Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
File:                     ArkWs7LpV9GFAyzbSZl2oA66SXU.mft (raw, json)
Hash identifier:          lUD1cOy+NZKOT32VwrEC3woCCSGUTkAWD6Ht7dOLXG0=
Subject key identifier:   93:84:46:EC:93:75:9F:11:78:71:82:EC:6C:01:60:5C:F4:5E:C7:D1
Authority key identifier: 02:B9:16:B3:B2:E9:57:D1:85:03:2C:DB:49:99:76:A0:0E:BA:49:75
Certificate issuer:       /CN=02b916b3b2e957d185032cdb499976a00eba4975
Certificate serial:       01A040BC1671009E49BC78E216D32872BCDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
Manifest number:          0367
Signing time:             Thu 27 Aug 2026 01:01:03 +0000
Manifest this update:     Thu 27 Aug 2026 01:01:03 +0000
Manifest next update:     Fri 28 Aug 2026 01:01:03 +0000
Files and hashes:         1: ArkWs7LpV9GFAyzbSZl2oA66SXU.crl (hash: XgEokYtJptHiXkkBGTO7KRb67Jw5UiG06p/uzjO4Wxc=)
                          2: KFxafXhhfLaW-gpG0Qp8xa6PXxk.roa (hash: i+ofv0cbmE9Ws7/+QJMB11kRvt2A2P+Z3BL5lLoxu6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:bc:16:71:00:9e:49:bc:78:e2:16:d3:28:72:bc:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b916b3b2e957d185032cdb499976a00eba4975
        Validity
            Not Before: Aug 27 01:01:03 2026 GMT
            Not After : Aug 28 01:01:03 2026 GMT
        Subject: CN=938446ec93759f11787182ec6c01605cf45ec7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:45:b4:ad:e4:f4:85:80:4b:1e:7e:1b:3e:bc:
                    f9:ac:25:8c:25:73:fe:9f:b2:3b:33:cf:03:97:cb:
                    0d:1c:b6:2e:28:9c:12:5f:ca:9a:00:f9:74:37:23:
                    1e:3a:bf:3a:73:e3:41:95:33:e4:d7:51:e5:da:52:
                    10:51:45:ef:f6:8b:23:2c:cb:2f:d7:ac:66:5e:d4:
                    7d:a3:f9:dc:6d:33:95:ca:59:7f:fd:9b:cf:43:8d:
                    c5:26:9e:f3:47:c9:12:da:e9:58:18:91:96:ad:16:
                    bd:75:fa:80:d6:5a:41:10:51:29:66:b4:43:42:b9:
                    94:df:aa:6e:2d:16:9b:e5:02:06:30:43:ff:ef:b2:
                    ab:e5:d6:c1:29:46:70:c5:57:bb:0b:59:90:df:b3:
                    ec:7e:9e:66:ec:95:b9:8b:bf:35:94:2d:9a:fb:55:
                    09:0c:f0:4e:b8:fb:2e:32:9f:18:63:b5:14:08:9d:
                    bc:6c:d7:92:56:b9:6f:29:8e:f3:c9:7f:77:2d:ab:
                    0a:58:ca:af:5c:b5:ca:53:56:3a:15:65:85:a8:de:
                    85:47:49:dc:41:8a:52:21:24:de:96:12:78:c8:c4:
                    f7:15:1e:17:99:62:1a:d6:1f:21:85:e0:df:52:8b:
                    19:fd:8b:39:00:cf:ae:54:bf:ba:51:f9:d7:68:25:
                    1c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:84:46:EC:93:75:9F:11:78:71:82:EC:6C:01:60:5C:F4:5E:C7:D1
            X509v3 Authority Key Identifier:
                keyid:02:B9:16:B3:B2:E9:57:D1:85:03:2C:DB:49:99:76:A0:0E:BA:49:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:5e:e7:36:57:c2:43:25:c9:93:13:aa:e7:f9:f6:6a:45:f7:
         9e:ca:7b:dc:53:8f:62:9e:b9:e0:f5:1a:a3:7b:d8:1f:1d:42:
         5b:02:18:6e:2f:b9:53:e6:af:e8:5d:fa:68:a3:0e:c1:3e:4b:
         44:04:f8:21:ee:2c:7e:c8:4d:cd:95:c3:42:38:f1:b0:c5:c2:
         39:8c:9c:03:a2:42:59:53:f5:02:0d:ed:f5:3b:15:54:40:3d:
         d2:8a:f7:7e:ce:4b:ab:62:73:9b:9b:a3:31:a2:f6:a5:29:07:
         a1:97:3d:a8:d8:3b:2e:dd:d3:f0:ec:14:e8:94:e3:41:e5:3a:
         11:0d:3c:17:df:81:79:68:fa:23:23:8e:ab:3a:bc:c3:d0:11:
         d2:b7:ca:75:f7:16:bd:a4:90:fc:f0:02:9f:9d:11:ba:b9:b3:
         8c:a9:28:16:7c:82:d0:e4:f3:c4:1b:6c:c4:96:5a:21:86:85:
         69:c6:f8:10:82:79:fe:df:75:32:7e:f1:2d:94:b6:d4:14:1b:
         5c:f0:d8:53:e5:2f:a0:14:3d:e8:4a:74:ef:0b:5f:76:f6:e5:
         ab:8a:ec:ba:02:03:b1:7b:f4:77:ff:ce:4a:ec:78:77:12:00:
         fc:2d:2d:fe:72:ce:2f:12:5a:19:bb:3f:dc:bc:56:9e:75:0d:
         c1:89:57:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:37:13 2026 by rpki-client