Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
File:                     ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft (raw, json)
Hash identifier:          wTRQ1C9I6FQ9XHxJb1cWsVru5u5U/LzQlKEkBbd6t8A=
Subject key identifier:   8E:D2:A7:CA:CD:70:CC:01:B7:C4:36:8C:28:4D:A3:95:0E:C4:FE:49
Authority key identifier: 01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17
Certificate issuer:       /CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
Certificate serial:       019CAB3432B2657C950FB794C4B5C0ADA68A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
Manifest number:          1849
Signing time:             Sun 01 Mar 2026 21:00:50 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:50 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:50 +0000
Files and hashes:         1: 2OTpT_iPVatmtzbTR3cTe1hubrc.roa (hash: 96a4HaH7uBovr7v7aSF35lG60fSRXuRhdHuwp6lUb8E=)
                          2: ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl (hash: arJn42uP/aQrE/O5hnDJpZ7W8i2M9ztOQZ3ExwqtGQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:32:b2:65:7c:95:0f:b7:94:c4:b5:c0:ad:a6:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
        Validity
            Not Before: Mar  1 21:00:50 2026 GMT
            Not After : Mar  2 21:00:50 2026 GMT
        Subject: CN=8ed2a7cacd70cc01b7c4368c284da3950ec4fe49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a6:08:77:ce:e1:01:33:a7:2c:27:e0:70:e9:
                    f6:c0:81:fb:32:94:e6:f5:ed:d0:f2:46:84:10:f0:
                    28:46:07:98:17:56:f3:b1:ba:fd:55:c0:18:be:c5:
                    c2:78:d3:d0:08:5e:8b:2c:3f:13:4e:4b:fd:72:85:
                    a9:18:1f:46:a4:f6:89:80:74:a8:96:94:87:0e:8c:
                    bf:66:1d:4a:3e:c9:a8:6d:12:03:13:7b:03:81:fa:
                    73:34:c3:48:ef:fa:af:44:dd:59:cb:32:32:30:4e:
                    b5:ac:1e:c3:3a:6a:01:bc:cd:85:e3:11:e6:09:ae:
                    dd:81:5c:3e:82:33:67:bd:ba:81:7e:b0:1b:bf:38:
                    78:3b:83:05:c1:f5:bb:f2:14:16:da:d4:84:71:fa:
                    1f:35:58:81:04:d1:65:8d:ee:bf:5d:7d:61:b9:0a:
                    8b:8a:36:f5:41:0f:4a:dd:19:09:bd:6d:2f:c6:7d:
                    eb:25:c2:b4:f2:84:71:04:8b:15:e0:39:7c:14:e3:
                    a4:d0:47:57:51:fc:e8:5e:5f:0c:08:3a:21:89:74:
                    e4:e5:11:29:a3:7e:f7:d1:92:65:ab:a4:28:cc:ae:
                    a9:de:7d:dc:fc:60:08:2c:e5:37:fe:70:11:8a:28:
                    bb:8e:a8:79:6d:64:cb:12:b2:6b:a3:1b:78:f6:a7:
                    d5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D2:A7:CA:CD:70:CC:01:B7:C4:36:8C:28:4D:A3:95:0E:C4:FE:49
