Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
File:                     ArcBQMA9kMkS3xHw_YNySbfLLhI.mft (raw, json)
Hash identifier:          Nk8nJIXUUL4tv1bwlP283esoqjBHwe5PVrQ7ceaAvSQ=
Subject key identifier:   6F:88:20:11:66:A4:DD:59:F0:31:36:2F:A7:3D:2F:00:9A:B8:E8:E2
Authority key identifier: 02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
Certificate issuer:       /CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Certificate serial:       019D25BA602944ACEBF8411ED8974408565F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
Manifest number:          1880
Signing time:             Wed 25 Mar 2026 16:01:04 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:04 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:04 +0000
Files and hashes:         1: ArcBQMA9kMkS3xHw_YNySbfLLhI.crl (hash: 9Bbd5uYqJepcBcS0jPaFMe6aSnbyN3zRPX0nFsq4JW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:60:29:44:ac:eb:f8:41:1e:d8:97:44:08:56:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b70140c03d90c912df11f0fd837249b7cb2e12
        Validity
            Not Before: Mar 25 16:01:04 2026 GMT
            Not After : Mar 26 16:01:04 2026 GMT
        Subject: CN=6f88201166a4dd59f031362fa73d2f009ab8e8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b1:c1:ee:d4:f4:3c:16:32:e5:55:ae:04:fa:
                    c3:e9:05:6e:5a:38:a9:b2:03:bf:e1:9d:98:4f:6e:
                    c0:9c:6e:58:4e:50:16:e0:62:b8:5e:a9:fc:0d:a3:
                    bf:9b:9e:9f:fd:2c:de:e6:b8:f0:96:66:a1:e0:15:
                    74:14:c7:3e:3c:03:59:b3:68:a1:99:7c:0a:72:d2:
                    fd:2a:1c:dc:85:f0:99:56:08:82:cb:eb:3a:45:9b:
                    7e:f4:83:db:5e:8c:57:0f:8a:93:14:16:31:5d:8b:
                    3b:d1:5c:d0:a1:03:87:d4:fa:07:09:bf:42:6c:2c:
                    b0:2b:5f:9f:76:5f:10:c5:5a:fa:65:d7:c5:97:aa:
                    45:69:cb:28:a1:b1:7e:da:f3:6f:7d:e9:2e:54:fb:
                    5f:e0:87:2c:b5:1a:f6:54:9d:54:54:10:2b:58:61:
                    84:09:0d:97:40:e7:b1:24:bb:fe:d7:f1:66:c8:09:
                    05:8f:6f:15:23:8c:3e:12:7b:29:27:1e:3d:21:9f:
                    a1:e3:04:95:af:2a:2f:f3:c4:5e:e1:50:11:b6:78:
                    a8:41:13:89:41:1e:88:84:72:8d:85:27:b4:9d:00:
                    cc:81:49:d5:3e:ca:b2:9f:ea:7b:f9:0c:e0:28:0c:
                    c8:01:74:68:26:6c:06:fb:3e:49:ac:19:5a:c0:29:
                    10:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:88:20:11:66:A4:DD:59:F0:31:36:2F:A7:3D:2F:00:9A:B8:E8:E2
            X509v3 Authority Key Identifier:
                keyid:02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:8d:9d:bf:4e:1f:0a:f4:e0:19:c0:6c:77:c3:39:94:70:99:
         49:3c:e8:0a:2b:2d:4e:0a:27:dc:4c:9f:f6:a5:2e:14:fa:c8:
         f8:7d:29:27:02:80:68:6f:4b:3f:d9:07:bb:0c:84:0d:bc:46:
         2c:4c:2d:c7:2c:a7:d8:23:fd:7d:9c:38:1b:0a:47:9a:82:61:
         09:15:94:93:65:cf:51:2f:6e:56:92:0b:74:59:48:a5:ef:12:
         9b:0b:e8:66:74:9a:c8:f4:3f:75:a6:10:ee:54:82:47:97:de:
         18:de:f8:41:bb:0b:a3:88:a3:ee:73:a5:ab:7b:ee:24:f0:0c:
         a5:51:24:f0:ac:24:43:d1:f1:a5:94:7d:11:ca:fc:2a:a9:b7:
         ac:5c:b4:08:c4:07:eb:8a:f4:be:9e:59:c7:27:a4:d8:5d:70:
         31:37:b3:9f:4e:60:e4:37:39:ab:cd:8b:c4:08:14:89:75:9a:
         ca:1e:e3:6e:d9:03:5c:97:9b:d1:06:17:e0:ef:ef:ca:fe:96:
         02:ab:66:a8:76:e4:a5:b1:37:0c:0b:9a:15:8c:d0:04:c3:3b:
         79:2d:6a:43:db:5f:8f:93:e7:dd:84:f0:b5:d2:8e:9d:33:01:
         4e:9d:5c:c8:ed:60:f4:b5:ec:30:d3:98:be:77:61:e0:bb:73:
         8f:fc:bd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:46 2026 by rpki-client