Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
File:                     ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json)
Hash identifier:          sVtSBA7yfi5l56k/UhcgN6P9rHYN2w2ZOb8sJyfybEQ=
Subject key identifier:   36:B0:FF:60:6B:05:AE:6B:3E:FC:33:AE:79:73:9F:65:AD:A7:F8:18
Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Certificate issuer:       /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Certificate serial:       019E1FEC9578E6598E358CB16C01A59D91F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
Manifest number:          153E
Signing time:             Wed 13 May 2026 06:00:58 +0000
Manifest this update:     Wed 13 May 2026 06:00:58 +0000
Manifest next update:     Thu 14 May 2026 06:00:58 +0000
Files and hashes:         1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: jyYHjiyJCjnsK9MtZBH17r/Bv5XYzHqMP+DrwxKjJtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:95:78:e6:59:8e:35:8c:b1:6c:01:a5:9d:91:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
        Validity
            Not Before: May 13 06:00:58 2026 GMT
            Not After : May 14 06:00:58 2026 GMT
        Subject: CN=36b0ff606b05ae6b3efc33ae79739f65ada7f818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d3:9a:fa:48:4f:75:81:4a:3e:b6:61:85:0a:
                    48:a3:c8:c2:dc:0c:ac:3f:e2:7b:fc:61:5c:0c:42:
                    30:f2:68:0a:b7:10:71:1e:52:43:6f:72:78:66:e2:
                    32:c0:f2:5e:4a:66:1a:0f:dc:6e:71:be:19:5f:02:
                    3d:66:26:56:f9:c9:c9:37:4d:9e:7d:82:56:eb:cc:
                    97:19:9c:ed:6f:9b:3d:ea:04:8b:53:c1:36:f5:9e:
                    5d:8f:ab:52:83:bb:53:f3:97:e9:f2:a9:82:32:ec:
                    b3:da:0a:c0:b1:85:45:79:c3:bb:e5:88:3a:d7:75:
                    96:57:98:c7:96:37:4c:87:25:3d:93:3d:6d:8f:c9:
                    9f:d9:a3:a6:02:3a:52:f0:a5:be:87:17:2c:35:0c:
                    31:8d:d0:1b:18:6d:1a:18:41:59:64:82:7c:e5:cc:
                    fc:8f:dd:23:49:8a:a0:a8:ba:9e:f2:08:b7:0a:2f:
                    67:94:4f:fc:cf:7c:f4:23:ce:ff:29:84:f2:cc:fc:
                    93:56:a7:68:53:97:87:87:12:6d:ac:76:db:bd:da:
                    32:b8:ed:9c:84:5e:8a:06:19:4d:0c:c8:33:b6:9f:
                    2c:cd:72:e0:13:2c:d0:62:8f:4c:df:0b:a5:3b:7f:
                    03:d3:d3:42:35:68:f4:89:da:06:2a:45:90:8a:d1:
                    01:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B0:FF:60:6B:05:AE:6B:3E:FC:33:AE:79:73:9F:65:AD:A7:F8:18
            X509v3 Authority Key Identifier:
                keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e4:57:5b:bf:c9:ff:3f:ab:2c:9a:28:a5:a0:59:ad:62:a6:
         9d:38:cf:71:99:13:1a:54:59:2b:bf:eb:04:19:77:bc:4e:eb:
         12:ce:f0:8e:90:b1:b8:fa:bd:42:74:4f:31:94:fa:5d:bf:ff:
         0f:a3:b7:b4:cd:f6:91:ba:e4:1d:a8:39:28:2f:e2:8a:79:1d:
         bf:af:80:75:6b:d9:91:4e:85:48:8f:30:40:d8:f4:58:9a:d4:
         18:d1:8f:18:18:65:6c:cb:0d:93:0d:31:8e:f1:ef:85:36:79:
         a2:1a:3f:d0:29:d7:ea:20:87:48:79:12:22:3d:5f:fe:eb:37:
         f8:77:5a:d7:2b:6e:7b:13:56:1f:a1:13:04:7e:d2:b8:0f:0b:
         c1:fc:cf:5c:79:23:a7:6a:40:e0:23:09:46:bf:59:3b:4e:65:
         c1:27:9f:f1:6e:2a:7f:2c:de:12:3b:16:16:8a:eb:61:95:cd:
         a4:8a:3c:d6:70:9b:fd:e4:c1:ed:ee:2b:3a:a2:e2:89:7c:86:
         93:6d:03:c7:ad:de:73:24:60:0c:5a:f1:99:94:e7:bf:06:2a:
         aa:db:b3:5c:3a:2c:32:d5:e9:7e:44:0f:ca:92:96:21:1b:6c:
         d9:6f:ce:b9:a0:50:a8:ad:a8:3a:b1:c6:51:a3:13:49:0c:49:
         47:8a:68:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7JV45lmONYyxbAGlnZH4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMTQ2M2ZmOTljMjRjMDkzN2E0MDY1ZDFmY2NmZWI5MDhm
YzNhZDIwHhcNMjYwNTEzMDYwMDU4WhcNMjYwNTE0MDYwMDU4WjAzMTEwLwYDVQQD
EygzNmIwZmY2MDZiMDVhZTZiM2VmYzMzYWU3OTczOWY2NWFkYTdmODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9Oa+khPdYFKPrZhhQpIo8jC3Ays
P+J7/GFcDEIw8mgKtxBxHlJDb3J4ZuIywPJeSmYaD9xucb4ZXwI9ZiZW+cnJN02e
fYJW68yXGZztb5s96gSLU8E29Z5dj6tSg7tT85fp8qmCMuyz2grAsYVFecO75Yg6
13WWV5jHljdMhyU9kz1tj8mf2aOmAjpS8KW+hxcsNQwxjdAbGG0aGEFZZIJ85cz8
j90jSYqgqLqe8gi3Ci9nlE/8z3z0I87/KYTyzPyTVqdoU5eHhxJtrHbbvdoyuO2c
hF6KBhlNDMgztp8szXLgEyzQYo9M3wulO38D09NCNWj0idoGKkWQitEBgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaw/2BrBa5rPvwzrnlzn2Wtp/gYMB8GA1UdIwQY
MBaAFAEUY/+ZwkwJN6QGXR/M/rkI/DrSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yNDAwMjQtZjQzMy00MjQxLWI0MGQt
ZDFlODRjZmE0NzhmLzEvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yNDAwMjQtZjQzMy00MjQxLWI0MGQtZDFlODRjZmE0Nzhm
LzEvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+RXW7/J
/z+rLJoopaBZrWKmnTjPcZkTGlRZK7/rBBl3vE7rEs7wjpCxuPq9QnRPMZT6Xb//
D6O3tM32kbrkHag5KC/iinkdv6+AdWvZkU6FSI8wQNj0WJrUGNGPGBhlbMsNkw0x
jvHvhTZ5oho/0CnX6iCHSHkSIj1f/us3+Hda1ytuexNWH6ETBH7SuA8LwfzPXHkj
p2pA4CMJRr9ZO05lwSef8W4qfyzeEjsWForrYZXNpIo81nCb/eTB7e4rOqLiiXyG
k20Dx63ecyRgDFrxmZTnvwYqqtuzXDosMtXpfkQPypKWIRts2W/OuaBQqK2oOrHG
UaMTSQxJR4polg==
-----END CERTIFICATE-----
Generated at Wed May 13 10:04:47 2026 by rpki-client