Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
File:                     ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft (raw, json)
Hash identifier:          LuIZ5y4PZYgpHahIkV9dZtiB7ym8p5muCdu2DoxXmV8=
Subject key identifier:   9D:64:85:0B:6D:DB:6E:34:7A:CF:EA:41:94:58:DD:DD:D3:16:66:70
Authority key identifier: 01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17
Certificate issuer:       /CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
Certificate serial:       019D28BBD52DFDE127263AF37660732D07F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 06:01:31 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:31 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:31 +0000
Files and hashes:         1: 2OTpT_iPVatmtzbTR3cTe1hubrc.roa (hash: 96a4HaH7uBovr7v7aSF35lG60fSRXuRhdHuwp6lUb8E=)
                          2: ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl (hash: CrjemvDP1ZKl5tICNLd00O+aCEVK2LmFRkIBNUXKteo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:d5:2d:fd:e1:27:26:3a:f3:76:60:73:2d:07:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
        Validity
            Not Before: Mar 26 06:01:31 2026 GMT
            Not After : Mar 27 06:01:31 2026 GMT
        Subject: CN=9d64850b6ddb6e347acfea419458ddddd3166670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:32:a5:0c:72:07:60:a8:f4:60:53:2e:e9:0b:
                    47:ee:67:ca:7a:a0:d1:16:a2:87:a6:db:c6:90:1a:
                    3c:eb:f2:4a:e7:82:4a:67:a6:f6:2b:3b:9b:54:d6:
                    08:a0:05:85:69:d3:c2:ef:42:fb:fc:4d:4d:40:12:
                    80:88:ce:1d:5f:e9:f9:00:fc:f1:b0:6d:01:37:b3:
                    a7:35:88:f0:49:e6:56:c4:04:a9:1b:9c:d5:c6:ca:
                    cc:9a:88:5a:de:ab:f2:13:fb:67:12:c7:25:87:92:
                    f8:8b:b1:3c:e3:c5:d4:01:74:fe:be:4d:2c:4c:93:
                    ae:77:cb:d9:75:51:8a:54:b7:ee:c3:ae:d5:d9:fd:
                    2a:8f:d8:92:49:17:c1:74:40:df:66:b4:5a:ba:ef:
                    ce:b2:68:4c:b0:3e:12:aa:13:58:95:9d:2d:ec:87:
                    b3:96:90:93:05:a1:42:bf:5a:39:f3:9e:7e:fe:16:
                    ec:52:55:4c:e5:a1:be:7a:a4:3a:e8:ac:8d:61:a4:
                    0c:a7:a3:b3:a3:45:6e:ae:8b:95:39:d8:cf:85:1d:
                    44:5e:25:e1:c1:e8:a9:35:b2:d8:ea:d0:c9:b3:08:
                    6a:45:a2:34:e1:bf:77:0b:fa:02:c2:22:5e:6d:fe:
                    5d:58:ca:60:1d:f8:11:b4:0c:a7:5b:52:cd:d9:6c:
                    01:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:64:85:0B:6D:DB:6E:34:7A:CF:EA:41:94:58:DD:DD:D3:16:66:70
            X509v3 Authority Key Identifier:
