Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
File:                     ArvU-GWhLXmgmgNEhs5hugI4gsc.mft (raw, json)
Hash identifier:          TGXibT9gmzEXb8BFBHpdrnvInGPpKfksahSAFhfqEhY=
Subject key identifier:   26:5A:05:96:40:BE:11:CC:56:64:CA:A7:0F:AA:17:DC:13:D0:FC:61
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Certificate issuer:       /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial:       0197B77BF90ED2A4CB1F9A03B08EF0BFFF00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
Manifest number:          15EE
Signing time:             Sat 28 Jun 2025 17:00:44 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:44 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:44 +0000
Files and hashes:         1: 6hP3YFxQ2zc1yxq1Yg-S-ttZkIE.roa (hash: Ed6WzwrI1cGg+JnmB5cY91VGvzN+Zax7iz4h1sld3DE=)
                          2: A8pHLmGqvvL7ZXyTQ3D6P92j5u8.roa (hash: uCr7a+QcFX+k6IP9JSJ/P3skrjwZJKJctLLUyppPEI8=)
                          3: AIbMivTzigEw-GugeqJKqc642o8.roa (hash: nvF24+uIu7BukwLpQQuMp8PSZkNr3wMfYSYXJqQlLck=)
                          4: ArvU-GWhLXmgmgNEhs5hugI4gsc.crl (hash: rVFFl3yavIEpI6CsluRhbNoFviupxafct+SXkMgizp8=)
                          5: jMA9c4tYB9OWs7SxOnS4hAfxG_0.roa (hash: hG++HUML6bsn16/tDvQN2S8grWblRsqRCPRXMdONRJg=)
                          6: kU4sWVvEXvpfFIWiAeVwr_LDqWI.roa (hash: WPm3b9qQQzxthupDsTzro6o6AJsuP42XyxlUTyGK+5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7b:f9:0e:d2:a4:cb:1f:9a:03:b0:8e:f0:bf:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
        Validity
            Not Before: Jun 28 17:00:44 2025 GMT
            Not After : Jun 29 17:00:44 2025 GMT
        Subject: CN=265a059640be11cc5664caa70faa17dc13d0fc61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:8b:90:93:94:86:2d:51:8c:d9:9c:65:24:
                    b9:90:23:fe:39:ab:e7:74:27:1d:42:10:a4:a5:46:
                    d6:a6:45:ae:e0:a7:db:89:8e:8d:5d:62:56:f2:cc:
                    dd:9f:9a:40:a3:09:59:dd:4d:bc:02:11:38:b1:e4:
                    96:c4:25:e3:28:68:88:e6:d2:2c:f4:90:5a:7d:7f:
                    73:c9:a0:2f:f1:5a:4a:8f:7d:9b:77:5e:73:c5:7d:
                    25:60:24:8c:0a:ba:be:78:73:ce:54:56:26:4a:84:
                    5c:cb:5c:3a:91:6d:9c:85:66:00:a9:fc:a6:f6:e0:
                    36:47:cd:7d:2e:1b:a2:8a:5e:b9:6a:9e:f2:da:f4:
                    16:8e:f8:80:0b:1e:4a:0f:e7:df:07:83:ce:6a:12:
                    a5:21:be:be:27:b3:69:68:4a:f9:b8:c1:94:1d:c9:
                    64:f1:d9:4a:a1:be:8e:8b:1f:ec:aa:e2:55:39:a9:
                    29:f9:08:69:ca:97:3d:40:16:cd:8c:93:c6:82:7c:
                    a0:fd:78:38:d6:04:44:f9:07:25:44:5f:3f:3b:35:
                    3f:ab:26:9d:e1:51:92:d5:85:4c:f9:da:a6:9d:b1:
                    f5:d4:d3:1d:d7:a5:a2:a5:6a:8f:8c:72:6d:88:09:
                    78:ff:46:7f:a7:b7:69:fd:45:0c:32:86:e0:ee:25:
                    58:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5A:05:96:40:BE:11:CC:56:64:CA:A7:0F:AA:17:DC:13:D0:FC:61
            X509v3 Authority Key Identifier:
                keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:40:18:03:b5:34:9c:3b:1c:eb:ab:62:7e:f7:fb:f2:da:a1:
         5a:3b:c8:ee:d9:16:fc:22:b0:65:f7:bd:c2:1b:c5:75:c9:8d:
         43:71:60:99:75:4e:0c:4a:5d:e6:0d:45:10:78:90:a7:a7:c0:
         65:06:64:ad:32:09:53:a0:8a:ae:13:78:ac:45:89:50:85:2e:
         8c:66:af:8e:64:01:16:2c:a4:10:9b:07:52:99:ee:e1:a5:be:
         30:ce:59:9b:ca:04:49:31:3c:d6:00:c6:1d:92:ac:c7:6a:7a:
         98:f9:7f:38:1d:43:fe:53:da:9b:b5:f8:f8:47:fb:9f:da:f3:
         fc:33:dd:68:88:29:00:9f:b4:97:53:52:60:d3:f6:a4:5d:c6:
         68:17:81:40:b8:3b:bf:d0:86:cc:6e:dc:9a:c0:eb:d7:84:55:
         7d:df:6e:b9:25:7f:b1:f7:6f:0a:d5:28:05:fc:15:7a:af:2c:
         6b:a8:9f:be:28:97:0a:c3:5e:f4:4d:74:25:cf:6c:37:31:56:
         df:86:9b:53:ed:81:4a:93:37:be:1b:2b:5c:fe:f6:56:1f:af:
         85:9c:df:4f:b8:60:e6:59:45:99:0d:12:c6:54:6d:11:0d:51:
         3e:f0:09:d2:05:76:4c:44:86:2a:af:d6:8c:ce:ff:ec:84:ef:
         48:2d:c1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:57 2025 by rpki-client