Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
File:                     ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft (raw, json)
Hash identifier:          4mkJyluI/b/dvUmwwuhIcULIgNRW+O8ENyOA1r/Xf94=
Subject key identifier:   69:D0:EA:1E:9D:06:FE:97:37:17:E2:CF:A0:A4:9D:B0:98:1E:52:24
Authority key identifier: 01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17
Certificate issuer:       /CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
Certificate serial:       0199239EADE8E39A355C3B02727560F26136
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
Manifest number:          1675
Signing time:             Sun 07 Sep 2025 10:00:25 +0000
Manifest this update:     Sun 07 Sep 2025 10:00:25 +0000
Manifest next update:     Mon 08 Sep 2025 10:00:25 +0000
Files and hashes:         1: ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl (hash: e7lU4lfXYS6XxDnX/VhUNwXadU7qyXZpIVQpI38jPC4=)
                          2: vixyzoRGMiAPIQs9FKTrZIreWAU.roa (hash: Ou0w2YovPY60UVVQ46iOV1rhX+zd7oOQHHPd6ZGynZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9e:ad:e8:e3:9a:35:5c:3b:02:72:75:60:f2:61:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
        Validity
            Not Before: Sep  7 10:00:25 2025 GMT
            Not After : Sep  8 10:00:25 2025 GMT
        Subject: CN=69d0ea1e9d06fe973717e2cfa0a49db0981e5224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:98:01:26:3e:25:98:bf:55:6d:7f:e4:e3:5e:
                    26:f2:b5:6f:ed:66:ad:d6:b2:e1:d3:02:19:fb:c0:
                    54:6b:2b:ad:a8:00:e4:c7:52:10:7d:b9:a5:2a:0b:
                    06:a8:49:7d:06:7b:de:31:f4:7b:24:9e:3f:de:47:
                    0a:4f:10:6d:1a:1d:04:17:01:ce:e1:eb:7b:f3:16:
                    29:16:ec:87:07:07:f7:09:f0:76:b4:8c:20:b0:91:
                    ef:3c:fe:f0:66:68:b2:f0:a7:6b:ba:ba:fa:b3:23:
                    cc:67:2c:2c:a7:85:d1:a2:b3:2b:a4:74:57:2d:fb:
                    fc:22:06:a9:48:c7:66:ed:3c:97:ac:b6:33:24:d8:
                    7d:71:d5:04:72:4b:55:dc:86:a3:60:9d:57:6c:2c:
                    8f:38:63:14:30:c6:05:ba:0e:c0:92:ac:2a:7b:24:
                    98:10:98:61:02:c8:79:52:59:8b:6b:f0:a0:e1:6f:
                    d7:80:ae:52:c0:a0:24:45:14:3d:22:7a:73:f0:0d:
                    49:f8:b8:d9:41:f9:29:40:2b:73:7e:24:4f:0f:d0:
                    07:b3:a8:93:c3:5d:1a:a1:06:1e:ea:b8:34:fe:78:
                    b3:0d:4f:b0:03:64:0b:0c:ad:81:16:c7:cb:5a:0e:
                    a1:22:16:fb:65:96:42:ac:c8:e6:fe:50:5b:6b:2d:
                    4f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D0:EA:1E:9D:06:FE:97:37:17:E2:CF:A0:A4:9D:B0:98:1E:52:24
            X509v3 Authority Key Identifier:
                keyid:01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:3e:f0:87:89:2f:50:a1:c2:d5:11:1f:be:72:34:24:44:28:
         6b:cf:da:a4:5b:90:44:a7:21:59:34:00:ba:b8:44:df:8b:af:
         bc:06:76:9b:3a:ee:28:25:42:b6:b1:43:b0:37:bb:d4:61:d5:
         d3:f6:06:01:ed:e1:21:cd:27:5b:c3:a4:cf:cd:41:83:24:2a:
         5a:8b:33:b8:10:de:d6:f0:3d:9d:53:66:89:41:1f:37:9e:3b:
         be:0e:fe:ba:78:93:32:eb:d1:13:5e:29:e9:4a:81:16:d3:20:
         89:69:d3:bb:2d:43:f8:fd:9f:24:88:35:2d:f9:9b:d8:a7:47:
         e3:d4:7c:1d:54:71:7a:af:9b:b3:11:f9:b9:c8:a6:a0:58:8b:
         c4:11:df:6b:9f:e2:e1:c3:75:14:07:74:8d:96:76:59:3c:38:
         b3:a0:48:2d:6f:a5:76:1b:7c:e6:88:7e:ad:d9:1a:f2:36:fd:
         41:87:6f:86:c0:80:08:ef:fd:7f:1b:ac:5a:87:d1:6a:6b:89:
         a8:67:28:f3:76:78:67:51:ce:da:b8:2c:d2:35:0d:87:65:ad:
         be:6b:8d:8a:49:a2:74:66:23:f9:67:11:8f:99:d0:ff:82:9e:
         9b:e4:bb:0f:74:e1:fe:b6:8d:5e:99:17:4c:c5:1e:8a:07:74:
         ee:12:7e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:21 2025 by rpki-client