Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File:                     ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier:          cCPdDzxQfmKxZ6V4AsBkdl6K42kRq2mVksx0lIGfV/4=
Subject key identifier:   9D:EF:6D:86:6F:A7:9A:E0:4E:F3:32:08:9C:2A:65:F3:BE:B4:D9:52
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       019FA899D3E1BCC23ABFF99D9D440470BCC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number:          19DF
Signing time:             Tue 28 Jul 2026 12:01:21 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:21 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:21 +0000
Files and hashes:         1: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: qBZ4JV0RQyk/0Rfor0/qxvDIpOS5f1QFRHxp55KtSno=)
                          2: DiwgogasK7UO37wSTbAcUhzQrAQ.roa (hash: n0ZKFvtPwV6YDw2aDkVlZj1yZbNh8nm1eJM/OAlY64g=)
                          3: IuQcx1tkT0HIrZq2Ct5qbZGXPy0.asa (hash: Qvuppcz1b5l2wZ5dj946ovG10EvF0+Pn11j9C7AR5FE=)
                          4: cX6Yew-a8YUF7vavg9BTxZRqe_4.roa (hash: 1ueNSCqqvjux7zZZsDYjg0VzkKE8OG5bTf0iOqV0bxA=)
                          5: io2mF3E9gfP7892mcQBySWcc0wI.roa (hash: s9fn90wE9W/HoEf/IkcbrFOIhL596v/QWK9di592Y8w=)
                          6: kf1_5a2TKMAsoCwowW0onw8sawo.asa (hash: 9jOdBjSe6jFQ5u7ETAx7zycjGxRDiEYkp6J4VjAhNZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:d3:e1:bc:c2:3a:bf:f9:9d:9d:44:04:70:bc:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Jul 28 12:01:21 2026 GMT
            Not After : Jul 29 12:01:21 2026 GMT
        Subject: CN=9def6d866fa79ae04ef332089c2a65f3beb4d952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:ec:40:5b:fb:8b:78:eb:23:d7:08:49:5e:
                    47:d4:91:ad:cc:e2:eb:4e:68:e8:0f:eb:5e:d0:90:
                    f4:6d:15:75:f8:f2:51:f6:78:07:7a:7c:13:d1:f5:
                    e8:31:4f:c1:67:7f:2d:67:bc:ac:e7:81:da:c4:04:
                    53:06:7f:9d:ce:f8:2d:0a:92:89:7c:64:f6:d0:11:
                    81:1d:c6:ae:23:0e:ae:08:7e:02:62:13:76:61:09:
                    c6:29:5c:8b:8c:a5:e5:d0:96:ee:e9:b7:d0:d9:48:
                    02:11:31:95:26:1e:1b:88:b0:cf:7c:45:08:5b:59:
                    15:eb:73:c5:fa:4b:b4:a4:54:9d:b5:9e:55:91:fe:
                    9c:b3:ec:9d:10:99:f3:6b:c0:87:c1:d6:1d:3d:ec:
                    b3:a0:fd:ac:45:aa:fd:c0:11:80:01:37:dd:a8:b7:
                    9b:25:49:b1:d1:60:4f:19:4d:c6:5d:a6:d0:ed:5a:
                    97:8c:75:f6:a7:56:10:ed:70:02:0a:ff:f1:2a:c5:
                    e6:28:ea:41:52:8d:a3:3e:5f:ab:5f:63:45:01:77:
                    6d:48:76:e6:8f:b4:51:57:7e:1e:cc:99:df:62:dd:
                    9f:1a:1c:55:73:df:ee:b8:7d:fd:4c:c9:90:c0:69:
                    4a:ef:b5:31:87:87:23:59:18:27:31:2f:61:0b:29:
                    32:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EF:6D:86:6F:A7:9A:E0:4E:F3:32:08:9C:2A:65:F3:BE:B4:D9:52
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:42:ca:9d:46:85:40:da:f4:79:d3:ad:bf:77:f8:fc:25:9c:
         5b:59:18:57:9a:31:c7:27:34:bb:4c:9b:1f:45:97:b2:99:09:
         b3:d7:73:ea:47:5e:ed:78:3f:1e:8c:d5:bb:89:db:a2:05:5e:
         b6:dd:34:c1:3a:57:df:74:71:84:06:17:9e:63:59:7b:2a:f3:
         5a:fe:ad:8a:16:69:bf:78:94:5e:cc:ba:ac:45:34:45:8d:78:
         8e:15:eb:30:79:9c:38:2a:6a:49:83:31:7e:19:3a:0b:ef:86:
         47:b5:9d:57:55:36:89:3f:42:57:27:c1:75:76:d9:69:e2:48:
         7b:8b:5d:12:3e:93:eb:db:e3:2a:03:5f:09:c9:19:73:79:7a:
         b1:78:1d:60:0e:a7:61:68:be:91:a2:a1:38:86:b0:3f:34:78:
         74:09:90:fe:d1:ff:ba:7c:b3:bb:3a:b7:7f:eb:fc:83:e8:11:
         56:bf:c5:b9:28:2a:89:4f:bd:ff:e7:f5:60:c7:d0:da:8d:ff:
         d3:ee:52:c3:c9:c3:27:08:d1:4e:02:49:6e:d0:87:e6:e4:17:
         25:ee:95:8a:b7:5d:0e:ea:23:0b:e2:e9:35:d5:48:86:48:6a:
         23:87:b5:41:98:06:58:f3:66:bd:fc:5b:c6:28:6e:58:38:90:
         cc:66:2c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:50:34 2026 by rpki-client