BxhVp6aS1Fvt4f47hfzoj9qup2Qwh6q+jAy4/w5JjFQ=)
                          3: Wmz-X2qvGQpLkH-YhZaJiX0a9DU.roa (hash: FuW53gbYqPmWdJbbqmlfjqZ0BgNfy4rZW67679JKp0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 16:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:78:2c:a2:ea:9d:74:ab:82:c0:73:35:6d:09:4d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Jul 26 16:01:54 2025 GMT
            Not After : Jul 27 16:01:54 2025 GMT
        Subject: CN=ec487060313cd3468c9cd967e41f7f1a5d3d451e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3f:57:26:f8:44:41:09:d2:c4:18:70:85:87:
                    d5:c1:5c:2f:3c:ee:7c:e0:fb:96:4f:ec:45:4c:95:
                    2d:e0:ea:78:f3:f0:b9:38:c2:46:70:0a:61:08:af:
                    c6:6f:02:7c:d3:8f:8d:6e:71:ee:08:7c:bd:33:6b:
                    a7:cb:6d:5c:d4:df:ae:a4:f0:6e:7b:85:da:c5:fa:
                    78:28:51:1b:6e:aa:51:04:f3:75:5a:93:5a:e9:63:
                    22:69:ba:e3:df:97:5c:d9:5b:06:20:8e:2a:d7:4a:
                    57:89:f9:2e:db:d9:a8:29:10:a4:d5:62:bc:38:ea:
                    79:b9:19:ae:7a:af:1d:eb:e9:e6:1e:de:d7:39:6a:
                    53:21:7d:64:0e:21:40:b3:ba:f8:f0:23:4d:54:80:
                    a8:6a:db:4d:f5:41:b6:bb:4d:78:56:35:54:d1:56:
                    8b:76:61:62:0e:e6:b1:f9:a5:2e:38:98:5e:85:b5:
                    f2:fa:62:43:da:8f:c7:4e:e8:58:9f:eb:22:3e:d5:
                    a0:3b:3f:48:22:ca:7f:c3:fc:03:40:81:0a:3a:03:
                    36:e9:78:25:a5:5f:8e:67:d2:f2:3b:29:5f:b4:d1:
                    ca:08:c7:8f:91:85:2e:9c:33:fe:6f:2a:d3:69:9a:
                    06:20:1d:58:a5:3f:8a:69:ca:31:e7:c2:a1:de:fa:
                    c9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:48:70:60:31:3C:D3:46:8C:9C:D9:67:E4:1F:7F:1A:5D:3D:45:1E
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ed:ff:39:e0:fd:d5:41:a8:09:7a:88:3e:d2:f6:ea:3f:62:
         07:f5:d3:fe:47:70:88:22:30:cc:08:0a:3b:b8:63:83:d2:52:
         c4:f6:2d:1c:87:31:98:f9:ce:c1:1c:3c:23:96:14:c5:5f:58:
         32:dd:0b:08:1d:83:d2:06:f9:28:b3:16:7a:9c:df:27:30:dd:
         36:bb:c2:88:38:61:6d:5b:2a:53:80:a5:59:de:14:db:8e:0b:
         cc:e0:89:dd:71:41:e0:bf:e7:6f:84:ae:24:db:e7:53:01:8d:
         d9:10:eb:c2:c7:3c:31:04:18:6c:79:24:f8:40:1d:71:0a:47:
         a6:a3:03:5a:db:1f:8d:5c:a0:39:c3:af:ab:96:9a:ba:05:1a:
         54:9e:4b:09:29:94:6d:f6:dc:ad:69:d4:e5:a0:f9:ec:99:bc:
         c7:a9:7f:1f:24:20:4e:00:ba:b0:a2:26:c7:94:92:fb:b5:0a:
         07:f0:1f:4d:16:be:cb:24:60:e8:29:c1:6f:0e:ad:92:99:62:
         25:91:d8:09:51:e0:9e:7d:2c:58:ad:74:77:8b:a6:13:a7:8e:
         77:ca:cb:77:4f:4c:61:81:bb:71:b9:25:00:b0:0e:4f:ca:a5:
         21:0b:44:8e:9c:73:2a:8c:ed:55:a7:c9:16:ff:b8:64:83:5f:
         3e:f4:95:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:46:43 2025 by rpki-client