Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
File:                     ArkWs7LpV9GFAyzbSZl2oA66SXU.mft (raw, json)
Hash identifier:          mjYcYlOPNedXEt0KwUOmrCe1sKx2Rxrqdw3+MTdDW5E=
Subject key identifier:   FE:5D:AD:9B:D9:CC:23:40:41:E8:6B:D9:63:62:64:9C:A8:93:23:91
Authority key identifier: 02:B9:16:B3:B2:E9:57:D1:85:03:2C:DB:49:99:76:A0:0E:BA:49:75
Certificate issuer:       /CN=02b916b3b2e957d185032cdb499976a00eba4975
Certificate serial:       019F92ECD23B60FB191020E672BA90F4CCB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
Manifest number:          030D
Signing time:             Fri 24 Jul 2026 07:00:21 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:21 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:21 +0000
Files and hashes:         1: ArkWs7LpV9GFAyzbSZl2oA66SXU.crl (hash: K0E2IopnUs4ZynJvV8W4mVLSlNVKgm2DqWbQLeUHi9o=)
                          2: KFxafXhhfLaW-gpG0Qp8xa6PXxk.roa (hash: i+ofv0cbmE9Ws7/+QJMB11kRvt2A2P+Z3BL5lLoxu6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ec:d2:3b:60:fb:19:10:20:e6:72:ba:90:f4:cc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b916b3b2e957d185032cdb499976a00eba4975
        Validity
            Not Before: Jul 24 07:00:21 2026 GMT
            Not After : Jul 25 07:00:21 2026 GMT
        Subject: CN=fe5dad9bd9cc234041e86bd96362649ca8932391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:34:d6:38:d9:2c:9d:86:e2:06:19:79:f9:d4:
                    c7:a1:d3:97:93:06:5a:ea:22:bf:4e:f8:50:d1:4f:
                    8d:f2:68:f1:90:d0:55:ba:c0:42:21:05:ad:bc:6e:
                    2d:dc:e2:3e:78:03:63:8e:f3:56:2a:81:5e:72:71:
                    f4:09:51:bd:7f:e6:76:81:74:dc:d7:67:50:cb:c0:
                    8b:64:76:eb:74:2d:9a:98:a4:8f:36:9e:80:5a:40:
                    b5:05:f6:41:32:77:a5:29:a9:b0:a9:96:2a:c6:2b:
                    e1:37:0a:dd:f4:54:69:03:49:9e:5e:83:7e:1f:2b:
                    23:1d:b5:ad:df:ef:39:6b:6d:d1:47:07:1c:e1:13:
                    88:22:25:15:ad:7d:a2:8a:10:ef:5d:c2:94:39:d2:
                    d7:33:08:b3:a5:94:e7:31:4e:47:a8:10:d0:60:b9:
                    5f:0e:d0:20:b3:ef:b3:43:55:a7:88:c0:eb:24:ac:
                    da:3a:5e:99:b9:17:ae:2c:6a:7b:75:22:2e:dd:b3:
                    e9:2e:80:8f:ef:91:70:60:09:e0:a8:d2:74:0e:0b:
                    b7:06:c3:f4:66:a5:49:bf:06:d1:67:45:b5:7f:26:
                    78:58:95:c2:df:d8:9f:03:e5:2d:21:30:ca:ea:48:
                    cb:db:50:ea:89:45:67:9f:a0:83:81:c1:f8:d5:b7:
                    a5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5D:AD:9B:D9:CC:23:40:41:E8:6B:D9:63:62:64:9C:A8:93:23:91
            X509v3 Authority Key Identifier:
                keyid:02:B9:16:B3:B2:E9:57:D1:85:03:2C:DB:49:99:76:A0:0E:BA:49:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b6:3f:c4:b1:23:99:e9:c7:71:86:ae:a3:a0:7d:bf:95:d5:
         d0:8c:ca:62:20:7a:41:7d:01:3f:bd:61:c7:58:e9:5e:4c:87:
         3e:ac:6f:83:12:07:4f:9f:5b:77:19:a9:77:bc:31:d1:79:c5:
         24:57:cf:92:0d:5b:ed:a0:0e:97:99:1e:43:51:e0:2d:06:ec:
         41:ef:d4:1c:1d:97:51:17:ef:6c:92:ff:69:0b:7f:28:1e:44:
         53:71:2b:4a:2f:27:b1:89:31:50:7f:57:cb:53:86:41:04:36:
         95:b7:a5:0f:98:31:3d:d2:7a:ea:21:ac:ff:16:1b:64:e3:0c:
         70:1e:1d:7e:56:05:8a:75:00:c8:79:bb:8e:eb:5f:ce:b1:33:
         d0:dc:95:7b:59:5e:33:26:96:aa:8a:81:5c:96:db:9a:8a:2c:
         ff:66:69:ea:d8:ae:e1:38:c6:18:0c:86:c3:74:de:c7:d9:c1:
         2a:6f:cb:3f:8b:3e:45:74:51:91:bf:3a:4f:45:8d:99:b7:38:
         35:fe:1d:71:6e:98:27:00:29:4a:6d:11:e2:86:88:77:56:31:
         9b:8f:d9:7b:f4:5f:b9:5c:de:2b:73:5e:7a:f4:22:38:11:65:
         a7:49:21:77:36:a9:23:55:ae:ed:30:db:93:e9:98:1c:8b:a1:
         0f:47:b8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:23:36 2026 by rpki-client