Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
File:                     ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft (raw, json)
Hash identifier:          DqKqZkSs/qw59Tc/9qx2wFdSLm1XjaL91yL7mg8Rq1A=
Subject key identifier:   49:77:87:DA:D5:9B:65:32:CD:2C:5D:C2:77:14:48:85:75:45:D1:E2
Authority key identifier: 01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17
Certificate issuer:       /CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
Certificate serial:       01A1472970A3575BC0BAAEF787EAACB06D02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
Manifest number:          1AAC
Signing time:             Sat 17 Oct 2026 00:01:00 +0000
Manifest this update:     Sat 17 Oct 2026 00:01:00 +0000
Manifest next update:     Sun 18 Oct 2026 00:01:00 +0000
Files and hashes:         1: 2OTpT_iPVatmtzbTR3cTe1hubrc.roa (hash: 96a4HaH7uBovr7v7aSF35lG60fSRXuRhdHuwp6lUb8E=)
                          2: ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl (hash: SxTHj9EYh2zsXXq3PkzVWukhFe6mhgfu1ehKOzdHFeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:47:29:70:a3:57:5b:c0:ba:ae:f7:87:ea:ac:b0:6d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
        Validity
            Not Before: Oct 17 00:01:00 2026 GMT
            Not After : Oct 18 00:01:00 2026 GMT
        Subject: CN=497787dad59b6532cd2c5dc2771448857545d1e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6a:c1:72:58:9e:00:c7:ed:ec:ae:bf:72:54:
                    9e:34:1c:6e:17:64:d8:d1:51:45:d9:f9:1c:28:38:
                    67:f6:ff:6a:b8:42:67:42:84:a1:d3:5a:c2:d7:35:
                    05:f8:9f:25:ca:7a:c6:55:fd:d9:f9:58:99:39:8c:
                    35:ac:8f:85:28:db:8d:95:bc:34:45:a7:3c:a1:8e:
                    db:68:51:98:e3:2b:70:8c:d8:c2:06:8e:d4:55:9e:
                    94:20:58:22:c6:af:50:e5:eb:c7:aa:86:cb:46:f2:
                    f3:1b:1f:32:5d:52:8c:40:d1:60:90:88:c1:91:9e:
                    c3:38:05:51:4a:74:8d:02:1e:4d:8b:e7:de:97:fe:
                    36:3c:93:48:6b:d3:10:2b:91:d8:c4:a5:58:6a:07:
                    65:10:a6:2c:5d:ef:a8:3d:31:73:76:1c:4f:c9:b4:
                    45:29:a4:27:70:5a:88:b1:46:1a:b9:6a:a0:fb:be:
                    e4:8d:16:fb:f6:a8:35:bb:c1:08:f6:0f:aa:9f:45:
                    f8:cf:7e:a3:71:89:96:1f:a6:7b:8b:cd:9e:85:61:
                    15:9a:ab:ff:29:70:1f:fe:ca:42:3b:74:25:25:b1:
                    2c:fa:82:b6:e7:2e:15:55:7b:98:c8:71:3a:cf:c0:
                    af:d0:90:46:1f:0a:79:14:03:c4:cf:32:94:85:ca:
                    7f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:77:87:DA:D5:9B:65:32:CD:2C:5D:C2:77:14:48:85:75:45:D1:E2
            X509v3 Authority Key Identifier:
                keyid:01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:86:e8:3d:b2:82:de:ee:5e:e6:cb:41:7b:8f:b2:d4:53:d5:
         89:48:9e:3f:10:b5:27:40:03:67:75:c0:cf:5a:f4:65:71:a8:
         9e:cc:12:31:4a:c7:6c:df:e6:81:70:44:6d:11:ca:ab:b6:8e:
         8b:35:a6:6f:da:7b:8f:c7:e5:98:b9:64:6d:e4:1e:0d:d6:6d:
         bd:83:9c:74:af:63:01:e1:76:a5:3e:28:2d:6f:34:e0:39:b5:
         65:17:35:5c:ea:c4:0c:7f:a6:5e:47:fc:e3:82:e1:fc:de:2d:
         e4:b7:7c:b5:ab:da:76:86:bc:29:80:40:47:7c:37:16:c5:61:
         ef:a5:79:01:5f:07:f0:b1:89:5c:d3:22:15:cf:e1:31:63:6a:
         d2:43:c9:1a:89:47:69:52:db:62:e3:b0:41:06:79:9d:c3:35:
         51:4f:c3:9f:d7:96:88:40:d0:7a:0a:fe:6e:26:2b:dc:50:e9:
         ef:04:25:05:dc:4a:c7:09:39:dd:9d:ca:e0:71:22:21:fd:ad:
         cd:d4:39:1f:f4:97:4b:04:62:9f:f3:c5:8b:67:f4:b8:b4:05:
         38:fc:eb:40:49:49:06:68:8a:e3:1b:31:1f:6d:fb:05:ac:65:
         16:91:d6:ab:42:e3:20:15:b3:42:98:41:4c:ec:4e:0f:d2:00:
         90:a3:8e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 10:17:59 2026 by rpki-client