Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
File:                     ArvU-GWhLXmgmgNEhs5hugI4gsc.mft (raw, json)
Hash identifier:          NTMZ+y8ebax237t0YfjbK3e0zvYuDALQOssFGmB1vxc=
Subject key identifier:   54:5C:97:F5:AD:F3:3D:DB:7E:6B:48:B5:55:EB:E2:07:9E:34:A4:E6
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Certificate issuer:       /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial:       019D2704904BD0E6F997872ECB33B8C712B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
Manifest number:          18C0
Signing time:             Wed 25 Mar 2026 22:01:43 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:43 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:43 +0000
Files and hashes:         1: ArvU-GWhLXmgmgNEhs5hugI4gsc.crl (hash: EghFJB44O6rqtl3a+qB72T55jUd/O3JldnEfeqFGNWE=)
                          2: IDpslbcDriUFsYX-TmbeGovsaLQ.roa (hash: cPSmDVUEQwcs3c3RUxKiz7Kiswc6P29foMyjSSIWLdE=)
                          3: iE7v6VMVPWYKTYZG81Qa4S2dld0.roa (hash: x5b7cUQ7z0QouQRX5TNEXKjigPhuKTxEn6jRVfHPZag=)
                          4: sg07i6-JOjug3g7DuHSiaVsLOnY.roa (hash: e70gFTBvNZi7n90fqu/n/AeaSK7I4IipWoR1Qkkc8Mo=)
                          5: w2wFQoMSS60GTVnI8PLNmdsK0ok.roa (hash: Y8P/VuPZXXoVGNovDAVq15qj7dnBSmndNnHWk+99Tnw=)
                          6: yQttOsQxW36OS-VvRBzTPm-A63M.roa (hash: qt8FgnFLRhAmKzXjcfKvUfLhcAOTBrwQNF5TJ1+JFSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:90:4b:d0:e6:f9:97:87:2e:cb:33:b8:c7:12:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
        Validity
            Not Before: Mar 25 22:01:43 2026 GMT
            Not After : Mar 26 22:01:43 2026 GMT
        Subject: CN=545c97f5adf33ddb7e6b48b555ebe2079e34a4e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e5:8f:d1:1b:b6:b8:e7:23:20:34:de:10:a6:
                    ff:76:80:87:c0:dc:cc:d2:75:90:3d:b7:f2:8f:b8:
                    2e:e9:3c:b6:dc:c3:1a:24:0d:ce:c8:ed:fe:7c:11:
                    11:c4:34:8a:86:bf:b0:5d:5c:e5:38:02:81:0a:00:
                    c6:00:b3:ad:da:1e:c3:a7:29:96:b4:00:f5:c9:a5:
                    c0:4e:6a:e0:1d:93:89:85:de:69:08:5d:70:c7:d8:
                    e6:35:e8:4d:92:95:33:b0:1e:82:26:3e:48:77:8e:
                    ce:e5:c0:eb:2b:54:e2:11:65:73:0c:8c:64:14:29:
                    9a:89:f7:64:09:15:88:a7:29:10:91:b7:96:07:c9:
                    39:e0:00:62:ae:93:83:eb:c3:bc:b0:1d:2b:45:64:
                    cf:ef:d1:f7:f4:e8:c0:de:ff:ac:a1:b8:a5:fa:41:
                    3c:0c:96:3e:df:bb:06:21:0a:8a:7d:bf:be:ca:b3:
                    f8:ae:0f:fa:58:31:b6:4e:4e:c7:5b:45:e8:fa:4d:
                    a2:3d:fb:38:15:ca:1e:dc:e9:4a:66:a3:8e:08:3e:
                    6c:1c:18:84:f6:3c:99:87:17:39:1e:29:83:73:62:
                    57:a8:44:ed:2b:07:ab:2b:44:4d:42:30:93:47:17:
                    e1:35:e4:06:30:36:f8:50:f5:eb:ad:7d:46:6d:e0:
