Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
File:                     ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft (raw, json)
Hash identifier:          uE8PAxkJlBzwuEca/rB/oG6hsNIevzRs0fmSZ1o0Am0=
Subject key identifier:   02:6B:A3:49:44:53:49:E5:EF:88:F6:86:9A:F6:DB:6F:48:63:C7:D3
Authority key identifier: 01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17
Certificate issuer:       /CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
Certificate serial:       019EC224A864F135139D8CF0849E89DCDAC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 18:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:42 +0000
Files and hashes:         1: 2OTpT_iPVatmtzbTR3cTe1hubrc.roa (hash: 96a4HaH7uBovr7v7aSF35lG60fSRXuRhdHuwp6lUb8E=)
                          2: ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl (hash: M4UIfkaR5UPlCAw8nDDfO9xrVeqGSSCfI5OxhRMcAg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:a8:64:f1:35:13:9d:8c:f0:84:9e:89:dc:da:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
        Validity
            Not Before: Jun 13 18:00:42 2026 GMT
            Not After : Jun 14 18:00:42 2026 GMT
        Subject: CN=026ba349445349e5ef88f6869af6db6f4863c7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:be:0a:b5:71:17:bb:d8:4b:e6:40:96:4f:
                    b9:bc:d2:d6:c5:4d:f9:47:1a:b8:7d:78:6a:58:60:
                    cb:19:42:2d:51:2a:36:18:a0:a2:83:d7:a4:2d:ab:
                    39:fd:b0:ae:fd:60:3d:72:d9:0c:d4:2b:61:a1:7e:
                    16:e3:2b:60:0c:e4:89:98:cf:5c:17:9d:f8:37:d1:
                    87:18:84:fd:29:e4:f4:32:8c:d1:e5:ec:15:ba:15:
                    a9:1a:21:e6:50:06:f1:d1:7d:eb:68:77:61:4c:2d:
                    f4:86:cd:85:b6:cc:91:42:05:29:f3:61:5a:c3:c8:
                    d9:8d:81:35:43:a2:88:6f:7e:c0:27:8a:59:33:93:
                    99:0a:67:78:2a:c7:f9:9c:74:bf:d3:06:a2:be:20:
                    14:22:12:57:d3:0e:73:f2:ef:82:14:12:c7:f6:39:
                    bb:e4:bd:33:92:5a:de:5d:c2:d8:bb:12:94:ce:23:
                    fb:81:5d:fc:39:fc:70:bb:ee:4b:3b:56:67:53:19:
                    5f:61:b9:a1:df:69:87:bf:60:f5:24:d0:27:f1:fa:
                    f2:cb:0e:64:ac:66:88:94:fe:50:23:80:eb:56:4c:
                    9a:68:72:f5:5d:69:1d:2b:71:f2:d2:6b:ff:fe:49:
                    3b:0e:65:a7:ae:a4:eb:9d:ea:a9:73:2c:f4:99:b8:
                    05:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6B:A3:49:44:53:49:E5:EF:88:F6:86:9A:F6:DB:6F:48:63:C7:D3
            X509v3 Authority Key Identifier:
                keyid:01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b2:de:f8:aa:9f:90:b2:2d:a8:f2:02:7a:fa:2a:e6:62:f3:
         a0:18:5f:72:5a:ec:c5:22:5e:19:e6:d6:16:44:ed:1b:4b:34:
         cf:94:3f:e5:94:19:1f:6e:f1:dc:2b:31:36:01:aa:08:e3:5a:
         dc:4e:ba:3f:ca:5c:c0:e1:0f:09:2d:8c:8c:cf:b2:c9:fd:58:
         e8:eb:93:0e:3b:33:f6:dc:e0:7f:52:43:de:b4:4a:c0:58:9a:
         fd:15:32:6b:f2:4d:78:63:67:f2:bd:63:dd:78:df:4d:16:5a:
         e4:61:36:b8:12:d7:fc:f2:bd:a1:25:fe:71:5e:a9:7e:47:7d:
         f6:ad:7f:0c:7b:37:28:3c:6a:e3:f2:5e:13:d0:11:db:02:02:
         b9:ad:33:ec:ec:2b:01:91:8a:d5:d4:1b:eb:3a:21:86:43:3f:
         36:2f:42:10:19:29:75:26:87:97:b4:d0:1d:01:2c:48:5c:d1:
         b1:b6:60:43:57:ab:aa:fb:d0:e5:49:a5:a0:b6:f3:80:9d:cc:
         d8:00:95:bc:3f:7d:af:1d:17:22:38:c6:0f:9d:62:6b:7d:ff:
         de:66:ee:c1:44:30:ff:55:9c:d7:1b:c4:c7:ed:1e:71:cf:fc:
         64:7a:f2:0d:1e:47:f8:d2:b3:a2:91:50:36:9a:5e:2a:0f:60:
         d9:7a:ee:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:45:34 2026 by rpki-client