Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File:                     ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier:          b06oTMVz4KHGZVEgehEUhz56hU9JogAcDNMkrDYyNiI=
Subject key identifier:   C0:B0:D0:E9:F8:21:ED:3E:C5:09:9A:B1:9A:3C:BE:DB:71:49:34:28
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       019CAA21C09403B06C94BDEF3895AC01C6EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number:          1851
Signing time:             Sun 01 Mar 2026 16:01:04 +0000
Manifest this update:     Sun 01 Mar 2026 16:01:04 +0000
Manifest next update:     Mon 02 Mar 2026 16:01:04 +0000
Files and hashes:         1: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: MEjgfY1xxqqnJzA8CckXrzwoZ6JyELcpWC+qs61N94c=)
                          2: IuQcx1tkT0HIrZq2Ct5qbZGXPy0.asa (hash: Qvuppcz1b5l2wZ5dj946ovG10EvF0+Pn11j9C7AR5FE=)
                          3: cX6Yew-a8YUF7vavg9BTxZRqe_4.roa (hash: 1ueNSCqqvjux7zZZsDYjg0VzkKE8OG5bTf0iOqV0bxA=)
                          4: dLEe-hpFpK3PFRGM9YsgzqZnVVw.roa (hash: A8Gw34BWQlcPCQ8+pvbsJ7XROVKk5nyiB7eyYgFiR4g=)
                          5: io2mF3E9gfP7892mcQBySWcc0wI.roa (hash: s9fn90wE9W/HoEf/IkcbrFOIhL596v/QWK9di592Y8w=)
                          6: vhV4CgEY_EBvFhQTjNdetsgK0AU.asa (hash: yt06MklqrtjLjhfi+Wj/Ow/Y9tz1c0ZILK1/UtIBg5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:c0:94:03:b0:6c:94:bd:ef:38:95:ac:01:c6:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Mar  1 16:01:04 2026 GMT
            Not After : Mar  2 16:01:04 2026 GMT
        Subject: CN=c0b0d0e9f821ed3ec5099ab19a3cbedb71493428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0e:0c:9f:1b:3a:34:ed:c6:79:8b:46:9d:ef:
                    2d:d3:e7:10:5b:08:f6:57:b5:5d:ba:bc:37:e1:21:
                    85:f3:0b:3f:04:73:45:e2:76:9c:85:c3:b8:c9:37:
                    f1:d4:b6:cb:fc:ec:db:78:b0:4f:45:81:12:3e:0f:
                    a1:48:4e:0f:0a:18:77:34:76:8e:ce:c7:ee:10:a1:
                    cb:a2:5b:e2:ec:4e:71:43:61:d4:86:6a:7a:2f:49:
                    b7:97:34:eb:17:43:ca:b7:a9:7d:2e:6d:dc:18:64:
                    59:97:6d:bb:9c:41:96:26:99:f4:71:26:cf:ca:b6:
                    ea:0b:e3:44:7a:77:5e:15:47:b9:f3:1c:39:d4:3d:
                    dc:f1:c2:51:b9:6c:b4:57:98:6a:cd:32:c2:94:fc:
                    e3:ad:8f:de:ec:65:81:74:5e:52:3f:35:a6:7d:b5:
                    d3:3b:d6:d7:01:16:a2:dd:e4:33:75:eb:5c:b9:31:
                    2c:f8:72:9d:a3:a4:21:bf:67:ec:44:61:13:a0:84:
                    09:a1:8c:8d:0d:27:f2:14:7a:62:b8:c3:de:3d:ad:
                    83:d1:18:b7:77:e0:6d:dd:25:1b:dc:06:71:c5:be:
                    7d:5c:33:39:93:4d:9a:d6:40:67:83:28:60:8a:a3:
                    ba:03:01:17:56:70:04:a6:75:36:e9:4f:a1:35:51:
                    8b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B0:D0:E9:F8:21:ED:3E:C5:09:9A:B1:9A:3C:BE:DB:71:49:34:28
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e2:ce:6b:ad:a2:18:37:94:31:e3:a7:4c:4f:11:08:15:b4:
         e2:fa:93:b8:d0:b5:74:d6:11:6d:1b:af:a7:92:89:94:75:95:
         f3:01:db:c1:2c:a9:18:34:fb:de:7f:c4:d0:1e:e8:ad:d5:12:
         87:ef:0c:a1:e3:d2:37:c1:7b:e5:3e:ac:c7:90:60:53:c8:b5:
         e9:51:7c:4e:c7:90:ad:23:63:3d:42:ee:32:96:16:d4:b7:71:
         39:7b:52:ca:77:28:fb:e8:97:3d:4d:89:83:e1:14:29:3e:fb:
         12:af:19:f2:1c:e2:29:b4:7c:0e:87:e7:02:dc:43:99:05:50:
         3e:62:7d:80:87:b7:4d:c3:33:40:0a:af:91:a9:ee:e3:58:39:
         46:4b:91:77:4b:eb:57:f3:e2:ea:30:1e:8e:f0:21:cf:82:07:
         b1:40:31:93:9d:8b:99:33:c4:04:ef:a5:9f:e1:ee:a4:8b:0b:
         34:ee:e9:51:4a:dc:37:3b:7e:97:2c:4f:8a:17:8b:74:00:ab:
         9d:c4:05:17:97:0d:5e:ee:3b:61:aa:f8:a0:c6:1c:30:33:cc:
         d2:3b:20:d2:55:ce:12:17:3d:5f:f5:94:61:b5:cc:a0:4c:ee:
         c8:03:df:ca:65:9e:94:e3:95:93:43:0d:c0:ad:ee:79:46:41:
         1a:dd:22:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:13:30 2026 by rpki-client