Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
File:                     ArvU-GWhLXmgmgNEhs5hugI4gsc.mft (raw, json)
Hash identifier:          kdsy6BMUv7ocKiu5Lb1iGlrxE+rXAekQZ3c9Yf5JlWE=
Subject key identifier:   72:B8:01:18:4F:C6:D0:C7:4C:62:88:F6:6B:53:31:B2:75:A1:4B:44
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Certificate issuer:       /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial:       01A06D27687856F4C939A80AF21EFD906F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
Manifest number:          1A72
Signing time:             Fri 04 Sep 2026 16:01:34 +0000
Manifest this update:     Fri 04 Sep 2026 16:01:34 +0000
Manifest next update:     Sat 05 Sep 2026 16:01:34 +0000
Files and hashes:         1: ArvU-GWhLXmgmgNEhs5hugI4gsc.crl (hash: /YpB4yWNcpTRSAGKfVHnnPfY1qJKZMYh4aJxVH2pbKE=)
                          2: IDpslbcDriUFsYX-TmbeGovsaLQ.roa (hash: cPSmDVUEQwcs3c3RUxKiz7Kiswc6P29foMyjSSIWLdE=)
                          3: iE7v6VMVPWYKTYZG81Qa4S2dld0.roa (hash: x5b7cUQ7z0QouQRX5TNEXKjigPhuKTxEn6jRVfHPZag=)
                          4: sg07i6-JOjug3g7DuHSiaVsLOnY.roa (hash: e70gFTBvNZi7n90fqu/n/AeaSK7I4IipWoR1Qkkc8Mo=)
                          5: w2wFQoMSS60GTVnI8PLNmdsK0ok.roa (hash: Y8P/VuPZXXoVGNovDAVq15qj7dnBSmndNnHWk+99Tnw=)
                          6: yQttOsQxW36OS-VvRBzTPm-A63M.roa (hash: qt8FgnFLRhAmKzXjcfKvUfLhcAOTBrwQNF5TJ1+JFSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:27:68:78:56:f4:c9:39:a8:0a:f2:1e:fd:90:6f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
        Validity
            Not Before: Sep  4 16:01:34 2026 GMT
            Not After : Sep  5 16:01:34 2026 GMT
        Subject: CN=72b801184fc6d0c74c6288f66b5331b275a14b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f1:5e:b7:cc:55:ae:cd:60:c7:02:44:86:2b:
                    a9:89:2b:b5:9c:2d:f5:98:b3:36:b0:1f:c1:07:9a:
                    92:81:0d:b8:b2:95:55:45:6c:07:f1:c2:4d:b9:24:
                    6a:72:eb:98:9b:97:24:40:2e:bf:36:1f:ab:4d:e4:
                    18:4a:9c:13:c1:49:43:6f:4c:c3:fd:8f:89:ac:a8:
                    99:9a:e7:3c:f0:99:80:c6:4c:71:21:30:2d:ef:57:
                    f5:2e:c5:2d:53:24:a3:78:4b:b9:7f:12:29:6d:4b:
                    fd:23:b0:84:20:ef:b8:f4:18:a4:80:d9:4a:94:59:
                    cd:15:e2:84:e0:2e:8e:d2:57:a5:40:18:ba:be:6b:
                    dc:a8:fd:ea:fe:9d:7b:09:75:bd:1d:57:82:a0:f8:
                    21:b7:55:65:7a:a4:f0:8d:01:a2:84:ec:79:f8:d0:
                    75:a3:f8:73:6d:aa:62:75:c9:97:76:c3:56:af:b5:
                    4e:70:2c:5b:1b:77:48:78:90:88:ae:ed:86:dd:e9:
                    98:4f:c8:2d:f6:24:9e:b2:cf:0c:0e:80:6b:ae:53:
                    b9:83:ed:72:95:94:87:1e:e6:e4:e7:f0:17:2c:d6:
                    06:ba:ec:86:89:a3:9c:f6:8f:79:40:df:cf:6a:57:
                    f4:1b:6b:a7:1b:b1:40:78:7b:13:ec:d5:63:12:e0:
                    a9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B8:01:18:4F:C6:D0:C7:4C:62:88:F6:6B:53:31:B2:75:A1:4B:44
            X509v3 Authority Key Identifier:
                keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:40:ec:ec:9c:c0:a5:f8:84:23:9c:04:4e:af:00:d5:bf:63:
         2e:71:8d:e2:ae:e4:a8:2a:39:db:a9:d1:6b:15:e3:fc:72:2c:
         8d:7d:41:22:c2:59:f7:61:e6:96:e0:87:0a:28:15:04:a2:51:
         23:09:2a:99:8b:22:1c:6d:54:9e:63:82:26:8a:be:02:24:23:
         ea:19:d0:9a:d0:da:02:64:4a:25:6c:09:9b:99:8e:56:93:4d:
         0c:63:07:a0:63:0f:c0:a7:9e:28:9b:36:1e:33:ae:ec:b5:64:
         32:f9:ee:79:54:57:76:f9:d2:6b:d9:cd:27:19:18:84:64:81:
         a0:08:01:e1:b3:2e:d9:db:27:29:32:f8:a8:63:ea:a9:54:ba:
         b9:1a:eb:f3:8c:1f:c2:8d:e9:0e:5f:a7:cb:8c:69:b0:59:d0:
         50:72:86:88:53:e8:82:41:82:c5:d7:26:87:75:4b:70:9f:a4:
         60:7e:9c:d8:89:a8:93:a2:8e:98:2b:15:2d:ec:e6:1c:1e:a7:
         c1:f7:84:b2:d4:a8:07:ad:51:7c:69:bd:0b:77:9a:1f:03:bb:
         5e:d0:c0:41:b1:d1:4d:96:fd:64:2a:10:15:c7:2a:35:ee:f3:
         01:b8:a9:6b:11:1c:21:7b:eb:f7:80:90:28:4c:0e:69:f8:51:
         85:28:76:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:27:59 2026 by rpki-client