Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File:                     ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier:          5Do1Tva80cdLwWcXOQW/NXbY0+FmDqXc2mVMUJRqQMw=
Subject key identifier:   3F:B5:6E:12:C8:80:B4:26:4E:C8:42:DB:AF:01:60:57:D2:5C:1B:EB
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       01A0EB1BE7719BFE2FE5BA30A8250D6DDC78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number:          1A87
Signing time:             Tue 29 Sep 2026 03:01:09 +0000
Manifest this update:     Tue 29 Sep 2026 03:01:09 +0000
Manifest next update:     Wed 30 Sep 2026 03:01:09 +0000
Files and hashes:         1: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: 91eTqF8Lebba8t91STCykHhuS2W/WmibGFv8oeC0mW4=)
                          2: IuQcx1tkT0HIrZq2Ct5qbZGXPy0.asa (hash: Qvuppcz1b5l2wZ5dj946ovG10EvF0+Pn11j9C7AR5FE=)
                          3: c-HjLKQSxtnvzyWLH_611ObuEAY.roa (hash: H839FL+6ufvkO1eladY3YPL4NNkFY7naVOP/ppVVcpg=)
                          4: d5hkQM3Vfcjs0TJWq46rHlNRylQ.roa (hash: 580hC/g7jAmf5qnSe5kqGVmdVRqVfvipXlRmFzU43Q8=)
                          5: io2mF3E9gfP7892mcQBySWcc0wI.roa (hash: s9fn90wE9W/HoEf/IkcbrFOIhL596v/QWK9di592Y8w=)
                          6: kf1_5a2TKMAsoCwowW0onw8sawo.asa (hash: 9jOdBjSe6jFQ5u7ETAx7zycjGxRDiEYkp6J4VjAhNZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 03:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:1b:e7:71:9b:fe:2f:e5:ba:30:a8:25:0d:6d:dc:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Sep 29 03:01:09 2026 GMT
            Not After : Sep 30 03:01:09 2026 GMT
        Subject: CN=3fb56e12c880b4264ec842dbaf016057d25c1beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:ba:9e:64:df:91:59:fa:21:33:bf:c2:cc:80:
                    e1:fa:d9:26:79:1a:d7:b4:69:85:7a:d9:39:47:ab:
                    b2:7c:84:1f:2a:63:9a:14:95:2c:83:d0:fa:0e:eb:
                    a4:af:16:2c:1d:61:89:35:24:c6:72:fd:83:72:e6:
                    bf:c7:fe:2e:c5:1e:0a:e1:b9:20:2f:de:b9:ac:fb:
                    ea:69:aa:ee:83:22:de:3a:c6:01:1a:63:6d:e5:31:
                    30:80:ea:34:7a:65:fd:74:16:75:37:08:90:75:6f:
                    bb:a3:35:9b:99:a3:19:bd:59:b7:6b:00:6e:2c:74:
                    5b:3b:37:8c:e8:a1:61:ed:4c:97:91:78:ae:2d:10:
                    92:c5:c6:5c:df:a3:73:12:52:a1:ae:46:08:c9:87:
                    96:46:73:47:73:cb:5a:77:14:b8:ad:82:36:05:db:
                    87:76:9a:cd:55:13:9c:3b:e9:ab:3d:5b:7c:3a:6e:
                    7f:65:d8:55:a4:a1:82:8a:b4:eb:c0:fd:2c:4b:03:
                    45:04:4a:ca:42:32:91:1d:89:08:be:19:68:b3:cd:
                    02:37:fc:a8:3e:05:8b:af:e9:c4:50:c0:20:e0:8d:
                    c1:6e:9c:74:5e:e0:a2:1f:87:ab:30:3e:82:d1:59:
                    45:91:aa:53:45:80:e8:31:bb:d2:eb:e6:4d:b0:92:
                    31:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B5:6E:12:C8:80:B4:26:4E:C8:42:DB:AF:01:60:57:D2:5C:1B:EB
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:0d:b0:c7:e0:cb:cf:63:a0:be:71:5e:73:12:75:42:a5:c8:
         04:2e:3d:bc:6f:6e:0b:35:3f:92:66:e4:a0:e5:24:ab:2b:92:
         61:63:0d:ba:e7:05:00:d5:10:44:3b:a6:c2:3d:c7:bb:26:18:
         ff:d6:f1:f3:17:e7:d0:33:d7:ed:c0:6b:0e:cc:35:2e:1d:22:
         44:0d:e4:2b:34:16:1f:8f:bd:ca:1a:ee:97:f8:59:2f:0c:1a:
         5d:e4:08:39:43:3f:95:81:ec:7b:03:3d:1a:c7:da:20:c5:de:
         bb:9c:ff:83:de:aa:4a:d2:07:83:7f:52:c5:dc:eb:3e:49:64:
         c5:96:03:57:db:16:fa:6f:0b:ae:a5:b4:33:91:ea:6d:b8:6b:
         14:12:2e:25:73:85:07:7f:85:69:d6:78:07:a7:12:94:39:bb:
         60:3d:86:37:23:10:2e:2a:94:0d:ee:9b:db:7e:71:f5:a1:da:
         44:cc:86:93:a6:e7:1e:46:85:23:bb:4b:41:06:09:a5:16:34:
         fb:86:6c:b5:84:b0:0d:3b:eb:36:7a:84:a3:ac:c8:81:1b:be:
         86:44:44:c5:0e:81:fb:35:5c:05:97:af:26:9e:8e:b4:a3:7c:
         82:2e:6d:0e:99:76:f9:a8:de:be:7f:54:6e:8b:46:26:df:3c:
         b8:76:ec:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:25:20 2026 by rpki-client