Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
File:                     ArcBQMA9kMkS3xHw_YNySbfLLhI.mft (raw, json)
Hash identifier:          +xXdZrJaewD6VdDxG7DCNh04/hJAtsyTPFWX35f9GhA=
Subject key identifier:   12:53:B7:4C:4B:EF:03:94:C8:89:A5:93:47:43:2B:D4:B4:AD:CB:E7
Authority key identifier: 02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
Certificate issuer:       /CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Certificate serial:       019E303BDE5FC1572A3BFDBC989443CED6C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
Manifest number:          190A
Signing time:             Sat 16 May 2026 10:01:30 +0000
Manifest this update:     Sat 16 May 2026 10:01:30 +0000
Manifest next update:     Sun 17 May 2026 10:01:30 +0000
Files and hashes:         1: ArcBQMA9kMkS3xHw_YNySbfLLhI.crl (hash: 9hwRxrRyOtrj6RIMDTLpppYWFb0CivwSVCu1I6wkv2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:de:5f:c1:57:2a:3b:fd:bc:98:94:43:ce:d6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b70140c03d90c912df11f0fd837249b7cb2e12
        Validity
            Not Before: May 16 10:01:30 2026 GMT
            Not After : May 17 10:01:30 2026 GMT
        Subject: CN=1253b74c4bef0394c889a59347432bd4b4adcbe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:14:dd:5f:62:44:9b:63:6b:4c:ee:30:55:06:
                    f1:3b:65:7a:2e:e8:a2:fe:12:da:96:21:b6:91:53:
                    6d:98:3f:a5:10:9c:06:7f:a4:e1:61:8c:0b:8a:9b:
                    a7:76:c7:45:a8:a9:f6:4f:d4:6b:f1:7d:54:bb:bf:
                    83:91:38:9f:7a:d4:86:e7:c4:97:e1:e3:cb:db:26:
                    4a:bf:41:f3:a6:aa:1d:21:42:3a:8e:91:68:83:02:
                    4b:d6:07:73:18:8f:a8:29:81:ba:9c:37:54:ca:96:
                    69:73:f4:bc:d8:69:c9:78:e7:46:49:c5:53:a2:b0:
                    50:ae:57:18:36:a5:d9:58:32:ad:28:b8:a1:9f:3e:
                    09:c1:60:aa:79:50:63:45:9a:1b:dd:0b:ba:54:dd:
                    ba:44:e9:43:b4:30:16:fa:9d:76:26:4d:c3:3d:cb:
                    02:64:30:57:29:94:9f:40:61:d7:09:ca:c2:a8:ec:
                    c3:71:6a:b6:9c:0f:8e:36:54:c8:34:e3:6a:49:82:
                    b5:91:54:af:73:71:17:00:00:29:f5:f0:b3:cb:ab:
                    6b:c3:be:81:b6:54:df:53:db:46:62:b5:6e:24:d2:
                    a4:74:8d:69:f9:e4:77:e3:3d:ce:c8:de:63:a6:dd:
                    21:00:b9:a4:6c:10:c4:3a:37:cf:73:85:65:71:3f:
                    c1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:53:B7:4C:4B:EF:03:94:C8:89:A5:93:47:43:2B:D4:B4:AD:CB:E7
            X509v3 Authority Key Identifier:
                keyid:02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:fb:b3:89:ee:7a:6e:0f:31:46:3b:67:0d:75:01:7f:16:26:
         eb:1f:92:17:11:28:e4:e0:47:6d:90:95:ed:b8:1f:12:96:31:
         29:79:48:ad:f4:d4:16:12:02:02:eb:73:9c:2e:06:8d:22:ae:
         76:82:49:08:a5:e5:02:f9:6c:59:ea:4e:c4:33:87:71:21:06:
         ef:ca:61:7f:79:b4:4b:9f:90:ae:fa:e8:4a:7c:25:33:01:06:
         18:d5:4a:53:33:b0:71:2f:f3:1d:a9:fc:10:67:6a:af:ec:96:
         87:3c:34:73:76:be:1f:8c:3c:7a:12:6c:99:6d:1c:87:ad:01:
         c5:b5:8a:f0:bc:f7:53:39:d0:1e:56:29:f4:03:9c:0b:db:0a:
         c2:16:d0:2c:21:dd:8f:7e:e0:b6:47:7f:52:c9:cc:31:dd:d4:
         a9:33:60:71:81:a6:54:82:e6:36:94:39:ba:c0:4d:63:76:68:
         a5:6c:12:dc:3f:f6:e9:b3:e0:37:0d:56:63:f4:7a:ae:99:83:
         28:58:29:bc:eb:85:37:21:1c:7b:b0:ea:0a:9c:ab:63:28:0d:
         84:df:62:05:39:be:5b:60:82:e5:22:5e:ac:34:f0:ab:ba:98:
         d4:0b:42:ee:7e:2a:15:c2:35:b8:c0:33:76:2f:00:f0:f6:80:
         01:18:3e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:05 2026 by rpki-client