Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
File:                     ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft (raw, json)
Hash identifier:          3BwzQFVWdXJlquEqrj2YWBZYoNBVBvRUFLWsAi9dbDk=
Subject key identifier:   03:AD:CA:28:4E:47:6A:5E:6E:5E:54:FC:E5:95:E5:5F:89:21:C7:24
Authority key identifier: 01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17
Certificate issuer:       /CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
Certificate serial:       01A000CA7FE9277ECD1CE97FD255FFA654FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
Manifest number:          1A03
Signing time:             Fri 14 Aug 2026 15:01:05 +0000
Manifest this update:     Fri 14 Aug 2026 15:01:05 +0000
Manifest next update:     Sat 15 Aug 2026 15:01:05 +0000
Files and hashes:         1: 2OTpT_iPVatmtzbTR3cTe1hubrc.roa (hash: 96a4HaH7uBovr7v7aSF35lG60fSRXuRhdHuwp6lUb8E=)
                          2: ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl (hash: rWEXknisI9tHXNxbbaynMPCbIxK6alYO32zL8591Kpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:7f:e9:27:7e:cd:1c:e9:7f:d2:55:ff:a6:54:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
        Validity
            Not Before: Aug 14 15:01:05 2026 GMT
            Not After : Aug 15 15:01:05 2026 GMT
        Subject: CN=03adca284e476a5e6e5e54fce595e55f8921c724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:99:da:16:2e:ab:b7:49:dc:70:0f:29:77:
                    8f:34:b6:12:37:03:a1:b1:ff:13:b0:27:eb:81:a5:
                    38:19:ee:cc:7d:c1:51:ce:2b:cd:67:93:1d:f2:a6:
                    98:8e:b8:f7:c3:36:f4:b2:d3:66:34:6d:d4:c3:3e:
                    de:b6:ba:58:fe:93:94:ce:f6:08:a8:3e:d3:1a:82:
                    33:64:78:67:f9:fc:06:c9:8e:2d:72:e5:13:b2:f6:
                    5b:a9:28:38:e8:f2:2f:2a:22:16:31:a6:43:46:91:
                    dc:19:f4:10:da:b0:f2:f2:ce:5e:1d:6f:01:5e:84:
                    64:cf:1a:40:fd:0d:61:cc:c4:f8:75:d1:d3:c0:e8:
                    86:14:87:27:39:8d:5d:83:29:37:4c:98:ca:cf:ca:
                    50:d9:cc:b4:66:36:21:f6:e0:ed:9f:fd:32:25:f1:
                    73:3b:31:50:f7:4a:00:0a:fa:47:c7:d9:a0:bb:47:
                    fb:3f:79:d6:0d:2a:74:66:52:f3:a0:f0:47:75:f2:
                    17:b8:30:a2:0f:cf:e0:58:7b:d3:34:ae:d5:e9:6e:
                    ff:5b:46:57:1d:b4:77:2f:24:1a:53:fc:99:2b:bb:
                    e2:bd:d5:aa:59:87:29:24:3d:19:52:fa:df:c8:d6:
                    17:09:bf:0f:58:b3:3f:96:08:9c:1e:5a:ee:d8:6d:
                    66:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AD:CA:28:4E:47:6A:5E:6E:5E:54:FC:E5:95:E5:5F:89:21:C7:24
            X509v3 Authority Key Identifier:
                keyid:01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:3f:3f:b0:0c:3e:0f:e1:ff:c5:ae:f3:d9:fa:88:e1:e4:9d:
         c1:65:84:51:33:62:7c:6d:ad:3d:4b:29:a4:f6:3a:b6:0e:ae:
         39:c5:67:4c:73:24:12:85:6c:ea:c6:81:30:fe:ef:12:bd:0d:
         ed:92:f9:1d:fd:cd:3b:47:cd:66:90:ad:1e:14:f4:2e:8a:50:
         f1:ef:dc:f5:01:f2:df:9b:ae:b3:b4:ff:d7:e0:f1:7c:93:96:
         b8:bb:d3:31:80:59:67:cd:85:a1:e8:d7:7e:64:3b:b5:fe:3f:
         7a:76:c6:54:01:73:27:05:6a:f9:ac:82:8d:b6:ef:3b:cb:6d:
         9b:a3:de:a3:6a:ec:5e:c6:66:02:bb:a8:5f:88:04:fa:eb:9f:
         d8:b4:22:01:f5:00:4f:39:31:f2:56:d3:98:9a:d5:7b:4a:95:
         bf:e7:8c:df:1a:e3:de:25:17:be:45:e1:5c:b0:2b:1f:44:bf:
         64:33:08:84:ae:71:22:fc:8a:f3:1a:b1:e8:f2:e6:b8:ef:b5:
         01:54:a0:50:0f:2a:6f:78:a1:67:cd:a7:3e:94:38:28:3d:be:
         b5:7f:f0:50:89:46:55:4e:2a:49:04:2e:9f:2c:f7:2a:87:e4:
         d6:9c:14:5a:79:35:98:81:26:8c:01:81:61:7e:d9:78:09:c5:
         aa:5e:b9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:44 2026 by rpki-client