Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File:                     ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier:          gaoNIyuzr7AW7/KPMzdD82+iHoiQWali6EZ5rz0w/ME=
Subject key identifier:   33:F7:55:3F:D6:F7:30:34:21:5C:0A:2B:70:D4:44:7F:11:29:49:8D
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       01A1AA4C054EB084AC7D8674D2030C0118B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number:          1AEA
Signing time:             Thu 05 Nov 2026 06:01:11 +0000
Manifest this update:     Thu 05 Nov 2026 06:01:11 +0000
Manifest next update:     Fri 06 Nov 2026 06:01:11 +0000
Files and hashes:         1: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: N/7cAwVH/Lvfi4wfSexYxDli5oM9QkV3Pal4z0QmjI0=)
                          2: IuQcx1tkT0HIrZq2Ct5qbZGXPy0.asa (hash: Qvuppcz1b5l2wZ5dj946ovG10EvF0+Pn11j9C7AR5FE=)
                          3: c-HjLKQSxtnvzyWLH_611ObuEAY.roa (hash: H839FL+6ufvkO1eladY3YPL4NNkFY7naVOP/ppVVcpg=)
                          4: d5hkQM3Vfcjs0TJWq46rHlNRylQ.roa (hash: 580hC/g7jAmf5qnSe5kqGVmdVRqVfvipXlRmFzU43Q8=)
                          5: io2mF3E9gfP7892mcQBySWcc0wI.roa (hash: s9fn90wE9W/HoEf/IkcbrFOIhL596v/QWK9di592Y8w=)
                          6: kf1_5a2TKMAsoCwowW0onw8sawo.asa (hash: 9jOdBjSe6jFQ5u7ETAx7zycjGxRDiEYkp6J4VjAhNZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:aa:4c:05:4e:b0:84:ac:7d:86:74:d2:03:0c:01:18:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Nov  5 06:01:11 2026 GMT
            Not After : Nov  6 06:01:11 2026 GMT
        Subject: CN=33f7553fd6f73034215c0a2b70d4447f1129498d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:19:4a:52:78:93:26:64:5b:b7:e8:1a:99:
                    be:a9:da:d3:3f:e7:56:22:05:f5:c5:7e:bf:33:f0:
                    dd:21:60:1a:2d:29:8a:12:ad:a4:55:41:c7:27:19:
                    f6:6d:cc:64:99:68:fa:f8:50:79:67:7d:5f:98:b3:
                    4d:b3:fe:8b:cc:99:8b:54:38:fd:b6:b3:be:6a:39:
                    16:24:79:dc:a0:8e:36:dc:31:de:92:02:ec:38:1c:
                    09:c2:ad:6e:76:65:d5:74:1c:99:ab:c1:da:b6:a5:
                    9a:5e:aa:56:e9:b8:3f:e6:ae:4a:a0:0c:a4:f2:8f:
                    cc:a3:00:eb:0f:7e:c9:44:47:11:d5:3a:81:59:d4:
                    50:42:82:fb:f4:cb:e1:52:ea:bf:2d:ef:e3:a1:88:
                    dd:7a:18:89:a1:09:c2:b3:04:7e:7d:56:e7:4e:57:
                    38:cd:ca:cb:c7:83:d8:f1:0e:e0:44:fd:38:8c:10:
                    c7:fa:85:95:da:4b:bf:27:c5:79:8e:9e:ea:73:aa:
                    1d:1d:c7:44:fb:6b:33:32:bc:51:e8:b3:f1:70:27:
                    b4:3f:fd:af:7b:d2:d2:5d:07:d6:7c:13:30:ad:d6:
                    19:b7:d7:5a:2b:34:16:cf:c6:28:9f:68:c4:f0:e3:
                    ad:b3:e7:78:1d:39:3b:a2:4b:98:f0:aa:f2:f9:f9:
                    a1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F7:55:3F:D6:F7:30:34:21:5C:0A:2B:70:D4:44:7F:11:29:49:8D
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:62:58:93:09:c3:e0:4f:ef:18:9d:1d:82:4f:ab:ac:4a:cf:
         ce:e4:78:7e:d7:24:93:b6:01:73:a6:1f:67:c5:20:57:50:48:
         e3:7e:a0:46:ff:62:97:52:26:7d:87:b5:ff:a3:0c:7d:17:91:
         f8:66:ea:d2:c4:04:0b:cd:40:c9:8c:b1:4c:dd:cb:81:e9:d6:
         41:2a:c3:fc:4b:94:17:fe:0e:81:99:53:a6:ae:10:e5:db:c6:
         a0:83:20:ac:5d:76:55:99:e1:cf:3a:d7:19:b1:17:6f:16:4b:
         fd:4d:53:75:18:65:2c:f2:75:f7:8a:a4:0f:60:d9:ad:c9:71:
         e4:f3:f6:94:26:e8:6e:c1:fb:81:d2:32:a6:fe:34:9f:1a:cd:
         4b:43:dd:f6:d3:a9:60:d7:15:ef:00:2b:f9:55:fc:0f:cb:88:
         03:1e:e2:f6:6e:1c:44:fa:7e:9e:a8:8f:94:c3:59:b1:2c:54:
         42:8a:34:4f:25:7a:e7:5a:df:d6:cd:d6:a3:8e:71:6c:d6:1d:
         5e:b2:72:85:5c:11:3f:48:28:90:3c:00:d6:1b:20:3a:37:fc:
         b1:c5:f3:5a:09:28:4a:37:5b:ee:f1:a9:ed:b6:b0:9d:6a:b0:
         f9:f8:ee:42:a1:83:67:9f:f6:04:1a:eb:3e:88:40:e8:47:7f:
         c1:e6:d1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:16:42 2026 by rpki-client