Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
File:                     ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft (raw, json)
Hash identifier:          ZbaXRJqMlON/RfmFyNxtH21Eb9b5Rup+QZkoMPeJGJE=
Subject key identifier:   BD:97:22:EC:C1:A1:5E:A9:67:84:27:E7:17:56:64:B3:84:03:F5:FF
Authority key identifier: 01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17
Certificate issuer:       /CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
Certificate serial:       019D9AABAA3B589CA6A9037AE4FE030AAEAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 09:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:34 +0000
Files and hashes:         1: 2OTpT_iPVatmtzbTR3cTe1hubrc.roa (hash: 96a4HaH7uBovr7v7aSF35lG60fSRXuRhdHuwp6lUb8E=)
                          2: ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl (hash: /yx4qdLSoT5SwujxC5VGKG1iv6WqEdbfpDw2pVbetJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:aa:3b:58:9c:a6:a9:03:7a:e4:fe:03:0a:ae:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
        Validity
            Not Before: Apr 17 09:00:34 2026 GMT
            Not After : Apr 18 09:00:34 2026 GMT
        Subject: CN=bd9722ecc1a15ea9678427e7175664b38403f5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:41:76:f4:a7:60:bf:cf:13:76:48:ae:4b:19:
                    7f:6a:a1:81:e7:1a:7a:7b:12:fc:f6:01:b0:6f:fe:
                    38:8a:cc:d5:49:8d:3e:40:04:82:d5:de:ac:09:bb:
                    dc:7a:2d:ac:ef:b1:13:f2:ad:cd:5c:78:ee:d2:c9:
                    5f:94:da:3e:f6:a7:0b:34:53:c1:c5:ca:e2:03:38:
                    2c:47:d1:f0:a6:eb:05:a8:ac:64:43:9d:ab:2d:74:
                    a8:21:56:30:55:b9:d7:8a:ae:a3:df:84:7a:62:c6:
                    91:bf:17:45:4d:03:79:e5:9b:69:a3:80:3a:77:99:
                    bf:bf:85:11:a8:3e:b7:b7:15:ae:5f:a9:77:35:e1:
                    66:16:19:e2:c7:99:92:07:44:97:c8:9d:f4:2b:b7:
                    fe:7f:e0:79:b9:e4:b8:6d:7e:16:85:f9:f0:c2:48:
                    75:a1:ed:0e:5b:e9:9c:c7:88:d1:2d:7f:f2:d0:2e:
                    29:b5:86:48:08:68:15:ac:f6:a2:5d:30:6e:ea:96:
                    65:28:bc:46:ac:c9:e4:73:79:5d:cb:4c:f8:a6:84:
                    7b:ff:11:07:1c:e6:99:29:2d:9b:ba:8b:ce:bb:d3:
                    ff:f2:2d:f5:d1:26:be:8b:5b:4e:d6:83:44:01:bc:
                    ee:b4:99:3b:33:0b:81:a3:bf:ce:f1:dc:d2:69:88:
                    b9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:97:22:EC:C1:A1:5E:A9:67:84:27:E7:17:56:64:B3:84:03:F5:FF
            X509v3 Authority Key Identifier:
                keyid:01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:61:d3:aa:ad:bf:7c:b4:51:60:4c:4b:89:c4:e9:c1:cb:40:
         82:30:4e:90:5c:c0:c9:8f:b3:bf:44:84:df:a1:cd:dc:a6:b6:
         23:05:c9:cf:28:d0:51:4f:c4:5a:17:e5:7a:55:32:da:4f:83:
         13:66:05:a8:33:f8:d9:a4:94:ff:7b:93:9a:0c:7d:24:52:52:
         b7:63:d2:59:de:4c:49:df:2f:b5:ad:9e:ac:13:c7:5b:70:4b:
         84:ad:c5:1a:c2:53:b4:11:52:04:69:de:58:54:a0:69:43:a6:
         e0:6c:06:6d:8b:04:3b:71:d0:c5:76:20:89:77:10:eb:7f:fa:
         b8:40:98:93:96:43:04:8a:c8:74:f2:c7:88:27:a9:96:ec:cd:
         a3:1e:71:65:89:09:1b:5b:8a:42:1e:6c:d9:48:45:6b:b0:8e:
         c9:46:28:a2:dd:1b:75:19:29:6a:72:51:78:17:4b:f2:c9:e5:
         35:eb:37:28:6a:15:68:9a:8e:cc:dc:32:8b:79:91:ad:da:cc:
         88:ec:1f:c3:f0:c9:b3:3a:52:f7:49:0e:b7:60:df:cb:ee:f2:
         cc:d5:d6:3c:95:db:c2:f2:5e:5b:ce:ef:d8:4a:97:49:a3:c8:
         cd:84:3f:ed:76:c6:e5:0a:ea:e9:5e:08:64:82:fb:70:e7:25:
         47:be:62:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:47:57 2026 by rpki-client