Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File:                     ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier:          JuamCnmMpzbZh9v86w964A/IihkkuG+bKm8ckkwRgIg=
Subject key identifier:   AB:86:A1:02:BD:50:C8:37:AE:DD:ED:89:2F:65:5A:0F:F8:41:C4:02
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       0198D4E0634901F7373ADB5429F64AD04096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number:          1653
Signing time:             Sat 23 Aug 2025 03:02:11 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:11 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:11 +0000
Files and hashes:         1: 3jSOaatFzz9swrZhXqD6jHzeDww.roa (hash: tVwdSKcBd6/2MH/mbR0mS1QlYqRRE3gqHsHq5WvFQFw=)
                          2: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: qc9nfhLxCrPcFJCd2jB7J4Ty2h86mEL4B45tJptAIms=)
                          3: FRU7JmHiQ9qcCxvbv5Mja56TjGI.roa (hash: yEAPn24tC508vlRp3YgMW7BQE27LytJYSB6RuOAknPE=)
                          4: OvxdZUL7-yIQWzcFYUnAa1c12II.roa (hash: mxKl5svIy2E+onAWkycoeHXKh2w+Zk+8kzX+IQMshAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:63:49:01:f7:37:3a:db:54:29:f6:4a:d0:40:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Aug 23 03:02:11 2025 GMT
            Not After : Aug 24 03:02:11 2025 GMT
        Subject: CN=ab86a102bd50c837aedded892f655a0ff841c402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d7:fd:c4:e1:f6:fa:42:ac:2d:dd:4f:77:74:
                    80:ef:74:88:d7:dd:28:51:78:f9:ad:28:43:6e:1d:
                    ef:d5:c2:59:e6:01:67:04:8f:68:4c:ae:b0:08:52:
                    6a:f6:95:89:10:73:54:eb:fb:08:36:2d:e4:13:7f:
                    c5:e0:98:66:71:26:ba:e1:96:18:66:e6:1c:88:cd:
                    31:9f:ef:7c:cf:58:f3:a3:a2:e9:00:6d:f6:b3:91:
                    48:e2:67:ee:63:2c:37:86:14:4f:a9:54:2e:3b:80:
                    58:c1:04:7b:c4:14:94:a9:f6:c4:dd:fe:7a:f5:6e:
                    5e:1d:17:20:95:1e:93:7b:52:cb:85:f0:a4:2f:c3:
                    04:55:34:d4:f9:e1:a4:d7:8e:b4:7f:22:fb:3c:b6:
                    da:fc:77:ca:73:4d:38:f6:5f:e2:f3:6b:9e:02:ec:
                    12:3c:85:e9:06:5f:e9:78:f8:f8:01:0d:4e:c7:ea:
                    88:4b:15:4d:ed:d4:59:57:e0:b6:81:2a:f7:98:31:
                    76:97:62:52:3e:05:55:dd:02:10:88:a4:a8:de:f3:
                    71:17:85:3d:9f:37:44:fd:87:4e:11:43:ad:01:10:
                    92:65:07:18:28:f5:23:04:60:e4:18:40:12:36:39:
                    d3:98:e6:34:45:3a:23:7f:62:58:bb:8d:cc:2f:08:
                    a4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:86:A1:02:BD:50:C8:37:AE:DD:ED:89:2F:65:5A:0F:F8:41:C4:02
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d2:b5:72:f3:31:1c:97:5c:00:ca:f4:24:98:25:40:56:cf:
         11:e1:97:a6:b8:ce:21:8f:ed:79:d8:61:56:1e:1e:f3:62:93:
         70:fa:8c:6c:b4:5a:fa:d9:d0:e9:c6:0c:05:17:4c:ea:25:68:
         1f:56:80:07:38:6e:78:16:f0:74:af:8a:aa:2d:58:e1:c4:ee:
         18:cd:59:ef:4b:05:78:c8:10:f6:bb:7f:40:15:57:2a:e7:43:
         c1:17:d7:e5:b5:7b:cd:ad:99:6b:7a:40:c0:a4:2f:3c:2c:89:
         73:94:9c:7f:cf:d1:59:14:ca:42:d7:96:93:82:60:36:7b:00:
         4b:50:5d:3b:2e:24:e3:04:e8:1b:60:56:71:52:3f:9d:ed:1e:
         50:b7:7e:78:aa:98:8c:3a:7f:7b:a6:fc:21:86:d7:c4:91:f1:
         dc:12:ff:63:c4:bf:05:7b:ae:87:87:a5:21:25:9a:05:89:be:
         da:80:b0:5c:01:ca:d7:c6:d2:32:f9:ef:77:e7:94:7a:1a:90:
         7e:a7:7d:52:2a:a5:71:ca:93:bb:c3:79:b7:69:ec:c8:8e:f9:
         9e:5a:e9:21:ef:93:13:2d:12:03:bb:21:b0:d1:a6:51:66:67:
         71:83:51:b5:d7:79:36:b5:49:93:8d:ef:29:8d:ef:2a:68:1c:
         b7:9d:5b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:43 2025 by rpki-client