Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft
File:                     ArVih4aW5ig8TfgUo4tzXFAMr4s.mft (raw, json)
Hash identifier:          fZhUK7zyFX5lKQIDN39aB9j8Puu/mzibx+nGY/yYIt8=
Subject key identifier:   48:9A:F8:C2:C2:7B:05:FE:BE:86:82:5A:26:1C:8A:A5:FF:1D:41:84
Authority key identifier: 02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B
Certificate issuer:       /CN=02b562878696e6283c4df814a38b735c500caf8b
Certificate serial:       0198D4A845F6875676920282925780D09AA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft
Manifest number:          24
Signing time:             Sat 23 Aug 2025 02:00:54 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:54 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:54 +0000
Files and hashes:         1: ArVih4aW5ig8TfgUo4tzXFAMr4s.crl (hash: zPnI+XHsX4pJnBlLVO4K8bN86xb17V1CNlI94+tHZBE=)
                          2: CqyAVWGwUYFXk3xLCbAbOd-2w64.roa (hash: 9le//z+aFU9uWnp3Sn0UvoQZVhblLhWFcW8v/Wf8MNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:45:f6:87:56:76:92:02:82:92:57:80:d0:9a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b562878696e6283c4df814a38b735c500caf8b
        Validity
            Not Before: Aug 23 02:00:54 2025 GMT
            Not After : Aug 24 02:00:54 2025 GMT
        Subject: CN=489af8c2c27b05febe86825a261c8aa5ff1d4184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8d:ea:fd:19:4c:35:d8:1b:98:9a:19:e5:9b:
                    b4:48:59:f6:84:72:6d:1d:67:87:a5:c1:95:d3:6c:
                    ad:83:30:d1:ce:3b:6f:d6:65:68:2e:cc:78:ea:0f:
                    df:26:62:52:73:a5:11:62:df:6a:1a:47:f5:47:79:
                    9e:db:3f:54:39:24:18:04:1d:d8:42:fb:e1:fb:02:
                    37:c6:dd:d5:4d:1f:61:45:1d:f1:c3:5c:e1:92:f5:
                    38:f0:43:28:b1:54:7c:02:21:91:08:a5:78:6a:91:
                    7c:ee:db:13:dd:9f:6d:6d:36:d1:b1:34:c2:20:95:
                    25:c0:43:59:7b:1f:81:0b:95:6d:f2:77:5b:22:90:
                    07:c8:91:07:da:66:2c:62:16:c5:bd:f7:0d:79:63:
                    11:32:8d:e8:7b:d6:09:4f:9f:11:68:70:7c:10:42:
                    3c:57:b2:31:20:f8:8f:05:8b:31:b7:9f:bf:2a:62:
                    28:3e:ad:c7:44:cc:23:a7:80:7e:63:11:70:bb:10:
                    37:92:b3:c2:1f:86:d1:df:b2:18:ec:90:10:c3:f0:
                    49:87:d6:d7:f2:f2:24:b6:6e:2a:e9:09:28:86:01:
                    a2:8d:b2:05:fe:28:31:ab:d6:dc:d4:56:5d:ab:eb:
                    bd:fc:2e:14:3a:22:a2:47:f8:81:93:9b:ae:5f:87:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9A:F8:C2:C2:7B:05:FE:BE:86:82:5A:26:1C:8A:A5:FF:1D:41:84
            X509v3 Authority Key Identifier:
                keyid:02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e9:40:da:4e:75:23:42:16:bd:19:0e:73:2e:5e:35:6f:80:
         02:19:86:0a:01:6a:a3:b5:df:b3:a3:b1:67:fd:33:af:11:09:
         cd:f4:9c:43:89:b4:28:2f:3d:26:9c:0a:fc:d8:8b:3c:fa:e6:
         33:d8:40:8e:a9:db:35:81:23:76:f3:33:b0:38:86:01:b3:12:
         22:3e:dd:9c:82:82:ba:39:d1:fe:a0:36:9e:30:ff:f5:3f:ee:
         f1:82:96:de:f2:97:03:48:80:70:46:f2:1d:66:27:49:bc:46:
         a8:32:18:c6:56:eb:87:c4:f8:8f:4e:a2:5d:d8:f1:00:1d:17:
         37:3b:5e:a4:cc:4d:67:63:97:5e:07:3b:cb:62:37:c1:f4:1b:
         03:68:68:12:21:5d:54:d2:25:c5:2a:f4:4a:b6:63:2c:ca:8e:
         e6:1b:e9:c5:0b:f4:5b:bd:8b:a7:e9:9b:61:fa:d3:37:dc:25:
         bf:22:99:d3:3f:b3:28:b0:1e:15:bb:34:d4:f4:e6:17:7d:5e:
         22:e8:bd:4c:b5:77:dd:85:2e:1c:2b:3f:5e:1a:14:20:e9:59:
         22:9b:31:35:d8:ee:32:90:7c:d7:f9:c8:7c:29:63:98:14:5e:
         92:08:42:04:23:ce:28:07:94:d0:c7:01:82:98:7e:4c:17:02:
         ec:98:2e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:11 2025 by rpki-client