Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File:                     ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier:          UMl3NsR7dRfFQnmlWgr85JluOl7V3I5vqfjiCXgqZNM=
Subject key identifier:   E4:83:F4:C5:76:E9:D7:7C:49:89:13:9E:F3:35:58:BA:0C:14:65:C1
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       019DDB7A750A315FD480E7A43F031B05F084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number:          18F0
Signing time:             Wed 29 Apr 2026 23:02:08 +0000
Manifest this update:     Wed 29 Apr 2026 23:02:08 +0000
Manifest next update:     Thu 30 Apr 2026 23:02:08 +0000
Files and hashes:         1: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: WjbqztDWo87Ao2kMpnu7VAcdHvMTTUSk65InoHBJIKQ=)
                          2: IuQcx1tkT0HIrZq2Ct5qbZGXPy0.asa (hash: Qvuppcz1b5l2wZ5dj946ovG10EvF0+Pn11j9C7AR5FE=)
                          3: cX6Yew-a8YUF7vavg9BTxZRqe_4.roa (hash: 1ueNSCqqvjux7zZZsDYjg0VzkKE8OG5bTf0iOqV0bxA=)
                          4: dLEe-hpFpK3PFRGM9YsgzqZnVVw.roa (hash: A8Gw34BWQlcPCQ8+pvbsJ7XROVKk5nyiB7eyYgFiR4g=)
                          5: io2mF3E9gfP7892mcQBySWcc0wI.roa (hash: s9fn90wE9W/HoEf/IkcbrFOIhL596v/QWK9di592Y8w=)
                          6: kf1_5a2TKMAsoCwowW0onw8sawo.asa (hash: 9jOdBjSe6jFQ5u7ETAx7zycjGxRDiEYkp6J4VjAhNZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Apr 2026 23:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:db:7a:75:0a:31:5f:d4:80:e7:a4:3f:03:1b:05:f0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Apr 29 23:02:08 2026 GMT
            Not After : Apr 30 23:02:08 2026 GMT
        Subject: CN=e483f4c576e9d77c4989139ef33558ba0c1465c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:b4:59:13:59:02:c7:a0:a0:86:f3:17:8e:
                    4b:7f:8c:3a:09:42:44:58:ea:91:d2:68:81:d7:13:
                    84:2a:3f:10:c0:b0:79:7d:81:38:4f:7f:45:85:60:
                    9d:61:4b:96:08:08:2e:2e:3d:e7:12:68:f2:d1:28:
                    6f:56:f9:de:d5:ce:8c:77:74:05:81:77:af:f7:03:
                    c1:ba:6c:ed:3b:9a:8a:e2:4f:ed:56:ab:61:f1:35:
                    97:a2:a2:dc:d5:2b:85:d1:b9:85:5a:fb:f2:de:1e:
                    f8:5f:62:d3:d5:b7:2d:87:ae:cc:7e:36:39:c8:4d:
                    52:d3:42:be:fa:27:be:7a:8f:1b:e4:7e:d8:24:ee:
                    ad:1b:98:24:d1:79:5c:0a:bd:08:15:11:1a:ce:68:
                    10:56:cf:0a:89:35:cf:61:69:eb:e5:c5:52:49:6d:
                    f6:f5:3f:bb:28:1e:08:a7:ec:48:84:5f:56:d4:a4:
                    b4:0e:8b:2c:39:5e:bd:19:89:d3:41:48:d6:b1:b6:
                    ed:b5:d5:dd:13:29:79:d5:49:4a:f6:3f:92:85:40:
                    b2:98:1a:73:a8:48:d3:c8:13:9c:6f:ca:6d:77:fe:
                    1a:1f:72:ca:0c:6b:3a:5a:7b:63:17:ff:f9:4e:66:
                    fd:1b:04:2d:48:e9:03:8b:d0:e3:7f:76:33:d5:5b:
                    58:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:83:F4:C5:76:E9:D7:7C:49:89:13:9E:F3:35:58:BA:0C:14:65:C1
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:fb:3d:dd:89:f1:ee:5a:1f:17:3d:1d:28:ad:81:b0:b6:d6:
         74:f8:b6:5c:a4:0e:b8:73:31:53:7b:c6:c0:3f:5b:a1:b4:63:
         cc:2a:56:af:ce:9b:8a:39:fd:9f:cf:ac:86:bd:6f:cd:f3:fa:
         08:4c:fa:23:71:a4:1c:9a:b6:a7:ce:61:97:98:5d:e9:ef:38:
         1e:6e:25:97:5a:93:9b:9f:bf:44:61:5a:7a:9c:cb:55:86:14:
         26:f6:db:a2:aa:ed:f2:56:72:f3:75:48:5c:33:63:bb:0d:a6:
         bc:ca:5c:da:aa:1b:09:bf:fe:d8:b7:11:bf:47:60:05:e4:2f:
         b4:ef:4e:3d:31:b5:9e:a2:c7:4e:3d:89:c7:a5:46:fe:ba:1c:
         e8:6d:13:45:e9:f1:17:46:a5:59:29:a1:4b:7a:28:38:3f:48:
         94:14:da:bf:54:42:2b:bc:f6:df:87:4d:a3:c6:f8:35:1f:a7:
         3a:20:33:02:ed:d8:f9:75:b2:0f:26:ac:3c:f8:84:05:03:14:
         b9:e7:07:56:dc:2c:50:57:5c:02:48:1f:f0:79:7b:a9:30:92:
         73:71:07:40:37:14:f5:4b:2c:60:e6:65:1f:ea:e2:1e:5b:12:
         0e:ed:a5:07:21:dc:72:2d:6b:47:d7:93:39:1c:5b:95:7b:5b:
         d2:f5:e7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 08:25:53 2026 by rpki-client