Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
File:                     ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft (raw, json)
Hash identifier:          Zn3wsyR1+oArQXpKw9C2hFheVPz2hcF+9j8xSLTQl8Q=
Subject key identifier:   F7:54:49:4A:91:B0:9A:BB:8E:B8:81:E2:82:B1:9B:C2:26:69:9F:2A
Authority key identifier: 01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17
Certificate issuer:       /CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
Certificate serial:       01A11ABE1E02B17B9CF3F8354B226C6B50E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
Manifest number:          1A95
Signing time:             Thu 08 Oct 2026 09:00:29 +0000
Manifest this update:     Thu 08 Oct 2026 09:00:29 +0000
Manifest next update:     Fri 09 Oct 2026 09:00:29 +0000
Files and hashes:         1: 2OTpT_iPVatmtzbTR3cTe1hubrc.roa (hash: 96a4HaH7uBovr7v7aSF35lG60fSRXuRhdHuwp6lUb8E=)
                          2: ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl (hash: zsbNuA4K4kX7t7IAZBL2EV4tNeRcl4xJQ21bkJ6X+bE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:be:1e:02:b1:7b:9c:f3:f8:35:4b:22:6c:6b:50:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
        Validity
            Not Before: Oct  8 09:00:29 2026 GMT
            Not After : Oct  9 09:00:29 2026 GMT
        Subject: CN=f754494a91b09abb8eb881e282b19bc226699f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:71:e7:6d:73:cb:6e:76:a7:ee:7d:8b:71:5b:
                    ab:47:05:d6:f8:81:4e:1b:c7:61:0b:49:e5:61:e6:
                    f1:e3:10:c5:aa:2c:6e:c8:1f:8b:b1:21:e9:68:d1:
                    fb:95:26:f2:e9:71:a4:f9:2a:da:cf:cf:2c:63:ed:
                    7e:cb:4e:c4:c2:50:a9:9e:34:95:e9:3b:6b:49:1a:
                    f0:e0:90:c9:d7:8a:99:9c:d7:cd:23:40:93:f4:6c:
                    6c:90:be:12:3e:05:e0:40:92:98:fe:0c:b8:f4:25:
                    c8:05:6d:b9:1c:de:a1:33:30:1c:47:d2:32:6f:c6:
                    65:01:d8:dd:47:83:2a:51:2c:0c:0c:02:9a:2d:af:
                    6d:32:e8:ad:f5:6f:63:5f:57:ac:45:3d:92:d1:7c:
                    14:93:ff:10:9f:80:36:1f:d0:46:c3:ac:d1:74:e6:
                    a9:29:22:c8:2a:78:04:22:89:da:d0:e6:ab:bb:90:
                    73:cc:c0:43:fa:9a:04:12:8c:de:2f:fd:f0:9a:c3:
                    e3:91:ca:f2:a5:2b:a6:25:67:2a:0c:4e:dd:da:65:
                    ef:f8:bc:60:6d:79:f0:87:5a:64:d5:bd:84:d4:ab:
                    36:36:fd:63:65:74:f0:2d:97:81:a8:f7:f5:70:a3:
                    50:3e:18:47:12:1d:8b:c5:af:60:99:34:1e:5f:cf:
                    b9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:54:49:4A:91:B0:9A:BB:8E:B8:81:E2:82:B1:9B:C2:26:69:9F:2A
            X509v3 Authority Key Identifier:
                keyid:01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b5:ef:a7:61:c4:e4:85:5a:32:8f:e9:2e:99:ff:3b:83:e6:
         23:8d:c7:01:35:26:c5:b3:b1:67:fc:08:70:f7:b5:27:ad:c1:
         8a:b7:a3:7f:08:32:84:fa:b8:ff:dc:25:c0:32:5d:ba:e6:5d:
         b3:3b:69:48:b6:5d:11:29:bc:ce:8d:77:37:17:d4:6a:c3:96:
         f7:99:13:3d:bd:9d:f6:2c:80:ce:d0:a6:08:14:26:26:66:d9:
         59:15:df:c9:0d:2c:59:4b:91:5e:50:5a:25:e8:cf:6b:d7:8c:
         6e:79:9e:20:ad:1d:ba:3d:5f:53:89:95:20:9e:97:4a:b7:c8:
         f4:86:20:b7:71:3c:de:d2:f7:31:1f:e7:c9:1a:02:ca:c5:69:
         ca:d3:df:11:bf:7d:62:da:97:80:4e:cd:d9:20:5c:eb:0b:ed:
         71:50:2a:36:ec:bc:5d:86:fa:f5:90:e5:af:ae:81:66:4f:65:
         45:a2:1e:6b:8c:2f:e7:fc:21:0c:b1:ff:94:0a:50:71:e1:42:
         c1:1d:10:af:b2:97:ec:d7:3f:20:9c:ca:8f:1a:06:b1:c6:1e:
         87:43:85:20:10:af:45:45:21:89:e9:2f:db:c9:22:f3:63:d7:
         86:4a:d2:00:88:01:90:df:25:8c:df:19:20:77:ef:59:a7:4b:
         49:12:09:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:25:18 2026 by rpki-client