Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
File:                     ArvU-GWhLXmgmgNEhs5hugI4gsc.mft (raw, json)
Hash identifier:          v4iF0Gdi654F20q15q8N+fws3O+pQjBvblH6OoJqiyc=
Subject key identifier:   0A:23:60:FC:83:13:29:26:D6:EA:81:33:9D:5E:D5:18:BC:DE:2A:0F
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Certificate issuer:       /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial:       01A171DCCA93F28EDB6B80BAF85FBD73D020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
Manifest number:          1AF9
Signing time:             Sun 25 Oct 2026 07:00:57 +0000
Manifest this update:     Sun 25 Oct 2026 07:00:57 +0000
Manifest next update:     Mon 26 Oct 2026 07:00:57 +0000
Files and hashes:         1: ArvU-GWhLXmgmgNEhs5hugI4gsc.crl (hash: gXAqevjDEQbgqwNZRA4DV15Qswg73lZj+h59WwnOeRk=)
                          2: IDpslbcDriUFsYX-TmbeGovsaLQ.roa (hash: cPSmDVUEQwcs3c3RUxKiz7Kiswc6P29foMyjSSIWLdE=)
                          3: iE7v6VMVPWYKTYZG81Qa4S2dld0.roa (hash: x5b7cUQ7z0QouQRX5TNEXKjigPhuKTxEn6jRVfHPZag=)
                          4: sg07i6-JOjug3g7DuHSiaVsLOnY.roa (hash: e70gFTBvNZi7n90fqu/n/AeaSK7I4IipWoR1Qkkc8Mo=)
                          5: w2wFQoMSS60GTVnI8PLNmdsK0ok.roa (hash: Y8P/VuPZXXoVGNovDAVq15qj7dnBSmndNnHWk+99Tnw=)
                          6: yQttOsQxW36OS-VvRBzTPm-A63M.roa (hash: qt8FgnFLRhAmKzXjcfKvUfLhcAOTBrwQNF5TJ1+JFSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 07:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:71:dc:ca:93:f2:8e:db:6b:80:ba:f8:5f:bd:73:d0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
        Validity
            Not Before: Oct 25 07:00:57 2026 GMT
            Not After : Oct 26 07:00:57 2026 GMT
        Subject: CN=0a2360fc83132926d6ea81339d5ed518bcde2a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ed:de:93:2f:3a:73:32:f2:82:3d:33:16:ff:
                    cb:63:ed:ef:f9:21:a2:d7:c0:13:f2:00:e9:29:52:
                    cc:6e:1d:46:28:42:59:d7:62:65:c9:c0:3a:2b:ce:
                    59:88:a4:82:3b:72:3f:ba:1f:0f:4f:4f:76:31:5a:
                    67:bf:33:6a:01:bb:66:7f:6c:20:8d:62:ef:94:36:
                    15:02:4e:7e:31:49:6e:2c:d2:f2:59:a2:1f:af:a7:
                    27:a1:72:ce:0d:8a:9c:77:49:0f:f3:e7:a7:89:1d:
                    1e:cc:a5:ce:1f:6a:b5:d9:90:de:01:e9:54:5f:6c:
                    6c:f6:42:9a:16:f0:80:ba:ad:59:81:45:07:4a:0e:
                    27:92:46:2e:86:e7:0c:27:b4:fb:1f:e9:30:a6:e6:
                    73:1c:67:3a:4d:3f:ad:be:6d:15:ad:cc:4d:46:f2:
                    c7:e6:60:a1:a7:89:29:3d:8d:f0:0b:a9:a3:93:5c:
                    43:6b:c8:56:f7:11:af:28:ec:42:11:9a:e5:c6:4f:
                    cb:41:99:dc:94:b7:b7:41:44:f8:b9:46:e9:82:c8:
                    47:d7:7e:eb:14:df:ae:e2:62:42:74:73:a1:b6:ca:
                    48:e2:1a:1a:2a:f4:5a:41:2d:fb:02:e5:0d:ca:67:
                    88:2b:3a:3a:e8:11:e5:ef:0d:e1:4c:f2:2f:a7:3b:
                    9d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:23:60:FC:83:13:29:26:D6:EA:81:33:9D:5E:D5:18:BC:DE:2A:0F
            X509v3 Authority Key Identifier:
                keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:be:9d:6e:a8:d9:e7:be:1b:d5:1e:8b:fb:8a:ba:55:e3:4e:
         c3:33:44:a2:f0:79:58:49:1e:bf:77:eb:77:2f:1c:98:cb:5e:
         57:1b:e4:d4:98:34:78:6a:4d:c5:03:dc:12:84:de:ca:9a:ac:
         7f:5b:70:3a:56:0a:68:da:c8:49:a7:e4:1e:3c:55:f8:80:40:
         54:26:97:34:38:d1:a2:64:f8:74:19:93:c8:9a:7d:72:21:e9:
         3b:6b:fe:89:d5:86:c9:62:10:93:7d:fc:08:8c:66:74:87:8d:
         ef:36:b6:d6:77:99:7c:af:7a:d0:a8:f2:73:a2:cd:79:30:59:
         51:36:21:63:ea:83:65:b9:28:d0:c3:90:8c:69:35:00:4c:88:
         59:df:ae:37:82:ef:95:81:c2:9a:84:3a:1e:2d:52:64:90:a7:
         16:bd:64:06:82:17:5d:56:4a:88:77:53:47:f4:fa:39:45:5d:
         7f:56:6c:bd:58:be:b7:f2:1a:aa:9f:30:c6:5b:81:65:a0:22:
         42:95:86:30:e6:47:d2:a0:15:a8:92:5f:5a:84:4e:5f:33:44:
         77:f7:dc:b3:e8:54:52:5e:03:a9:06:1c:7b:3c:b7:dd:9c:32:
         6b:63:e8:06:f2:82:c4:27:56:cd:d4:fa:74:55:d3:78:b0:6a:
         f7:5f:2c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:34:17 2026 by rpki-client