Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
File:                     1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft (raw, json)
Hash identifier:          opc3y2QAr2F/Kije90snpPUzhwc/Cws28NjbvmMVQFY=
Subject key identifier:   1F:7B:78:5D:B6:94:4E:F3:D6:C6:72:A7:66:21:CF:A4:09:BD:E9:7D
Authority key identifier: F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21
Certificate issuer:       /CN=f80aef4640437f2307f79871bfb632bb8bddad21
Certificate serial:       019F122E999BEC67E8EC4CB52515198489D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
Manifest number:          0475
Signing time:             Mon 29 Jun 2026 07:01:11 +0000
Manifest this update:     Mon 29 Jun 2026 07:01:11 +0000
Manifest next update:     Tue 30 Jun 2026 07:01:11 +0000
Files and hashes:         1: 1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl (hash: i9jx/YOWxDXig4NFUoiM/pwfRpBX5bQpzVxGrG7rPWo=)
                          2: l8PTvEKg1q3xibFISiKYXuYoQzg.asa (hash: EW6iPD7DNIHaYH6kQZEbC7i0XvcuUJ+cnKRZbNJcwko=)
                          3: zjiuWoSKLx6AH4I2Xm1CmHapSEk.roa (hash: Eq7t794MZuOUyh5WfvsvEhySf6YH7sOyOdd9K7whuQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:2e:99:9b:ec:67:e8:ec:4c:b5:25:15:19:84:89:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80aef4640437f2307f79871bfb632bb8bddad21
        Validity
            Not Before: Jun 29 07:01:11 2026 GMT
            Not After : Jun 30 07:01:11 2026 GMT
        Subject: CN=1f7b785db6944ef3d6c672a76621cfa409bde97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c8:3e:1f:e0:79:31:7b:a8:a3:83:7c:8e:fa:
                    1e:98:a8:6e:93:67:a9:a8:2d:5e:23:65:2b:a7:06:
                    5b:31:93:9c:3c:e8:5c:09:73:4a:66:47:8e:98:e8:
                    c1:4c:38:08:0c:f5:0d:f8:7a:28:03:85:09:e4:e8:
                    a3:c5:65:58:e3:ce:42:94:30:d8:83:d1:b5:83:cb:
                    da:b4:27:7d:b3:d3:b7:41:55:0d:7e:5e:c6:16:1b:
                    a9:51:7e:96:b5:db:44:cb:5b:03:87:11:fe:7e:b0:
                    d9:92:d2:d9:78:78:74:26:8b:6f:76:4f:e7:10:9e:
                    10:de:16:13:ef:e6:46:7d:b8:e7:bc:b0:18:37:91:
                    fd:b6:a7:da:90:95:1c:61:18:7b:9c:0d:c6:74:6d:
                    79:d0:15:a2:e9:cf:d2:f1:6d:09:c1:43:93:f2:c9:
                    d9:1f:28:4f:13:83:a6:92:ee:f8:32:dd:e0:aa:fd:
                    b8:1a:f7:0d:6c:a4:4e:85:52:31:70:24:9a:e7:fd:
                    44:47:b6:e6:9f:0f:96:c8:96:4b:7d:cf:d8:64:ef:
                    97:25:c6:24:bd:17:49:cf:9a:86:cb:3e:07:4b:38:
                    65:b7:3b:e7:e6:d3:64:93:1e:f4:fc:af:8b:6c:94:
                    a0:59:8d:58:28:71:48:fc:d4:98:4b:e6:85:93:35:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7B:78:5D:B6:94:4E:F3:D6:C6:72:A7:66:21:CF:A4:09:BD:E9:7D
            X509v3 Authority Key Identifier:
                keyid:F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:1e:a2:44:29:f6:ae:85:55:aa:a0:76:dd:e5:f9:f2:bc:e9:
         d1:e7:f3:87:ef:65:9d:8e:90:24:8d:51:95:ef:ec:fa:87:1b:
         42:35:c5:59:89:de:1b:68:4f:a3:f3:27:fa:a4:5d:a2:7a:84:
         c4:50:9e:06:a4:d3:38:cd:0c:41:72:d0:6d:a8:05:c1:31:2f:
         f9:9d:74:b5:20:28:4a:6d:9e:92:8c:2f:55:7f:d9:68:9b:8b:
         37:32:49:0e:12:a9:a6:3b:60:a4:8f:78:23:34:43:7a:0b:44:
         c3:56:69:69:d1:38:6e:c3:27:f9:a4:d9:38:de:0f:21:52:6e:
         e5:b5:8c:d9:c9:31:27:89:f1:94:ea:27:79:0a:5f:c2:96:da:
         55:5d:81:b5:51:00:8b:eb:a6:18:39:cd:ad:54:32:0d:ce:f7:
         9e:52:67:e5:a0:44:84:04:40:5e:87:bb:01:69:d7:d2:28:99:
         23:3a:97:d1:c0:67:53:d7:46:50:d0:d4:74:50:26:0e:c2:4d:
         dc:d8:9c:14:94:98:c8:0e:36:98:ac:0e:21:f6:a3:7b:47:3f:
         a5:ae:e5:8a:32:96:8b:70:95:86:b3:0f:ef:92:1d:8f:16:af:
         f7:b0:e3:63:03:61:59:48:15:d7:fb:58:6f:e7:b6:73:5f:88:
         1e:db:11:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:45:34 2026 by rpki-client