Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File:                     ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier:          uzFFSd4fR7WExAjaaQ+vxFxG8kiDn+Clr0njon+FjLw=
Subject key identifier:   5B:FC:0A:FC:4B:C5:8B:06:46:CD:1F:1C:00:72:82:B3:94:84:22:C0
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       019D25842FC03CA6BFCEEEDFA2E962C5BF4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number:          1891
Signing time:             Wed 25 Mar 2026 15:01:53 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:53 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:53 +0000
Files and hashes:         1: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: M6DfC71vj3SGDHVImmWsKmwXNi8NwrILW1PpMTsKZ78=)
                          2: IuQcx1tkT0HIrZq2Ct5qbZGXPy0.asa (hash: Qvuppcz1b5l2wZ5dj946ovG10EvF0+Pn11j9C7AR5FE=)
                          3: cX6Yew-a8YUF7vavg9BTxZRqe_4.roa (hash: 1ueNSCqqvjux7zZZsDYjg0VzkKE8OG5bTf0iOqV0bxA=)
                          4: dLEe-hpFpK3PFRGM9YsgzqZnVVw.roa (hash: A8Gw34BWQlcPCQ8+pvbsJ7XROVKk5nyiB7eyYgFiR4g=)
                          5: io2mF3E9gfP7892mcQBySWcc0wI.roa (hash: s9fn90wE9W/HoEf/IkcbrFOIhL596v/QWK9di592Y8w=)
                          6: vRuoFrWmkK8pTSRrltUuVuGlSfw.asa (hash: jJl2elMZFteUA4c0m26M/kbkufXHKwyn92yjxdg4Cgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:84:2f:c0:3c:a6:bf:ce:ee:df:a2:e9:62:c5:bf:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Mar 25 15:01:53 2026 GMT
            Not After : Mar 26 15:01:53 2026 GMT
        Subject: CN=5bfc0afc4bc58b0646cd1f1c007282b3948422c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f0:20:86:b6:e8:9f:08:db:5a:18:4a:fb:da:
                    8a:cd:ed:2b:b0:f1:a3:fd:64:cf:9e:45:c1:35:a1:
                    66:a8:7e:93:2e:ab:5a:2a:24:1c:a9:f7:50:4b:11:
                    9f:53:02:0d:77:08:a4:28:25:f1:21:6a:43:bc:f4:
                    9f:73:e0:05:5e:74:8e:ca:d7:7c:1c:3e:a0:ba:82:
                    e2:4b:5a:bc:d0:18:4a:25:86:f8:76:d9:63:43:8c:
                    82:07:96:dc:4d:7e:e2:76:bb:c8:40:ae:8a:bf:61:
                    ff:2e:d8:f7:7e:f5:3b:58:99:4a:b6:0a:18:75:4d:
                    27:e9:59:bc:b2:64:f2:a6:fd:62:7f:54:0c:1c:78:
                    83:8f:43:aa:da:53:47:e6:10:86:e0:ff:00:e7:b1:
                    6c:95:57:45:bf:4d:12:9b:7d:c6:2c:65:5f:95:e8:
                    b5:f3:9d:1f:b9:27:56:ae:5e:a5:fe:af:0d:af:13:
                    93:31:cd:39:0f:ee:a4:89:0e:2d:07:47:24:14:9a:
                    ee:48:c0:ba:47:c4:da:81:a1:dd:9d:68:7b:41:cc:
                    83:35:96:5f:be:87:cc:f0:79:6d:67:bd:21:fd:3b:
                    98:5c:c5:09:f4:d6:0a:29:e0:fa:5b:29:62:28:32:
                    4a:bf:08:24:06:6a:fc:0b:b8:8a:6d:38:c1:95:6c:
                    2f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FC:0A:FC:4B:C5:8B:06:46:CD:1F:1C:00:72:82:B3:94:84:22:C0
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:34:f9:c4:6c:ef:c3:c0:27:f4:d5:71:1e:63:72:43:51:be:
         9c:f4:a1:72:c3:0e:7c:23:b8:62:84:38:bf:2f:72:fe:19:75:
         4e:66:4b:09:35:ca:42:a0:75:59:92:52:2d:3e:47:a2:a1:91:
         f1:62:a7:fa:a9:05:a5:e1:38:13:6b:56:bb:af:00:43:30:60:
         db:29:07:2a:9b:85:1f:b6:03:e8:8b:5d:7a:79:f0:bd:d4:df:
         40:20:66:15:fe:45:c3:09:1f:ab:bc:f6:a6:28:41:0d:e5:12:
         dd:91:45:88:54:bf:7c:a8:6c:4d:1d:b2:ba:96:bf:0e:e7:bb:
         0c:f4:b7:7d:59:98:d0:bf:8e:1b:0f:70:06:ee:57:c0:9b:9b:
         b2:22:31:c1:ab:5c:91:fb:58:27:a5:3e:b4:ff:db:4a:d2:38:
         e6:2b:42:14:87:70:43:ba:b4:3b:b1:74:37:66:96:b6:2c:30:
         cc:ca:90:d3:ca:5b:48:08:70:9a:31:fd:7b:ff:87:08:24:e6:
         57:53:88:ff:51:00:d5:bc:36:3d:8a:35:c9:8d:cd:c9:44:47:
         6c:fe:09:ed:32:99:f2:d8:9a:38:dd:33:31:66:09:1d:a7:8c:
         19:93:67:d1:88:e6:23:e3:65:8f:7a:28:c0:b6:38:35:30:00:
         f8:03:d6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:20:33 2026 by rpki-client