Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft
File:                     rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft (raw, json)
Hash identifier:          P867/rQ8kH1RhZ07uYR1/pg3LGsmkP75dasAjdIO5xs=
Subject key identifier:   F0:B2:92:FF:04:BC:B6:0B:59:6C:B9:33:76:95:08:59:0F:F1:24:90
Authority key identifier: AE:F2:0E:FC:0A:E4:01:3E:6F:48:67:C1:5F:23:77:B2:35:09:5B:86
Certificate issuer:       /CN=aef20efc0ae4013e6f4867c15f2377b235095b86
Certificate serial:       019848F79F249FA0FFECC1CB337EF779E043
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft
Manifest number:          1303
Signing time:             Sat 26 Jul 2025 23:00:44 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:44 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:44 +0000
Files and hashes:         1: o7v2ihQZngiNboLPlznFQHbVVog.roa (hash: twBuq4hJwFozjQzNXD6DkR3/XLNImqCcOIvvxAULQBw=)
                          2: rvIO_ArkAT5vSGfBXyN3sjUJW4Y.crl (hash: C1e/aO1t4lZcH4kxC83nhLdqra491Hi56DeXIN/Sv1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 23:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:9f:24:9f:a0:ff:ec:c1:cb:33:7e:f7:79:e0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aef20efc0ae4013e6f4867c15f2377b235095b86
        Validity
            Not Before: Jul 26 23:00:44 2025 GMT
            Not After : Jul 27 23:00:44 2025 GMT
        Subject: CN=f0b292ff04bcb60b596cb933769508590ff12490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0d:88:65:9a:16:84:72:10:c8:0e:5f:ba:53:
                    ff:a7:24:56:26:d7:e9:37:36:8d:bd:db:b9:67:c9:
                    e8:78:c8:c8:91:8d:e9:bf:2e:78:47:7c:6e:d3:56:
                    b6:37:b7:c4:10:af:5d:4d:8b:2c:99:36:e1:5a:af:
                    ad:64:b1:e5:24:cb:43:b1:62:fa:f0:85:3e:1b:85:
                    7f:07:5a:fa:40:3c:d0:fb:17:06:5d:69:67:39:97:
                    03:d2:96:fd:6e:fa:ed:3b:8f:e0:1e:b0:1b:05:77:
                    3c:e1:5c:df:0a:ce:e3:ac:8e:0f:c1:fa:8b:2f:16:
                    a0:23:c9:48:28:83:d0:f4:00:94:48:cb:45:f5:98:
                    fc:c0:d5:be:e9:e2:8b:b8:79:00:5a:21:db:e5:de:
                    55:75:e5:ea:9d:cc:f4:11:c2:f7:d4:e5:f5:8e:d7:
                    71:cc:33:e6:03:4b:03:a9:17:6b:74:d6:c5:57:c8:
                    6e:1e:98:b4:9e:ed:bc:e4:09:e3:b2:57:c9:93:22:
                    82:e6:1c:09:5c:95:fd:31:a0:ea:23:f7:ea:16:91:
                    21:b7:91:4a:85:9e:ae:9d:72:fd:86:0b:58:35:f0:
                    54:30:cb:62:08:75:11:77:2b:e3:c8:6a:e6:7e:15:
                    6d:80:42:86:a0:56:3e:e5:56:5b:08:45:3e:65:3f:
                    21:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B2:92:FF:04:BC:B6:0B:59:6C:B9:33:76:95:08:59:0F:F1:24:90
