Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
File:                     ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft (raw, json)
Hash identifier:          yEa7rxgx42ID1alLQIYO4Q12mfxFNVi3nDNLrwRrbGQ=
Subject key identifier:   A0:FE:EA:68:08:A5:74:4B:43:45:C8:26:8B:60:21:0E:74:BA:07:40
Authority key identifier: 01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17
Certificate issuer:       /CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
Certificate serial:       019D382E988CCCFFC0099CECCD1F56D52140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 06:01:10 +0000
Manifest this update:     Sun 29 Mar 2026 06:01:10 +0000
Manifest next update:     Mon 30 Mar 2026 06:01:10 +0000
Files and hashes:         1: 2OTpT_iPVatmtzbTR3cTe1hubrc.roa (hash: 96a4HaH7uBovr7v7aSF35lG60fSRXuRhdHuwp6lUb8E=)
                          2: ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl (hash: UIB8k8FlzdaqTayV65/reyEylRXpeUAKkQTZl5ftstI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:98:8c:cc:ff:c0:09:9c:ec:cd:1f:56:d5:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
        Validity
            Not Before: Mar 29 06:01:10 2026 GMT
            Not After : Mar 30 06:01:10 2026 GMT
        Subject: CN=a0feea6808a5744b4345c8268b60210e74ba0740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d2:4f:72:bc:45:15:3d:49:6f:d8:44:9b:ce:
                    da:7e:8e:91:ed:7a:1a:a7:52:3f:36:09:10:f3:bb:
                    9f:7c:7d:92:af:54:bb:2b:36:97:dd:68:6e:3a:c4:
                    3b:a2:d2:4c:38:1f:e2:8a:be:a3:27:1b:1f:18:ca:
                    a3:3e:27:10:ee:c8:42:18:24:4d:78:04:dd:67:f1:
                    ef:51:92:66:b6:c4:1c:1e:90:ad:ed:a1:fd:04:c4:
                    68:00:72:bb:21:77:48:57:f2:9e:73:43:a8:9e:34:
                    c9:79:80:8a:60:d4:cd:40:34:b1:be:71:9b:a7:18:
                    f1:1a:dc:13:52:11:a8:8b:a1:94:67:6d:3c:ce:92:
                    77:0c:76:9a:32:86:c7:8c:c5:cc:83:99:91:f8:b5:
                    ef:a8:4d:48:23:06:5f:d4:02:61:7a:e9:37:53:c3:
                    55:29:ae:ad:57:46:d8:6e:52:c9:39:ad:79:af:7f:
                    22:c2:2a:67:9d:a6:4f:1a:0c:ac:80:65:9d:fa:20:
                    df:56:a0:cc:c2:9e:99:98:14:da:ad:fe:9a:fb:7e:
                    49:5b:26:d4:b8:f1:72:1d:dc:02:bf:b8:82:7c:52:
                    98:80:65:a7:64:79:f4:cf:cc:ac:8c:af:28:54:5d:
                    02:be:4f:61:03:ca:0d:22:1d:5a:24:4d:91:1c:27:
                    b0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FE:EA:68:08:A5:74:4B:43:45:C8:26:8B:60:21:0E:74:BA:07:40
            X509v3 Authority Key Identifier:
                keyid:01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:31:19:25:8f:b9:96:ae:e6:03:c6:11:8e:ad:3a:df:40:d0:
         9b:b1:44:35:84:a1:f9:de:b1:37:3c:61:65:be:a1:2f:7d:e0:
         71:48:cd:26:18:0e:aa:99:6c:f4:5f:e6:b5:1b:56:ff:07:df:
         99:c6:29:05:ac:bf:de:9a:ff:84:c3:a4:6e:5a:12:cf:9d:39:
         9c:6d:03:60:81:ac:81:d1:37:73:a5:a6:87:1d:b4:96:aa:60:
         44:50:5f:de:4e:7b:f0:89:08:13:f1:77:94:cf:05:f7:ef:43:
         99:96:df:a7:63:b6:de:79:5a:39:d6:71:d8:08:73:27:93:22:
         b4:f9:88:62:62:5b:a2:fb:5c:d1:17:3a:cb:24:ae:6e:5d:93:
         89:e5:9e:a6:46:d0:97:02:65:bb:40:57:a4:ea:f5:83:d3:b9:
         c1:1e:29:54:6a:9f:a0:23:a7:ef:25:42:45:7e:01:e6:de:7b:
         04:ae:dc:8a:4b:fd:e7:b4:d6:6e:ce:df:17:f5:e9:58:9c:26:
         2d:01:69:1c:8a:5c:e3:b9:f0:5e:24:b7:47:d7:d5:40:8a:74:
         3b:f3:3a:9a:f5:47:b1:de:c6:2f:f6:63:70:69:70:86:9d:65:
         6b:4e:c8:be:e3:40:2d:43:52:33:6b:51:33:72:3f:3f:93:c2:
         fa:b1:f0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:02 2026 by rpki-client