                    ce:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5C:97:F5:AD:F3:3D:DB:7E:6B:48:B5:55:EB:E2:07:9E:34:A4:E6
            X509v3 Authority Key Identifier:
                keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:0d:3c:78:fd:67:e6:ef:db:c2:c5:be:20:1e:22:7d:26:50:
         79:41:47:13:1c:a8:8f:c0:52:a9:2e:b9:f4:96:c3:d9:f1:5f:
         64:87:f8:91:b5:88:31:fa:41:23:ba:b5:d4:7d:c6:7a:66:3c:
         fa:b5:0c:be:18:5a:29:69:bd:3e:0e:ba:ce:2b:d8:24:4f:62:
         03:9a:c7:a5:c0:f8:7e:7a:47:3a:b0:88:9e:3c:2c:61:07:f4:
         d3:6a:4a:cc:d3:83:66:9d:cd:3a:b7:49:25:6c:d7:c0:c3:d3:
         bb:63:f5:50:a9:76:75:dd:f1:51:7b:e7:b2:0d:05:83:ee:bc:
         8f:f1:89:e5:1d:01:52:c4:84:ff:c2:00:32:0f:52:30:9e:86:
         1b:94:dd:69:a8:b7:02:86:15:71:93:c2:fd:51:73:26:87:01:
         f5:30:53:d2:37:e0:df:7b:14:cf:61:c7:ab:a6:bd:15:bd:65:
         89:f8:6c:fb:eb:06:a1:e3:5b:ff:80:17:9c:27:74:73:33:b2:
         25:fc:e6:52:d7:1f:59:05:93:4f:19:fb:f3:91:25:22:60:a1:
         e5:f3:f3:36:3d:6c:84:6d:d9:2b:cb:fd:b7:d2:bd:18:dd:68:
         59:7f:81:eb:90:f4:4d:01:c2:9a:43:a6:1f:ac:11:8a:f5:4b:
         51:4c:52:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBJBL0Ob5l4cuyzO4xxKyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYmJkNGY4NjVhMTJkNzlhMDlhMDM0NDg2Y2U2MWJhMDIz
ODgyYzcwHhcNMjYwMzI1MjIwMTQzWhcNMjYwMzI2MjIwMTQzWjAzMTEwLwYDVQQD
Eyg1NDVjOTdmNWFkZjMzZGRiN2U2YjQ4YjU1NWViZTIwNzllMzRhNGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOWP0Ru2uOcjIDTeEKb/doCHwNzM
0nWQPbfyj7gu6Ty23MMaJA3OyO3+fBERxDSKhr+wXVzlOAKBCgDGALOt2h7DpymW
tAD1yaXATmrgHZOJhd5pCF1wx9jmNehNkpUzsB6CJj5Id47O5cDrK1TiEWVzDIxk
FCmaifdkCRWIpykQkbeWB8k54ABirpOD68O8sB0rRWTP79H39OjA3v+sobil+kE8
DJY+37sGIQqKfb++yrP4rg/6WDG2Tk7HW0Xo+k2iPfs4Fcoe3OlKZqOOCD5sHBiE
9jyZhxc5HimDc2JXqETtKwerK0RNQjCTRxfhNeQGMDb4UPXrrX1GbeDOAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRcl/Wt8z3bfmtItVXr4geeNKTmMB8GA1UdIwQY
MBaAFAK71PhloS15oJoDRIbOYboCOILHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXJ2VS1HV2hMWG1nbWdORWhzNWh1Z0k0Z3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jYjgzYjItMzNiNS00NTYwLTg5MzUt
MGE5ODA0OGNkZjcyLzEvQXJ2VS1HV2hMWG1nbWdORWhzNWh1Z0k0Z3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jYjgzYjItMzNiNS00NTYwLTg5MzUtMGE5ODA0OGNkZjcy
LzEvQXJ2VS1HV2hMWG1nbWdORWhzNWh1Z0k0Z3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXg08eP1n
5u/bwsW+IB4ifSZQeUFHExyoj8BSqS659JbD2fFfZIf4kbWIMfpBI7q11H3GemY8
+rUMvhhaKWm9Pg66zivYJE9iA5rHpcD4fnpHOrCInjwsYQf002pKzNODZp3NOrdJ
JWzXwMPTu2P1UKl2dd3xUXvnsg0Fg+68j/GJ5R0BUsSE/8IAMg9SMJ6GG5Tdaai3
AoYVcZPC/VFzJocB9TBT0jfg33sUz2HHq6a9Fb1lifhs++sGoeNb/4AXnCd0czOy
JfzmUtcfWQWTTxn785ElImCh5fPzNj1shG3ZK8v9t9K9GN1oWX+B65D0TQHCmkOm
H6wRivVLUUxSkw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:40:54 2026 by rpki-client