Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File:                     ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier:          hfXsjHGOq1jy5IXTC1s+xVCzur+Dvpf45ixmRVXBClo=
Subject key identifier:   22:C2:9B:86:80:6F:9F:1D:6F:6E:29:7E:BF:CA:30:D6:39:63:8A:65
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       01A0CC35BB20872344C70C12D93ADB0F0AE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number:          1A77
Signing time:             Wed 23 Sep 2026 03:01:08 +0000
Manifest this update:     Wed 23 Sep 2026 03:01:08 +0000
Manifest next update:     Thu 24 Sep 2026 03:01:08 +0000
Files and hashes:         1: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: EHwhEkqxunGWbR4gQ/2h2lPRMao+sKoOdiUMtCtXT9g=)
                          2: IuQcx1tkT0HIrZq2Ct5qbZGXPy0.asa (hash: Qvuppcz1b5l2wZ5dj946ovG10EvF0+Pn11j9C7AR5FE=)
                          3: c-HjLKQSxtnvzyWLH_611ObuEAY.roa (hash: H839FL+6ufvkO1eladY3YPL4NNkFY7naVOP/ppVVcpg=)
                          4: d5hkQM3Vfcjs0TJWq46rHlNRylQ.roa (hash: 580hC/g7jAmf5qnSe5kqGVmdVRqVfvipXlRmFzU43Q8=)
                          5: io2mF3E9gfP7892mcQBySWcc0wI.roa (hash: s9fn90wE9W/HoEf/IkcbrFOIhL596v/QWK9di592Y8w=)
                          6: kf1_5a2TKMAsoCwowW0onw8sawo.asa (hash: 9jOdBjSe6jFQ5u7ETAx7zycjGxRDiEYkp6J4VjAhNZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:bb:20:87:23:44:c7:0c:12:d9:3a:db:0f:0a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Sep 23 03:01:08 2026 GMT
            Not After : Sep 24 03:01:08 2026 GMT
        Subject: CN=22c29b86806f9f1d6f6e297ebfca30d639638a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:df:a6:7d:5b:98:a1:38:d7:b3:15:25:ac:40:
                    15:18:98:c8:42:5b:f8:27:29:d7:04:12:72:02:6d:
                    04:89:f8:7d:9f:df:31:e3:d7:22:07:25:98:b6:bb:
                    5b:bf:6a:ab:82:31:67:87:71:91:95:cb:72:47:92:
                    11:15:bb:14:8a:43:4a:36:c7:e2:cd:64:e9:d0:e4:
                    71:62:00:43:0c:e5:b7:2a:72:1d:b9:a4:7e:3b:6e:
                    f8:06:72:9d:61:5e:05:56:b3:d3:3e:e0:ed:40:b8:
                    71:3c:3b:7b:db:f4:ba:b4:65:b7:5d:14:d2:3f:0f:
                    0a:3f:3e:c1:a8:39:4f:28:26:b8:f4:a5:f0:c9:eb:
                    35:76:58:41:d4:99:5a:17:cd:26:82:3c:c9:5c:ed:
                    05:ad:a1:d6:cc:53:49:3c:27:1e:ae:8a:a6:6b:1f:
                    73:50:be:f0:32:9c:4e:ca:2c:f4:e5:3d:f0:8f:db:
                    44:18:83:d8:02:86:a5:ff:5f:1c:3a:bf:52:94:b0:
                    47:14:9a:c3:1c:dc:f5:4f:71:c8:96:50:2d:c6:9a:
                    e4:72:ac:63:e9:f9:df:a1:96:fc:75:07:29:3f:05:
                    b0:2f:8e:f0:e1:a4:69:92:d0:c6:12:24:d6:ce:ed:
