Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft
File:                     rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft (raw, json)
Hash identifier:          lNi3IDOBEXC9Bv5oHcmESc9k/BH3ugbtzphSkOk77i0=
Subject key identifier:   07:10:AF:09:4D:1F:9B:E8:B7:C0:DD:C9:05:AB:AF:F1:27:06:FC:BD
Authority key identifier: AE:F2:0E:FC:0A:E4:01:3E:6F:48:67:C1:5F:23:77:B2:35:09:5B:86
Certificate issuer:       /CN=aef20efc0ae4013e6f4867c15f2377b235095b86
Certificate serial:       0199FB7CD4AD7E8E0D56C1E886B4E05E8F41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft
Manifest number:          13E4
Signing time:             Sun 19 Oct 2025 08:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:26 +0000
Files and hashes:         1: o7v2ihQZngiNboLPlznFQHbVVog.roa (hash: twBuq4hJwFozjQzNXD6DkR3/XLNImqCcOIvvxAULQBw=)
                          2: rvIO_ArkAT5vSGfBXyN3sjUJW4Y.crl (hash: dKmsqnfRLz/33SRjuHNrRimOV6ujF4p1Ndvh1AEbGJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:d4:ad:7e:8e:0d:56:c1:e8:86:b4:e0:5e:8f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aef20efc0ae4013e6f4867c15f2377b235095b86
        Validity
            Not Before: Oct 19 08:01:26 2025 GMT
            Not After : Oct 20 08:01:26 2025 GMT
        Subject: CN=0710af094d1f9be8b7c0ddc905abaff12706fcbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2c:e6:ff:06:7b:ec:06:22:23:1c:68:f7:ce:
                    41:f4:67:f0:6b:83:f6:84:5e:94:f3:fb:99:a0:3f:
                    ce:35:34:03:e7:84:d8:0b:11:4c:ec:ba:53:0d:30:
                    62:59:27:79:8b:9f:d2:62:79:42:3d:93:d7:f8:32:
                    33:de:55:f6:d1:b7:dd:c7:24:6e:25:23:69:6b:08:
                    ab:f8:d3:c1:2d:25:55:3b:ca:f9:c2:b3:89:aa:28:
                    69:78:78:49:a8:b2:ae:9b:9e:3b:43:50:49:d0:0c:
                    5e:bc:47:bb:1c:80:9d:e7:d1:e0:f7:98:aa:4d:ae:
                    26:d4:2b:51:70:66:0b:9b:ec:66:32:ea:79:6b:b4:
                    a2:36:b7:e4:22:5e:cd:3c:bf:9d:bf:b3:f9:a2:12:
                    7f:b7:12:f2:ca:27:15:47:41:63:83:4f:20:e4:0b:
                    c1:3e:90:c0:5e:56:9e:89:40:f5:a8:0f:e8:ab:8f:
                    78:31:ec:1a:6a:93:dc:59:7e:02:0a:fb:3c:85:ac:
                    73:4c:77:47:9e:30:c7:49:cf:40:e6:aa:c7:f5:d6:
                    a3:ee:ff:ed:0a:ed:ae:30:41:33:c5:9d:2c:cb:48:
                    72:53:25:2b:fc:2b:d1:4a:f2:09:ca:a9:66:82:c2:
                    6e:11:b8:7f:6d:3a:a1:7a:81:08:ec:e5:25:b3:9c:
                    84:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:10:AF:09:4D:1F:9B:E8:B7:C0:DD:C9:05:AB:AF:F1:27:06:FC:BD
            X509v3 Authority Key Identifier:
                keyid:AE:F2:0E:FC:0A:E4:01:3E:6F:48:67:C1:5F:23:77:B2:35:09:5B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ed:ef:36:8b:39:9b:da:97:cb:0b:3c:bf:09:8a:55:0c:0d:
         18:81:46:57:20:69:f7:b1:ef:c0:73:da:29:11:1f:14:9c:2f:
         3d:5c:38:96:8d:bb:1a:37:6a:6a:f8:d5:f6:22:2a:25:c8:2f:
         ac:4d:f4:4b:d3:9e:06:9b:53:65:1a:26:a9:e2:06:7c:14:97:
         38:a6:27:e6:c5:b1:2f:47:5f:98:f9:79:5b:30:01:c0:a8:04:
         f2:08:cc:fe:e4:ea:2b:87:8a:e8:7d:fe:f6:aa:c8:91:d7:34:
         cc:73:51:cf:b7:ad:15:b5:7e:18:db:00:84:b3:81:66:dd:e0:
         e1:ad:8c:70:a8:07:61:85:cd:e5:e8:68:1f:2e:a4:30:3f:97:
         b2:8a:31:43:52:18:e0:4a:7d:55:9a:17:0c:58:78:32:8b:8a:
         6f:b4:18:52:73:43:5d:80:a3:da:f3:e1:ba:e9:ca:9d:ea:18:
         ab:79:61:a6:65:ea:49:e2:e7:36:f5:99:f5:a7:37:66:02:cd:
         2e:07:40:55:a3:b6:e6:0e:6d:5a:c3:89:28:76:7a:33:9c:e1:
         04:ce:ea:84:cf:86:1c:ee:84:02:7b:0d:e1:f4:cf:80:32:0c:
         35:43:43:d7:61:86:77:57:19:9c:75:f6:66:1a:de:4e:ae:9f:
         1a:d6:e8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:55 2025 by rpki-client