Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File:                     ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier:          FOi86XWheCepWUI5RglQ/pqdPaJAFbgOuxo5Vn2rnHY=
Subject key identifier:   D9:B7:BE:EF:A4:B4:44:D0:6A:F5:2B:D2:88:9D:6C:20:A9:80:C8:6E
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       019EF8DCE24D703319EB3658ACEE6D5C6E2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number:          1984
Signing time:             Wed 24 Jun 2026 09:01:25 +0000
Manifest this update:     Wed 24 Jun 2026 09:01:25 +0000
Manifest next update:     Thu 25 Jun 2026 09:01:25 +0000
Files and hashes:         1: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: gy0iuWsnCcY1Fxb2Ajk/1lhIJvrfK7MDGdxmESJPwuM=)
                          2: DiwgogasK7UO37wSTbAcUhzQrAQ.roa (hash: n0ZKFvtPwV6YDw2aDkVlZj1yZbNh8nm1eJM/OAlY64g=)
                          3: IuQcx1tkT0HIrZq2Ct5qbZGXPy0.asa (hash: Qvuppcz1b5l2wZ5dj946ovG10EvF0+Pn11j9C7AR5FE=)
                          4: cX6Yew-a8YUF7vavg9BTxZRqe_4.roa (hash: 1ueNSCqqvjux7zZZsDYjg0VzkKE8OG5bTf0iOqV0bxA=)
                          5: io2mF3E9gfP7892mcQBySWcc0wI.roa (hash: s9fn90wE9W/HoEf/IkcbrFOIhL596v/QWK9di592Y8w=)
                          6: kf1_5a2TKMAsoCwowW0onw8sawo.asa (hash: 9jOdBjSe6jFQ5u7ETAx7zycjGxRDiEYkp6J4VjAhNZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 09:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f8:dc:e2:4d:70:33:19:eb:36:58:ac:ee:6d:5c:6e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Jun 24 09:01:25 2026 GMT
            Not After : Jun 25 09:01:25 2026 GMT
        Subject: CN=d9b7beefa4b444d06af52bd2889d6c20a980c86e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4c:cf:34:b1:26:3b:0b:7f:7e:6f:96:ed:f0:
                    2e:5e:ea:16:13:65:e8:67:c1:b2:40:f9:7d:74:60:
                    a8:e5:15:3a:97:b0:0b:eb:bb:cf:2c:29:91:ed:28:
                    75:d3:29:df:18:6f:0c:43:ee:4c:e6:11:2c:3b:f5:
                    92:98:75:33:8b:44:4f:87:5d:46:cb:17:23:81:11:
                    9c:c2:df:cc:16:fa:06:af:84:0a:59:2c:0b:92:79:
                    26:df:4a:43:56:60:1c:37:7b:25:52:a7:2b:4c:0a:
                    7d:4a:19:78:5b:5e:19:00:ab:fd:bb:b6:02:76:34:
                    1c:0b:03:9d:fe:47:af:09:f6:57:d7:ae:e4:30:d8:
                    76:cc:8e:c5:36:c0:5c:0d:5b:68:1f:56:f9:97:57:
                    e9:f9:c7:22:bd:09:cb:49:99:fa:7d:5d:1f:f6:14:
                    ec:ec:7a:01:b6:c4:5b:d9:7f:42:48:0e:0c:5c:c7:
                    b4:95:9f:7a:ac:6c:51:81:41:01:b0:a6:ee:42:72:
                    93:7f:ad:ec:1c:37:f5:3e:88:77:e9:cd:0c:24:9f:
                    e6:72:b6:d5:77:7f:4f:6b:9d:ad:01:ee:21:5f:6d:
                    19:8a:76:e2:1b:5a:03:15:2f:eb:2c:f3:da:4d:6c:
                    51:76:79:51:cf:31:c1:82:26:19:eb:b8:8a:9f:f0:
                    3a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B7:BE:EF:A4:B4:44:D0:6A:F5:2B:D2:88:9D:6C:20:A9:80:C8:6E
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:5e:50:8d:6d:b4:9f:0d:83:e3:ad:68:06:e0:f5:cd:0c:a7:
         d4:52:f9:12:ca:63:a5:5e:60:a3:86:d8:90:e2:6e:17:f4:ed:
         81:5b:5d:5f:a7:ea:87:a4:74:d1:28:7e:99:e0:c5:e0:92:21:
         ab:db:78:78:97:0c:0a:b3:51:9a:cf:a6:8d:24:00:fb:73:71:
         b4:31:83:71:c9:8e:55:2c:da:49:42:2c:21:77:f8:bd:f7:bd:
         b6:59:9d:68:c3:b2:db:5d:e8:44:9c:f4:4c:eb:ad:3d:9b:0e:
         36:ec:46:4f:d8:f7:05:c3:85:9a:51:9f:fd:75:ab:46:c0:4f:
         c0:4b:16:b4:10:8f:e1:d9:91:00:17:3a:75:e4:65:08:17:4a:
         53:5e:08:6b:a2:f7:1d:c4:b0:7d:1e:50:ff:5e:42:83:57:15:
         8e:27:10:c5:ea:a4:dc:0b:bf:f1:d3:ed:ad:1d:ac:75:ff:3a:
         cc:02:1d:6d:46:71:ba:e0:bb:c7:99:40:38:00:e4:f8:cf:3c:
         2b:8b:79:ae:f1:f9:4a:99:12:1e:15:ef:32:01:dc:fb:52:d8:
         3c:3c:03:ad:c8:eb:45:7c:d1:48:85:db:10:6a:8f:da:b6:03:
         e7:48:a3:c0:d9:08:33:e7:c1:f3:1a:74:5a:2c:54:7e:3f:1e:
         82:a6:e8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 17:01:35 2026 by rpki-client