Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
File:                     ArkWs7LpV9GFAyzbSZl2oA66SXU.mft (raw, json)
Hash identifier:          xWJqvnegi81sHCq21Hs6zB+9XQxARhdTbVstLP/Qk78=
Subject key identifier:   3B:97:89:CF:B9:36:D1:2E:98:82:1C:BB:A9:4C:F2:7A:88:3C:AF:67
Authority key identifier: 02:B9:16:B3:B2:E9:57:D1:85:03:2C:DB:49:99:76:A0:0E:BA:49:75
Certificate issuer:       /CN=02b916b3b2e957d185032cdb499976a00eba4975
Certificate serial:       01A139DBAF20520B52853ACFC676E597A65D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
Manifest number:          03E8
Signing time:             Wed 14 Oct 2026 10:01:00 +0000
Manifest this update:     Wed 14 Oct 2026 10:01:00 +0000
Manifest next update:     Thu 15 Oct 2026 10:01:00 +0000
Files and hashes:         1: ArkWs7LpV9GFAyzbSZl2oA66SXU.crl (hash: 387Hwrs/jcgJBLU86bB7GfgZxtBgOIGwF6NdOT1+H3M=)
                          2: KFxafXhhfLaW-gpG0Qp8xa6PXxk.roa (hash: i+ofv0cbmE9Ws7/+QJMB11kRvt2A2P+Z3BL5lLoxu6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 07:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:39:db:af:20:52:0b:52:85:3a:cf:c6:76:e5:97:a6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b916b3b2e957d185032cdb499976a00eba4975
        Validity
            Not Before: Oct 14 10:01:00 2026 GMT
            Not After : Oct 15 10:01:00 2026 GMT
        Subject: CN=3b9789cfb936d12e98821cbba94cf27a883caf67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:9f:b9:0c:96:11:d3:49:1c:64:07:d3:75:
                    d8:28:bf:d2:fe:37:a3:82:aa:f0:eb:a8:9e:49:97:
                    fb:8f:a6:ce:ab:ce:43:54:25:3b:0a:07:07:79:b9:
                    e5:2a:89:2b:c6:91:29:47:74:76:ff:df:14:40:b1:
                    7c:10:d6:eb:7b:53:2c:05:a5:1b:0f:1f:25:40:d8:
                    c4:06:0f:b9:3a:18:7e:39:1a:d5:ed:0c:e1:4c:76:
                    b8:94:fa:f6:4d:f4:65:5b:aa:af:61:90:12:77:e3:
                    a5:55:31:49:1f:65:cd:6f:97:4f:9e:ce:b6:98:0d:
                    9a:97:06:c0:0e:a8:79:0a:b9:fd:37:a5:18:ce:6d:
                    be:cb:5e:aa:f1:56:4d:17:c9:e6:c1:be:f2:81:8d:
                    76:eb:37:04:d7:1d:21:98:0e:65:26:0c:7a:dd:94:
                    79:d4:e0:02:49:8a:96:5a:6a:ea:e2:35:32:4c:b7:
                    98:aa:9f:1a:27:a6:09:7b:42:f6:63:84:ba:94:3e:
                    c1:73:1a:76:92:3a:b2:28:be:df:1a:87:4e:ef:00:
                    5d:63:36:7f:0e:ba:38:03:2e:fd:6c:8d:1a:06:c8:
                    74:74:3a:c4:83:79:8c:71:a3:d9:6c:9a:8a:30:65:
                    a3:00:5b:ee:0f:a9:3d:74:68:2f:69:71:a9:94:70:
                    b8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:97:89:CF:B9:36:D1:2E:98:82:1C:BB:A9:4C:F2:7A:88:3C:AF:67
            X509v3 Authority Key Identifier:
                keyid:02:B9:16:B3:B2:E9:57:D1:85:03:2C:DB:49:99:76:A0:0E:BA:49:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:3b:e0:ae:d9:62:5e:ee:ba:de:c0:85:24:90:dd:50:97:dc:
         6d:90:7d:8d:a6:ea:27:c4:29:cd:92:bd:0c:9e:bc:b5:31:ad:
         ef:38:b1:9a:01:47:f4:e0:5c:b8:8b:06:c0:f3:16:0e:c2:2e:
         c5:c8:5c:3d:06:25:b7:7d:67:4b:17:a9:2e:2c:e0:10:c8:73:
         08:63:f5:d5:ed:3c:9b:e0:cf:a3:73:03:bc:6a:8d:f0:e9:eb:
         68:60:f7:4c:4b:4b:f9:32:39:ce:b6:8c:30:48:13:71:26:66:
         95:ef:30:bf:86:b0:97:83:24:4b:31:26:e2:9e:32:5c:16:10:
         b9:85:a9:4d:25:4d:d5:6e:96:40:bf:d8:9e:b9:2f:48:5a:d0:
         d7:9e:8b:fd:3b:cd:a9:b5:d3:82:4e:8c:7f:28:b1:bc:2a:1d:
         e9:1e:bf:f6:cb:67:29:47:a9:97:1c:db:9c:16:79:a1:18:e3:
         01:fa:da:25:7f:72:08:aa:69:e8:8e:af:6e:4f:90:bb:b1:84:
         71:c2:fa:7f:17:23:bd:3b:9d:35:b1:6c:80:12:04:65:0c:f8:
         10:53:cb:1a:32:47:7a:58:1a:83:9f:95:dd:8d:49:16:df:1a:
         88:4a:c5:55:11:64:84:f5:62:cb:93:4c:1b:b1:36:c9:f6:ec:
         df:40:7c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:46:41 2026 by rpki-client