            X509v3 Authority Key Identifier:
                keyid:AE:F2:0E:FC:0A:E4:01:3E:6F:48:67:C1:5F:23:77:B2:35:09:5B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:79:53:59:63:3f:76:6e:a4:cb:f2:e4:53:cd:c0:a0:a8:c9:
         1d:e2:d5:0b:a7:90:6e:2a:c3:35:4a:e8:f8:6b:28:6c:9e:6b:
         e8:2a:ae:88:95:43:12:a3:27:b2:60:dc:96:59:59:c2:05:59:
         97:d9:1c:89:7d:ae:0f:ca:f6:0c:cd:4d:2a:4f:cd:9e:5c:f4:
         22:d9:34:9e:4a:72:ab:c9:1f:0e:18:e9:35:66:fe:b0:0c:ab:
         50:6e:26:0c:86:20:0a:12:fd:d7:34:64:19:07:a1:ee:44:21:
         21:09:9d:25:76:52:ae:be:15:13:04:39:5b:3a:7f:ca:04:84:
         e5:63:04:98:41:8d:39:2f:bb:13:4c:8e:64:70:cd:d4:d4:b3:
         fc:57:df:75:00:76:9e:75:b7:1e:c4:54:00:35:d7:21:19:cf:
         c7:c8:77:a5:3b:47:f9:94:04:c3:be:e7:4d:a5:51:7a:e1:fc:
         0e:b9:a4:e8:d9:cc:d5:b0:40:da:f3:0b:af:6e:57:d9:04:49:
         47:fb:a9:73:e8:4c:d0:82:55:d2:5f:7a:33:e0:42:94:56:db:
         e1:9b:ee:eb:ee:32:99:47:23:af:b0:73:a7:92:c5:87:5d:0b:
         88:4c:47:11:81:04:f8:99:db:d9:db:04:7a:dd:bf:25:b8:57:
         1d:88:0e:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI958kn6D/7MHLM373eeBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZjIwZWZjMGFlNDAxM2U2ZjQ4NjdjMTVmMjM3N2IyMzUw
OTViODYwHhcNMjUwNzI2MjMwMDQ0WhcNMjUwNzI3MjMwMDQ0WjAzMTEwLwYDVQQD
EyhmMGIyOTJmZjA0YmNiNjBiNTk2Y2I5MzM3Njk1MDg1OTBmZjEyNDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw2IZZoWhHIQyA5fulP/pyRWJtfp
NzaNvdu5Z8noeMjIkY3pvy54R3xu01a2N7fEEK9dTYssmTbhWq+tZLHlJMtDsWL6
8IU+G4V/B1r6QDzQ+xcGXWlnOZcD0pb9bvrtO4/gHrAbBXc84VzfCs7jrI4PwfqL
LxagI8lIKIPQ9ACUSMtF9Zj8wNW+6eKLuHkAWiHb5d5VdeXqncz0EcL31OX1jtdx
zDPmA0sDqRdrdNbFV8huHpi0nu285AnjslfJkyKC5hwJXJX9MaDqI/fqFpEht5FK
hZ6unXL9hgtYNfBUMMtiCHURdyvjyGrmfhVtgEKGoFY+5VZbCEU+ZT8hnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCykv8EvLYLWWy5M3aVCFkP8SSQMB8GA1UdIwQY
MBaAFK7yDvwK5AE+b0hnwV8jd7I1CVuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnZJT19BcmtBVDV2U0dmQlh5TjNzalVKVzRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xMzZmYWYtY2YyMC00MjY1LTk4YTMt
ZDliODJkOWVjYzQ1LzEvcnZJT19BcmtBVDV2U0dmQlh5TjNzalVKVzRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xMzZmYWYtY2YyMC00MjY1LTk4YTMtZDliODJkOWVjYzQ1
LzEvcnZJT19BcmtBVDV2U0dmQlh5TjNzalVKVzRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHlTWWM/
dm6ky/LkU83AoKjJHeLVC6eQbirDNUro+GsobJ5r6CquiJVDEqMnsmDclllZwgVZ
l9kciX2uD8r2DM1NKk/Nnlz0Itk0nkpyq8kfDhjpNWb+sAyrUG4mDIYgChL91zRk
GQeh7kQhIQmdJXZSrr4VEwQ5Wzp/ygSE5WMEmEGNOS+7E0yOZHDN1NSz/FffdQB2
nnW3HsRUADXXIRnPx8h3pTtH+ZQEw77nTaVReuH8Drmk6NnM1bBA2vMLr25X2QRJ
R/upc+hM0IJV0l96M+BClFbb4Zvu6+4ymUcjr7Bzp5LFh10LiExHEYEE+Jnb2dsE
et2/JbhXHYgOxQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:15:16 2025 by rpki-client