                keyid:01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b9:d3:64:22:57:d6:b4:e5:e7:21:6f:50:13:44:f3:13:57:
         9d:e2:1f:96:c2:bc:03:61:2a:71:4d:07:bc:ac:8d:90:8e:52:
         8c:9e:e6:97:5e:6a:cf:cc:be:3e:6e:02:f8:0d:7c:d9:b1:fc:
         4b:25:6c:65:cf:e2:48:73:d6:13:71:a2:94:b0:e6:19:39:fa:
         cd:a3:46:f1:96:cf:54:11:20:54:ce:0d:e8:f9:58:22:fb:62:
         f7:52:d9:8a:b5:cb:5c:a7:86:8d:a7:15:37:c8:e5:ab:e7:80:
         d7:f9:b8:9e:3b:bb:c8:56:c4:ac:b0:64:3b:b1:a3:dd:93:a1:
         34:9d:14:60:14:e3:4f:d8:50:bb:39:3e:11:cb:ad:ab:bf:28:
         28:71:43:48:1c:ce:bc:8a:8c:ee:b0:14:1a:ae:61:af:97:7f:
         a8:83:84:03:33:c6:62:40:03:22:4e:c1:b3:15:32:10:be:ab:
         33:b9:0e:0d:c3:a5:2b:03:e1:1b:be:24:e4:03:a2:73:f7:28:
         9d:63:1d:fb:8e:fb:f7:fe:cf:49:27:05:83:26:30:b8:43:2d:
         32:8d:87:87:cf:9a:d1:1b:16:7b:89:f3:91:72:2d:cd:5a:fd:
         97:cf:c4:01:0d:76:e5:1f:88:94:c1:e9:eb:ad:ed:91:75:bd:
         67:1a:40:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou9Ut/eEnJjrzdmBzLQf2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMTI3NTY2YTVhYzQxZTY2YjRjNzUzN2E2MGZkY2JiZmFi
MzlhMTcwHhcNMjYwMzI2MDYwMTMxWhcNMjYwMzI3MDYwMTMxWjAzMTEwLwYDVQQD
Eyg5ZDY0ODUwYjZkZGI2ZTM0N2FjZmVhNDE5NDU4ZGRkZGQzMTY2NjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijKlDHIHYKj0YFMu6QtH7mfKeqDR
FqKHptvGkBo86/JK54JKZ6b2KzubVNYIoAWFadPC70L7/E1NQBKAiM4dX+n5APzx
sG0BN7OnNYjwSeZWxASpG5zVxsrMmoha3qvyE/tnEsclh5L4i7E848XUAXT+vk0s
TJOud8vZdVGKVLfuw67V2f0qj9iSSRfBdEDfZrRauu/OsmhMsD4SqhNYlZ0t7Iez
lpCTBaFCv1o5855+/hbsUlVM5aG+eqQ66KyNYaQMp6Ozo0VurouVOdjPhR1EXiXh
weipNbLY6tDJswhqRaI04b93C/oCwiJebf5dWMpgHfgRtAynW1LN2WwBIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1khQtt2240es/qQZRY3d3TFmZwMB8GA1UdIwQY
MBaAFAESdWalrEHma0x1N6YP3Lv6s5oXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJKMVpxV3NRZVpyVEhVM3BnX2N1X3F6bWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81MWY3ZjgtMDU5NS00NjU0LTk0M2It
MWJlYWM3NDQwMjYyLzEvQVJKMVpxV3NRZVpyVEhVM3BnX2N1X3F6bWhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81MWY3ZjgtMDU5NS00NjU0LTk0M2ItMWJlYWM3NDQwMjYy
LzEvQVJKMVpxV3NRZVpyVEhVM3BnX2N1X3F6bWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArnTZCJX
1rTl5yFvUBNE8xNXneIflsK8A2EqcU0HvKyNkI5SjJ7ml15qz8y+Pm4C+A182bH8
SyVsZc/iSHPWE3GilLDmGTn6zaNG8ZbPVBEgVM4N6PlYIvti91LZirXLXKeGjacV
N8jlq+eA1/m4nju7yFbErLBkO7Gj3ZOhNJ0UYBTjT9hQuzk+Ecutq78oKHFDSBzO
vIqM7rAUGq5hr5d/qIOEAzPGYkADIk7BsxUyEL6rM7kODcOlKwPhG74k5AOic/co
nWMd+4779/7PSScFgyYwuEMtMo2Hh8+a0RsWe4nzkXItzVr9l8/EAQ125R+IlMHp
663tkXW9ZxpAYw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:02 2026 by rpki-client