Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
File:                     ArvU-GWhLXmgmgNEhs5hugI4gsc.mft (raw, json)
Hash identifier:          7HGwwXbmMBEomjH7EXJnfCqQKe804jlPkiTucWlBWxI=
Subject key identifier:   D7:5F:8B:D4:D1:BF:7C:95:76:D9:E3:83:89:26:5A:83:6F:D7:45:13
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Certificate issuer:       /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial:       019855DFBF4FECB4D848BD8CECD8AEB68743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
Manifest number:          1640
Signing time:             Tue 29 Jul 2025 11:09:43 +0000
Manifest this update:     Tue 29 Jul 2025 11:09:43 +0000
Manifest next update:     Wed 30 Jul 2025 11:09:43 +0000
Files and hashes:         1: 6hP3YFxQ2zc1yxq1Yg-S-ttZkIE.roa (hash: Ed6WzwrI1cGg+JnmB5cY91VGvzN+Zax7iz4h1sld3DE=)
                          2: A8pHLmGqvvL7ZXyTQ3D6P92j5u8.roa (hash: uCr7a+QcFX+k6IP9JSJ/P3skrjwZJKJctLLUyppPEI8=)
                          3: AIbMivTzigEw-GugeqJKqc642o8.roa (hash: nvF24+uIu7BukwLpQQuMp8PSZkNr3wMfYSYXJqQlLck=)
                          4: ArvU-GWhLXmgmgNEhs5hugI4gsc.crl (hash: 6Gjc0FSwgjpGGZniYZ4UyMxIvLTwGJpe4D3AAKrjKr0=)
                          5: jMA9c4tYB9OWs7SxOnS4hAfxG_0.roa (hash: hG++HUML6bsn16/tDvQN2S8grWblRsqRCPRXMdONRJg=)
                          6: kU4sWVvEXvpfFIWiAeVwr_LDqWI.roa (hash: WPm3b9qQQzxthupDsTzro6o6AJsuP42XyxlUTyGK+5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 11:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:55:df:bf:4f:ec:b4:d8:48:bd:8c:ec:d8:ae:b6:87:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
        Validity
            Not Before: Jul 29 11:09:43 2025 GMT
            Not After : Jul 30 11:09:43 2025 GMT
        Subject: CN=d75f8bd4d1bf7c9576d9e38389265a836fd74513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:b3:2a:dc:15:cc:e0:bc:44:db:2b:f8:0c:
                    b7:d0:63:8b:b6:db:fc:a2:43:bf:96:5f:29:ae:ad:
                    52:3e:60:fe:60:93:2f:0d:75:f1:d4:91:85:c7:ee:
                    34:41:9c:99:2d:20:4a:a4:e2:6d:df:9d:16:95:83:
                    a6:fb:ea:92:00:71:1f:5b:ad:51:b7:3f:02:ba:2e:
                    c1:cf:c9:d3:92:81:67:be:2c:c9:f4:36:76:76:67:
                    72:ad:06:ad:dd:6f:24:73:fd:5a:f8:5f:ed:82:40:
                    93:8b:58:b9:bd:70:dd:46:18:17:6d:6e:c1:6a:6d:
                    6f:00:fd:9d:b0:3f:41:7a:2c:ab:6d:48:e2:c0:81:
                    ec:59:cb:f2:1d:bf:96:de:4c:4a:15:d3:79:7d:f2:
                    da:56:12:3d:58:c5:1e:d3:9f:11:21:ca:98:8a:37:
                    06:30:57:de:2a:aa:74:08:c0:82:52:ed:cc:cc:93:
                    b7:9b:da:a4:24:79:65:54:ae:9d:17:38:17:4d:8b:
                    f0:29:ac:f3:29:cf:fe:bd:83:28:aa:68:62:f6:ab:
                    b1:4d:f3:fd:ba:de:e6:81:d4:83:3b:f2:c8:3c:a8:
                    dc:a7:c6:bc:a3:5f:57:a8:be:60:df:f4:42:25:42:
                    9d:c5:e8:f7:cf:e7:81:0e:97:c5:db:6e:b9:e7:2b:
                    5c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5F:8B:D4:D1:BF:7C:95:76:D9:E3:83:89:26:5A:83:6F:D7:45:13
            X509v3 Authority Key Identifier:
                keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:1b:2f:2b:57:38:a4:87:d1:36:51:1f:b7:7c:93:e7:0b:ec:
         28:24:3a:ce:59:f4:42:97:1d:5e:8d:8c:0f:ce:35:4e:cd:23:
         4e:d5:49:da:42:9a:75:d1:29:d8:71:a9:87:6e:ae:84:f2:f1:
         41:ea:20:a4:9c:eb:ca:84:42:f7:8e:cd:44:71:1a:da:bf:9f:
         11:9b:6d:3f:10:1e:da:68:fd:5b:4f:95:f1:0b:28:63:05:8f:
         c3:44:50:1f:02:18:d5:c4:57:38:fc:f5:66:2f:b1:4d:0d:03:
         a8:85:8d:dd:ac:09:bc:34:52:73:aa:09:47:7e:2f:a6:85:95:
         13:be:1c:28:3e:63:21:ba:e5:c8:7a:c9:40:3d:05:5d:21:2c:
         1b:4d:f4:07:25:07:55:8d:d9:59:73:e0:9d:bf:15:59:1f:88:
         2d:26:db:db:c2:39:34:9d:b5:6c:a6:b3:a4:fd:a8:8b:fe:58:
         d1:95:6d:3a:74:69:24:24:5d:be:49:26:61:b1:7e:2e:24:57:
         02:d5:03:69:1f:5d:60:1e:5f:9c:98:f1:cb:a0:99:9d:5d:62:
         77:6d:52:ce:e8:be:b1:4e:f5:da:38:e6:fe:a4:75:37:35:d6:
         57:c9:8e:2c:f9:28:ac:c9:72:05:89:4b:c7:88:3b:48:f5:ea:
         35:55:f7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 19:03:36 2025 by rpki-client