Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
File:                     ARmUscWuj1grvs9ndysUttl3uqw.mft (raw, json)
Hash identifier:          zRrwIRC7cn+I14SAr7fFDCtFmAYYFvb/BQKwTvMZVGU=
Subject key identifier:   51:CC:C7:EC:92:C4:38:B4:84:C0:68:78:9A:41:C7:9E:CE:66:AC:9D
Authority key identifier: 01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
Certificate issuer:       /CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Certificate serial:       019F913556FA0ACCB946011F0DE7AF00EBDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
Manifest number:          08DE
Signing time:             Thu 23 Jul 2026 23:00:19 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:19 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:19 +0000
Files and hashes:         1: ARmUscWuj1grvs9ndysUttl3uqw.crl (hash: ZSoxoKpb1wrr/CqIZr643uXC8Aj8utceGSunVXNmB+M=)
                          2: jMbUatOv3XAsr_KrVEX1mPMT9Mg.roa (hash: XrXEaVvF+zoDFjw4K3BmRj8i0r+TbNLILJR4PzBUuZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:56:fa:0a:cc:b9:46:01:1f:0d:e7:af:00:eb:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011994b1c5ae8f582bbecf67772b14b6d977baac
        Validity
            Not Before: Jul 23 23:00:19 2026 GMT
            Not After : Jul 24 23:00:19 2026 GMT
        Subject: CN=51ccc7ec92c438b484c068789a41c79ece66ac9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:35:f4:02:56:a4:af:a7:c2:0b:be:ae:78:1d:
                    86:1a:b7:42:91:08:b7:09:ee:39:a4:05:7a:45:53:
                    67:a5:c2:cc:21:cd:7a:2c:c4:3f:1c:83:ed:67:c1:
                    14:eb:76:98:71:9a:07:b2:a5:5a:48:c7:5a:6e:a9:
                    85:73:ad:96:11:38:f0:89:f8:e0:cd:b2:86:c2:01:
                    5f:09:23:c1:63:9f:1c:ab:e5:e2:98:40:26:f2:b6:
                    1f:25:ae:77:66:f9:36:8c:12:13:33:8a:f9:68:a4:
                    27:a9:27:79:d0:ad:a2:92:67:b9:c7:c9:6e:50:b6:
                    98:e7:77:a2:53:93:ad:db:6e:46:33:d3:ef:3a:d9:
                    15:be:e8:2e:0b:ba:97:05:23:ba:cc:a8:45:f0:79:
                    63:af:97:70:9f:b5:a6:e9:5a:64:ec:44:b5:82:33:
                    f6:14:62:8d:bd:33:d6:c5:0c:69:46:9d:98:12:e8:
                    0b:ad:6f:cb:65:81:e0:b6:e2:d1:a2:18:f0:a6:e5:
                    97:e8:41:08:06:bb:2b:86:46:3f:49:bb:d6:0d:03:
                    37:a8:12:d6:92:8e:f0:3f:b9:14:74:e3:f6:31:4f:
                    57:74:4a:83:c0:5b:2c:d3:10:4a:2a:d1:86:0d:a4:
                    32:93:08:25:ed:25:dd:8e:28:30:83:03:f6:8e:77:
                    52:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CC:C7:EC:92:C4:38:B4:84:C0:68:78:9A:41:C7:9E:CE:66:AC:9D
            X509v3 Authority Key Identifier:
                keyid:01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:28:06:3d:80:01:8d:59:41:9f:1d:c3:55:3c:92:8b:ac:20:
         37:98:a8:fd:fa:94:2a:a4:20:e0:85:2d:96:04:f7:d8:33:1f:
         a4:6f:64:b1:d3:84:7d:a4:0f:c3:4f:c5:55:c1:6b:c5:fe:e5:
         78:96:c5:41:62:99:57:59:be:24:f6:db:73:92:48:56:da:68:
         b6:65:dd:63:b9:6e:e7:94:f5:bc:80:d2:6e:f1:11:2b:14:ff:
         0f:56:03:5c:94:0e:b7:3a:76:c0:96:61:f9:f2:9c:5a:93:50:
         8c:48:cd:7e:0f:b2:df:7b:7a:2b:00:7d:53:90:4b:0b:93:2d:
         a9:cc:28:51:f6:b2:2a:d9:0c:46:11:dc:f5:96:0a:b0:6e:70:
         e1:6e:4d:97:cc:8b:4c:c3:af:18:ed:a3:5f:f9:4e:df:4b:ca:
         8e:15:e0:21:c0:83:87:fd:06:3f:33:ab:da:54:e7:9c:30:40:
         55:42:57:d4:ea:19:fe:75:89:93:53:f8:5e:e6:21:2e:3c:0d:
         1f:df:93:98:a5:38:b9:77:05:f9:50:99:ad:4a:75:a3:2a:ba:
         ba:f1:91:03:63:50:07:21:60:30:a6:35:a9:2d:11:05:ab:e3:
         30:f2:d5:14:f1:5f:47:22:6b:ae:eb:cc:b4:f5:33:76:e6:b3:
         9d:83:5d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:21 2026 by rpki-client