                    36:b0:fa:a5:c3:80:39:75:90:d4:38:45:24:1e:11:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C2:9B:86:80:6F:9F:1D:6F:6E:29:7E:BF:CA:30:D6:39:63:8A:65
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f6:a1:2b:39:39:85:02:8b:a1:1c:f6:fe:10:f7:ae:5b:12:
         1f:4e:69:85:69:0e:6c:96:33:ed:1b:99:a4:6a:ec:e9:0d:fc:
         07:98:2a:03:88:c9:10:0c:30:f9:1d:c7:d4:b7:09:b9:d4:42:
         d7:38:73:c5:99:f7:1c:87:74:a8:ad:67:62:15:89:02:5f:bb:
         80:c7:52:0f:5d:a4:b6:8a:94:b9:a2:61:1e:9b:61:3a:5c:b4:
         7e:95:6d:29:52:8c:b2:bc:4f:d9:3a:cc:dc:29:1a:4a:12:f0:
         60:e0:7a:38:79:5d:94:bb:e1:e7:e4:0b:5b:57:d8:0e:5d:55:
         84:df:ff:18:a7:0f:55:e3:c1:65:90:e9:b7:d7:c7:ea:8f:a1:
         29:9f:06:fa:0e:e1:60:a5:0a:37:31:01:9e:d7:f1:92:d0:3b:
         36:46:37:21:57:48:42:32:fc:73:84:04:e5:45:b4:3c:cb:fd:
         2b:e1:2c:f3:b5:b8:20:a4:48:36:23:ed:99:ad:33:cd:fc:8a:
         e3:55:53:e3:c1:99:c3:66:fb:56:30:23:49:b2:77:0f:d7:c7:
         bf:d7:ed:93:b3:fa:5a:b8:d3:06:cb:de:67:05:e1:08:b7:3c:
         6f:5a:a9:d9:1f:29:29:c0:d7:ed:ba:41:60:84:71:d6:d1:bb:
         0a:19:8c:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMNbsghyNExwwS2TrbDwrhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYjYxMGNkNDNiYWZjZWQ5MTQ4MGZhYmZkY2FhZTgyMDQ5
ZmJmNzEwHhcNMjYwOTIzMDMwMTA4WhcNMjYwOTI0MDMwMTA4WjAzMTEwLwYDVQQD
EygyMmMyOWI4NjgwNmY5ZjFkNmY2ZTI5N2ViZmNhMzBkNjM5NjM4YTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39+mfVuYoTjXsxUlrEAVGJjIQlv4
JynXBBJyAm0Eifh9n98x49ciByWYtrtbv2qrgjFnh3GRlctyR5IRFbsUikNKNsfi
zWTp0ORxYgBDDOW3KnIduaR+O274BnKdYV4FVrPTPuDtQLhxPDt72/S6tGW3XRTS
Pw8KPz7BqDlPKCa49KXwyes1dlhB1JlaF80mgjzJXO0FraHWzFNJPCceroqmax9z
UL7wMpxOyiz05T3wj9tEGIPYAoal/18cOr9SlLBHFJrDHNz1T3HIllAtxprkcqxj
6fnfoZb8dQcpPwWwL47w4aRpktDGEiTWzu02sPqlw4A5dZDUOEUkHhEyeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLCm4aAb58db24pfr/KMNY5Y4plMB8GA1UdIwQY
MBaAFAK2EM1DuvztkUgPq/3KroIEn79xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lM2RlY2MtM2VmNy00Y2IyLTgxZDEt
OTAxM2NhOTk2YjE2LzEvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lM2RlY2MtM2VmNy00Y2IyLTgxZDEtOTAxM2NhOTk2YjE2
LzEvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavahKzk5
hQKLoRz2/hD3rlsSH05phWkObJYz7RuZpGrs6Q38B5gqA4jJEAww+R3H1LcJudRC
1zhzxZn3HId0qK1nYhWJAl+7gMdSD12ktoqUuaJhHpthOly0fpVtKVKMsrxP2TrM
3CkaShLwYOB6OHldlLvh5+QLW1fYDl1VhN//GKcPVePBZZDpt9fH6o+hKZ8G+g7h
YKUKNzEBntfxktA7NkY3IVdIQjL8c4QE5UW0PMv9K+Es87W4IKRINiPtma0zzfyK
41VT48GZw2b7VjAjSbJ3D9fHv9ftk7P6WrjTBsveZwXhCLc8b1qp2R8pKcDX7bpB
YIRx1tG7ChmMfw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:13:13 2026 by rpki-client