Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File:                     ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier:          ntzO2s1lt8WHnU0CWObSrvU0Tca0K3s8FLxWPGesg4U=
Subject key identifier:   68:60:AF:F9:BC:D1:3A:17:7C:59:24:B2:22:F1:DD:E8:DD:34:01:B5
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       0199FC58A000D1396451977940280CABE02D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number:          16EC
Signing time:             Sun 19 Oct 2025 12:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:30 +0000
Files and hashes:         1: 3jSOaatFzz9swrZhXqD6jHzeDww.roa (hash: tVwdSKcBd6/2MH/mbR0mS1QlYqRRE3gqHsHq5WvFQFw=)
                          2: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: I6kOeBqAWsYUlnsBopekfRfRGl6BV9wv+Tmh9N0eTPY=)
                          3: FRU7JmHiQ9qcCxvbv5Mja56TjGI.roa (hash: yEAPn24tC508vlRp3YgMW7BQE27LytJYSB6RuOAknPE=)
                          4: OvxdZUL7-yIQWzcFYUnAa1c12II.roa (hash: mxKl5svIy2E+onAWkycoeHXKh2w+Zk+8kzX+IQMshAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:a0:00:d1:39:64:51:97:79:40:28:0c:ab:e0:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Oct 19 12:01:30 2025 GMT
            Not After : Oct 20 12:01:30 2025 GMT
        Subject: CN=6860aff9bcd13a177c5924b222f1dde8dd3401b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e0:d1:55:69:22:90:08:2c:20:05:ad:e9:e0:
                    e2:21:16:de:37:a5:fd:06:09:b7:7d:c7:2d:ad:6a:
                    dc:3c:b3:8e:b5:fe:ed:44:89:74:4b:ad:61:b7:55:
                    24:91:1e:90:2f:11:ad:df:80:f5:5f:a0:b5:70:f8:
                    cd:64:d5:c4:cc:bd:cb:a7:19:91:c8:2f:9b:37:70:
                    f2:e6:68:05:97:9d:01:af:04:b9:36:17:f7:cd:c2:
                    ad:31:7e:ac:11:75:a7:0d:9a:2b:8d:65:a9:03:2f:
                    05:ea:12:f0:17:76:1b:09:30:09:3d:9e:1d:ec:8b:
                    61:b6:5c:b7:ed:d7:c6:ca:25:02:70:4c:85:10:f4:
                    6a:51:0c:78:9a:ce:00:b6:54:cf:2b:14:56:8a:9a:
                    84:59:17:df:44:e5:55:fe:d6:43:25:f3:88:c1:c4:
                    5f:13:ff:95:2d:aa:ce:a1:31:b9:a9:18:29:27:89:
                    45:de:2d:3f:3a:66:a9:21:fb:38:72:fd:f3:10:db:
                    96:e2:0c:ce:4d:5f:10:a1:19:e2:5c:40:d1:85:09:
                    17:bd:ca:17:07:a0:62:56:df:b5:2b:37:4a:ed:1f:
                    69:fd:4c:ce:17:ae:89:cc:a2:45:f2:16:24:9b:d0:
                    82:80:d0:85:7a:8d:b7:3f:1b:cd:d2:b2:10:43:aa:
                    7e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:60:AF:F9:BC:D1:3A:17:7C:59:24:B2:22:F1:DD:E8:DD:34:01:B5
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:69:d0:46:8d:62:0c:5c:2a:91:1e:4f:bd:16:1b:5c:2d:c9:
         77:a7:2c:c2:5c:a9:e1:80:5f:1b:18:86:50:2e:98:b4:28:b0:
         9f:b9:c0:0f:ba:58:2f:37:04:c8:74:11:5c:e3:cd:c5:bd:69:
         e9:17:56:fb:50:ff:83:39:9a:b6:f2:a8:71:a5:96:70:ed:96:
         ed:64:d5:d8:76:e3:98:c2:ee:89:59:c8:2e:f9:68:87:ce:07:
         bb:e2:c1:2c:b7:b4:53:b8:e9:46:7c:db:75:92:e4:86:cb:45:
         92:17:3b:4b:8e:38:02:af:2f:81:dc:6b:d1:a5:95:68:b3:97:
         78:8e:ce:7b:d2:6a:be:d6:73:6a:45:fa:0d:a5:03:29:de:b9:
         8c:e5:e8:3a:ed:77:cf:ba:c1:cc:ab:f4:e9:8c:a3:73:39:8d:
         3f:85:31:b9:7f:a9:a2:82:d3:f0:d3:8f:93:af:11:6f:5f:28:
         1e:28:35:04:96:6f:0e:d1:49:5b:c9:94:04:da:7b:79:63:77:
         b5:9c:42:28:23:e1:25:61:c9:cc:68:df:85:a5:c9:d6:e9:ae:
         e7:b6:52:e0:72:50:d7:69:22:7c:06:12:06:c4:37:20:ac:b2:
         7f:05:9c:1e:49:e0:f7:3b:bd:92:9c:51:91:5c:b7:62:9e:70:
         ad:7c:c0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:23:22 2025 by rpki-client