Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
File:                     ArvU-GWhLXmgmgNEhs5hugI4gsc.mft (raw, json)
Hash identifier:          K711TKC4yS1oV8cx1TsxV3Rdr/l+dxGNtV/G3B9hp78=
Subject key identifier:   8E:02:26:42:38:99:50:CE:26:F2:E7:21:DB:70:4F:CF:0D:34:F7:B0
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Certificate issuer:       /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial:       01A0D192E5EDCA9396D1015497CB3B85DC04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
Manifest number:          1AA6
Signing time:             Thu 24 Sep 2026 04:01:00 +0000
Manifest this update:     Thu 24 Sep 2026 04:01:00 +0000
Manifest next update:     Fri 25 Sep 2026 04:01:00 +0000
Files and hashes:         1: ArvU-GWhLXmgmgNEhs5hugI4gsc.crl (hash: M4cpqt4iVovoZmoZHu0sInaB1yVAhpdCaTCzTAjZ1bU=)
                          2: IDpslbcDriUFsYX-TmbeGovsaLQ.roa (hash: cPSmDVUEQwcs3c3RUxKiz7Kiswc6P29foMyjSSIWLdE=)
                          3: iE7v6VMVPWYKTYZG81Qa4S2dld0.roa (hash: x5b7cUQ7z0QouQRX5TNEXKjigPhuKTxEn6jRVfHPZag=)
                          4: sg07i6-JOjug3g7DuHSiaVsLOnY.roa (hash: e70gFTBvNZi7n90fqu/n/AeaSK7I4IipWoR1Qkkc8Mo=)
                          5: w2wFQoMSS60GTVnI8PLNmdsK0ok.roa (hash: Y8P/VuPZXXoVGNovDAVq15qj7dnBSmndNnHWk+99Tnw=)
                          6: yQttOsQxW36OS-VvRBzTPm-A63M.roa (hash: qt8FgnFLRhAmKzXjcfKvUfLhcAOTBrwQNF5TJ1+JFSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:e5:ed:ca:93:96:d1:01:54:97:cb:3b:85:dc:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
        Validity
            Not Before: Sep 24 04:01:00 2026 GMT
            Not After : Sep 25 04:01:00 2026 GMT
        Subject: CN=8e022642389950ce26f2e721db704fcf0d34f7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:90:34:1f:97:14:be:4b:7f:77:b8:36:b3:b1:
                    60:b6:b9:61:7a:ee:13:2f:b8:9e:80:6c:22:0c:fb:
                    76:1d:85:99:30:fd:74:70:f1:31:12:a6:db:8a:e2:
                    87:71:f6:4b:a9:e4:d7:7a:79:e5:b1:4d:fe:c0:09:
                    97:8e:08:7c:40:58:64:4b:ee:fc:07:f5:50:5f:f3:
                    1b:6b:01:64:af:b4:7b:aa:47:a0:22:f1:fa:94:e8:
                    cb:52:be:00:cf:d8:e2:fa:de:c4:55:55:0c:92:a4:
                    b0:f9:9e:d3:95:9e:de:9f:c3:d3:0c:b1:67:c9:9e:
                    eb:a2:ef:d5:99:e8:f6:20:16:11:b1:21:df:55:5a:
                    6b:e0:dd:ef:79:54:c1:58:ff:33:2d:71:8b:84:43:
                    15:2e:92:90:19:a8:f0:fa:ee:4a:24:e6:38:22:04:
                    4a:9f:98:40:7d:90:2a:7e:7a:0e:3f:3c:ef:66:5d:
                    d1:4e:b6:0b:80:9c:6a:99:c7:61:ba:78:05:70:47:
                    93:3b:57:c9:e7:0d:59:a4:d7:4a:af:15:6a:36:1e:
                    10:a8:b8:63:40:47:b2:8e:d3:09:a1:90:b6:2c:6f:
                    33:49:3b:8b:2c:ee:cc:cc:10:d3:b5:23:d2:56:9f:
                    bf:f8:e9:73:9f:0d:71:3c:c4:be:32:63:0f:29:96:
                    b0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:02:26:42:38:99:50:CE:26:F2:E7:21:DB:70:4F:CF:0D:34:F7:B0
            X509v3 Authority Key Identifier:
                keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:48:a9:1e:88:94:ee:90:29:62:24:6d:5e:aa:fa:b0:17:74:
         bf:15:33:77:0d:8d:f2:96:93:ba:a0:51:5c:f3:31:fe:24:b2:
         fc:1f:56:63:58:ee:5a:aa:a9:cb:23:88:29:dd:b5:90:05:a7:
         bd:10:29:13:0f:7c:62:4d:65:7d:0f:34:41:94:b4:a1:0f:e3:
         e8:da:70:e2:13:05:41:c2:99:cc:c4:75:55:bd:ad:d0:f1:9a:
         9e:fe:77:18:25:3e:5c:d0:81:03:fa:55:bd:86:b9:a0:fd:bd:
         a4:d7:59:42:e2:17:f9:9e:dd:ad:85:f6:d3:c8:29:81:52:6a:
         5a:af:ad:de:59:62:3e:dd:62:73:ca:70:72:e0:ce:d3:e8:54:
         aa:97:2c:a0:2c:26:99:14:c6:3c:d2:1c:6b:dd:fe:bb:88:44:
         34:5b:e0:02:1c:33:75:3b:cd:51:9d:d5:5a:80:d4:dc:d4:b4:
         68:ca:f6:cf:1e:08:b3:ff:f8:d3:06:03:6b:b9:eb:37:8a:2e:
         1a:e0:e7:59:a4:1f:c9:18:f8:e8:62:38:d4:c2:33:b5:3c:7c:
         67:f7:ea:7f:40:8e:68:c1:ac:ae:61:ce:e8:8d:b8:48:f7:32:
         aa:d3:dd:24:9f:9c:8b:e7:e8:74:e4:d4:a6:c6:de:4d:bb:9f:
         e6:07:35:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:31:25 2026 by rpki-client