Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File:                     ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier:          2sdfUCLXmpl0jOYUyULsQ9y3P3zl41so+g8PpPHCvaQ=
Subject key identifier:   00:15:CF:05:0C:A4:AA:17:64:88:DA:77:F1:92:1C:5D:AB:52:F6:C4
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       019CED82DAA042DD67A64C75767366B5EABB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number:          1874
Signing time:             Sat 14 Mar 2026 18:01:41 +0000
Manifest this update:     Sat 14 Mar 2026 18:01:41 +0000
Manifest next update:     Sun 15 Mar 2026 18:01:41 +0000
Files and hashes:         1: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: YAUS4Kp/pI6mwDEwo5sMmNqfOXoLKScrsAA40azD6J4=)
                          2: IuQcx1tkT0HIrZq2Ct5qbZGXPy0.asa (hash: Qvuppcz1b5l2wZ5dj946ovG10EvF0+Pn11j9C7AR5FE=)
                          3: cX6Yew-a8YUF7vavg9BTxZRqe_4.roa (hash: 1ueNSCqqvjux7zZZsDYjg0VzkKE8OG5bTf0iOqV0bxA=)
                          4: dLEe-hpFpK3PFRGM9YsgzqZnVVw.roa (hash: A8Gw34BWQlcPCQ8+pvbsJ7XROVKk5nyiB7eyYgFiR4g=)
                          5: io2mF3E9gfP7892mcQBySWcc0wI.roa (hash: s9fn90wE9W/HoEf/IkcbrFOIhL596v/QWK9di592Y8w=)
                          6: vRuoFrWmkK8pTSRrltUuVuGlSfw.asa (hash: jJl2elMZFteUA4c0m26M/kbkufXHKwyn92yjxdg4Cgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ed:82:da:a0:42:dd:67:a6:4c:75:76:73:66:b5:ea:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Mar 14 18:01:41 2026 GMT
            Not After : Mar 15 18:01:41 2026 GMT
        Subject: CN=0015cf050ca4aa176488da77f1921c5dab52f6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:67:ee:40:72:b2:e3:6f:a5:a7:c1:3d:a5:29:
                    a1:6a:e3:41:77:ab:b3:b8:ed:08:75:8e:cb:32:88:
                    69:37:6f:93:d3:0a:bd:ec:43:5c:93:50:65:68:2e:
                    8f:56:52:eb:9f:be:35:c2:2e:40:fa:65:90:5c:bf:
                    d0:9e:bb:24:b4:46:99:2a:1c:68:57:69:db:25:b9:
                    ee:20:2e:3a:8b:26:1e:e0:46:f1:98:73:c9:2b:cd:
                    fc:95:16:60:63:b4:05:a0:66:a7:42:64:5b:27:1c:
                    86:9c:61:07:15:22:1a:1f:b5:de:1e:0e:50:68:6b:
                    7f:13:87:c3:a0:3f:d0:67:4a:5d:2e:68:05:e7:82:
                    1d:5b:95:44:a0:84:0a:5e:e9:e1:fa:3d:f6:d9:d9:
                    06:18:9b:5d:26:03:02:3f:a1:7f:6f:f1:35:62:f3:
                    71:e7:77:ff:66:99:a3:b8:62:73:b2:d5:a2:c2:f5:
                    ba:8e:22:6b:14:a7:56:b9:7f:cd:e8:22:2d:ac:56:
                    f0:9c:07:27:c8:e5:07:b7:55:88:89:83:f3:e8:d1:
                    7e:d1:56:cb:33:f8:a4:e3:cd:48:2e:49:3a:66:c8:
                    c1:03:51:79:50:17:6f:15:eb:1f:47:3d:43:fc:cb:
                    ed:98:af:34:00:ed:d3:e4:e8:bb:41:aa:09:bf:52:
                    54:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:15:CF:05:0C:A4:AA:17:64:88:DA:77:F1:92:1C:5D:AB:52:F6:C4
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ac:d3:f9:e7:c9:26:74:1c:ea:4d:a3:7c:7d:20:8e:56:af:
         8d:db:22:12:fb:6c:f9:c3:ea:b0:96:aa:85:ab:bc:56:b9:f3:
         4c:7f:88:11:94:f9:f1:89:d2:e9:8e:b6:69:f6:f0:5b:6d:f8:
         ca:bb:5f:b5:62:12:e2:19:f5:65:78:64:5f:be:2f:9d:c7:6f:
         81:e3:62:06:c8:e3:86:a1:7b:23:85:04:dc:ec:46:1b:1c:b3:
         22:6f:55:fe:93:14:2f:6d:a2:e1:b0:96:de:9f:a9:4d:a7:88:
         3e:c3:fc:13:e3:3a:b9:2e:09:9a:a6:d1:3b:f2:dd:28:3f:44:
         2d:c7:3d:44:4c:7e:0d:8b:2e:6e:af:7a:d1:8e:21:60:3e:4e:
         2e:83:98:c1:3d:10:81:77:af:f1:b6:22:62:b5:d2:fd:88:26:
         35:1b:50:4e:57:02:11:15:92:ab:dc:7a:42:5b:2b:28:04:95:
         71:3a:6a:76:11:6b:77:fb:33:44:16:02:f4:5e:4b:0f:1c:82:
         e6:d6:2f:1b:eb:41:a8:a9:98:d8:e3:c1:45:d2:6e:cd:14:86:
         a6:1c:af:4e:c7:a7:39:50:1c:f7:f4:1a:fd:5f:71:97:00:5f:
         7a:f4:b4:19:94:8e:12:45:c9:14:b5:9f:74:a6:f1:5c:b9:e1:
         9d:33:6b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:45:48 2026 by rpki-client