Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
File:                     1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft (raw, json)
Hash identifier:          ksALsn/JEYGahv78TtjaIzwAmMoOGfsXq7WHNdajmKU=
Subject key identifier:   2C:06:99:B1:D5:DE:6A:7D:F5:86:2E:36:89:CA:86:D5:CF:67:80:19
Authority key identifier: F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21
Certificate issuer:       /CN=f80aef4640437f2307f79871bfb632bb8bddad21
Certificate serial:       0198D583C763B81050EF1AF7669ADC9287F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
Manifest number:          0139
Signing time:             Sat 23 Aug 2025 06:00:39 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:39 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:39 +0000
Files and hashes:         1: 1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl (hash: o6mUmkFyXo5Ea3OqrVuZHV1kbPp9mA2RorenvHvo07I=)
                          2: cSU3uumNlLN8Of6e212G9P0zAJw.roa (hash: kzDk6Ttjden5ir/EuoOlXFG1vxnRI9Xpd+xXHRFPFcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:c7:63:b8:10:50:ef:1a:f7:66:9a:dc:92:87:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80aef4640437f2307f79871bfb632bb8bddad21
        Validity
            Not Before: Aug 23 06:00:39 2025 GMT
            Not After : Aug 24 06:00:39 2025 GMT
        Subject: CN=2c0699b1d5de6a7df5862e3689ca86d5cf678019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:40:7a:b6:94:8c:09:88:84:d6:d5:89:02:90:
                    32:05:cc:a9:b4:7d:38:53:38:5a:b0:ce:29:10:77:
                    b9:4e:df:7f:e3:2a:42:cb:00:c8:5a:32:c4:fd:8e:
                    5c:12:5d:03:60:b0:2d:d3:08:f8:82:b9:8e:2f:e0:
                    82:a5:50:17:be:1e:85:bf:b1:58:76:82:4c:61:a9:
                    9d:d9:7d:c1:d7:ff:9c:9c:93:41:3b:90:71:fb:9e:
                    b2:59:12:72:f5:7f:cf:3d:31:0b:67:65:e1:8b:ca:
                    c1:81:25:8e:b5:ed:dd:22:64:fc:a5:b4:26:13:87:
                    3e:20:1c:54:fd:c5:eb:cd:d2:9d:4f:51:f1:3d:1b:
                    22:7d:61:ed:e6:d1:bf:9d:f2:a2:2d:63:d7:f5:f2:
                    ce:1e:ff:28:d0:e1:78:e3:1c:3d:d8:d6:2e:fa:4a:
                    b1:3c:6f:a7:c7:b0:eb:c1:ae:0e:9d:d0:d1:2f:e1:
                    a1:57:21:90:52:d7:28:c6:34:b4:63:ea:e7:db:e2:
                    9f:39:98:ad:2a:cc:d9:82:cc:5d:7c:c3:54:ba:97:
                    e8:cb:01:0e:83:c1:44:fd:1c:65:03:42:99:38:4b:
                    69:9e:6d:69:ae:06:c1:e8:c5:92:21:96:52:1f:08:
                    0a:6e:ef:54:56:ea:ca:3b:3f:86:9e:5f:ef:6c:aa:
                    e5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:06:99:B1:D5:DE:6A:7D:F5:86:2E:36:89:CA:86:D5:CF:67:80:19
            X509v3 Authority Key Identifier:
                keyid:F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:de:29:40:b6:d1:f6:f4:21:9a:50:f3:64:cf:84:e5:b6:d7:
         cd:39:e0:62:cf:aa:55:5d:33:ce:62:f3:e5:b1:b6:c9:e6:b3:
         b8:37:74:af:1f:31:7b:2d:ac:66:9f:73:15:41:87:8b:59:dd:
         51:e6:0d:0f:ab:0a:ba:c8:4b:51:75:27:cc:b0:f4:1b:61:4a:
         d8:47:ab:06:db:a6:ba:a1:7a:42:f9:57:67:e2:cf:01:4d:df:
         29:42:77:bb:2f:c0:90:75:f4:50:ff:e1:b6:a0:24:9a:a1:19:
         59:d8:39:48:7b:e6:b2:7c:20:db:cd:2f:c3:f8:5b:01:37:a8:
         2b:38:bd:d1:cb:a5:30:c6:2c:b5:71:06:d6:f3:0b:9a:0f:01:
         25:f8:bd:eb:a7:69:b9:3c:c8:89:91:ca:e8:5b:6c:f9:55:02:
         b8:a4:31:de:9a:6d:ae:67:fc:48:a4:35:57:90:b2:5a:d5:f2:
         c5:e7:10:93:56:d9:df:61:4a:9f:f2:1e:83:3d:a7:de:cf:88:
         26:3d:8f:b3:61:19:88:f3:1a:24:fb:72:77:eb:2f:a9:18:36:
         5c:26:e0:d3:cf:77:02:89:f3:97:64:fd:50:1c:0a:4c:b8:d5:
         c1:34:8b:47:99:48:35:d4:f0:37:23:18:ec:19:58:b3:66:c5:
         5c:b1:dc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:33 2025 by rpki-client