            X509v3 Authority Key Identifier:
                keyid:01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:32:5d:ba:5f:44:29:a5:eb:29:3e:0a:24:6c:1f:75:27:06:
         7a:89:68:d1:e1:5c:7e:61:91:4e:1c:11:d6:52:87:32:ef:69:
         22:69:6c:8b:9e:24:82:d1:9b:95:0d:5b:60:71:15:c7:a9:6b:
         f4:72:ce:67:cf:b4:a0:2e:9c:54:77:31:c0:00:a9:e3:eb:c1:
         4d:cb:f2:b5:18:ee:92:54:f2:98:c7:4f:f3:68:06:b8:38:2d:
         f5:3f:57:8f:a3:0a:5b:d9:c2:97:55:fe:0b:06:91:80:ef:2d:
         59:ac:f7:56:ee:fa:0c:74:90:e7:60:ee:3c:ba:81:69:1c:3a:
         05:99:4a:35:4d:c0:a8:60:76:e0:ff:33:46:15:ad:3a:b2:35:
         ed:3b:4a:fc:37:2a:11:4b:d8:f0:65:8c:d2:2f:42:06:1a:d6:
         9b:b4:8d:16:9d:ff:41:23:80:58:aa:3c:f9:02:99:0b:5f:69:
         57:59:50:01:13:f7:ef:95:f0:fb:82:1e:f3:e5:c8:d6:5e:68:
         37:4f:30:e7:8a:9c:f7:c4:1f:59:04:32:bd:a7:6b:83:7e:94:
         a4:a2:5b:91:e1:cb:a0:cd:46:bf:ec:ae:a2:17:6c:e7:8e:e9:
         1d:a1:0e:73:e7:65:a1:08:94:35:aa:e7:c4:87:de:c2:93:97:
         67:c6:95:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNDKyZXyVD7eUxLXAraaKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMTI3NTY2YTVhYzQxZTY2YjRjNzUzN2E2MGZkY2JiZmFi
MzlhMTcwHhcNMjYwMzAxMjEwMDUwWhcNMjYwMzAyMjEwMDUwWjAzMTEwLwYDVQQD
Eyg4ZWQyYTdjYWNkNzBjYzAxYjdjNDM2OGMyODRkYTM5NTBlYzRmZTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6YId87hATOnLCfgcOn2wIH7MpTm
9e3Q8kaEEPAoRgeYF1bzsbr9VcAYvsXCeNPQCF6LLD8TTkv9coWpGB9GpPaJgHSo
lpSHDoy/Zh1KPsmobRIDE3sDgfpzNMNI7/qvRN1ZyzIyME61rB7DOmoBvM2F4xHm
Ca7dgVw+gjNnvbqBfrAbvzh4O4MFwfW78hQW2tSEcfofNViBBNFlje6/XX1huQqL
ijb1QQ9K3RkJvW0vxn3rJcK08oRxBIsV4Dl8FOOk0EdXUfzoXl8MCDohiXTk5REp
o3730ZJlq6QozK6p3n3c/GAILOU3/nARiii7jqh5bWTLErJroxt49qfVLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7Sp8rNcMwBt8Q2jChNo5UOxP5JMB8GA1UdIwQY
MBaAFAESdWalrEHma0x1N6YP3Lv6s5oXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJKMVpxV3NRZVpyVEhVM3BnX2N1X3F6bWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81MWY3ZjgtMDU5NS00NjU0LTk0M2It
MWJlYWM3NDQwMjYyLzEvQVJKMVpxV3NRZVpyVEhVM3BnX2N1X3F6bWhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81MWY3ZjgtMDU5NS00NjU0LTk0M2ItMWJlYWM3NDQwMjYy
LzEvQVJKMVpxV3NRZVpyVEhVM3BnX2N1X3F6bWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzJdul9E
KaXrKT4KJGwfdScGeolo0eFcfmGRThwR1lKHMu9pImlsi54kgtGblQ1bYHEVx6lr
9HLOZ8+0oC6cVHcxwACp4+vBTcvytRjuklTymMdP82gGuDgt9T9Xj6MKW9nCl1X+
CwaRgO8tWaz3Vu76DHSQ52DuPLqBaRw6BZlKNU3AqGB24P8zRhWtOrI17TtK/Dcq
EUvY8GWM0i9CBhrWm7SNFp3/QSOAWKo8+QKZC19pV1lQARP375Xw+4Ie8+XI1l5o
N08w54qc98QfWQQyvadrg36UpKJbkeHLoM1Gv+yuohds547pHaEOc+dloQiUNarn
xIfewpOXZ8aVDQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:24 2026 by rpki-client