Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
File:                     ArcBQMA9kMkS3xHw_YNySbfLLhI.mft (raw, json)
Hash identifier:          r/b5IxPfarlnSeRXdH7qgUestqOdSxV9F2fa9bq18yo=
Subject key identifier:   46:1B:F9:17:54:60:76:49:BD:2B:17:8B:BD:F4:83:9D:6B:01:DE:C7
Authority key identifier: 02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
Certificate issuer:       /CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Certificate serial:       019749312175F8CA4870F1E0355DB0365892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
Manifest number:          1577
Signing time:             Sat 07 Jun 2025 07:00:45 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:45 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:45 +0000
Files and hashes:         1: ArcBQMA9kMkS3xHw_YNySbfLLhI.crl (hash: /48GMRyH/0dDeq6YvW+80TXRYRar6Qzp/6muWc2wOhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:21:75:f8:ca:48:70:f1:e0:35:5d:b0:36:58:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b70140c03d90c912df11f0fd837249b7cb2e12
        Validity
            Not Before: Jun  7 07:00:45 2025 GMT
            Not After : Jun  8 07:00:45 2025 GMT
        Subject: CN=461bf91754607649bd2b178bbdf4839d6b01dec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:c6:20:97:64:1d:05:bb:3f:fa:18:52:bb:
                    06:c9:56:94:2c:44:01:7c:13:ed:9d:64:71:a4:32:
                    96:f9:34:ff:f7:26:3c:6b:50:82:f5:d2:a9:12:99:
                    49:11:21:76:31:76:ec:c7:02:2a:c3:75:2c:bb:81:
                    26:2f:0a:67:77:84:c2:df:04:ba:43:2c:2c:bc:31:
                    70:73:b6:91:05:f6:96:29:4a:b8:18:3d:69:27:24:
                    62:3f:14:0b:42:fd:68:99:48:78:cf:fe:a2:4b:9c:
                    71:9d:4f:c1:59:34:b9:2e:71:99:10:f5:e6:5e:ca:
                    66:33:43:52:3a:b4:ed:f4:1e:e1:ca:dd:49:39:41:
                    7d:ed:7f:2d:84:6e:4a:37:c6:25:e7:ec:ed:1e:00:
                    80:66:b2:4f:78:21:9c:a5:af:94:bb:56:2e:55:a7:
                    a1:03:98:5f:14:7f:a9:78:03:91:3d:fd:13:1a:c8:
                    31:c4:b4:66:9e:ad:f8:f4:1a:de:91:02:79:4f:e0:
                    54:26:37:11:10:02:d3:fa:91:ff:8e:e5:a1:86:d9:
                    de:d2:30:cf:23:1a:ec:7d:30:a4:2c:93:17:90:5a:
                    73:70:c3:db:7a:f7:db:88:4f:77:f4:03:1b:0e:8c:
                    8a:01:0f:35:30:25:2d:7f:f4:fa:25:ee:de:fa:4c:
                    dc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1B:F9:17:54:60:76:49:BD:2B:17:8B:BD:F4:83:9D:6B:01:DE:C7
            X509v3 Authority Key Identifier:
                keyid:02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:55:cb:e7:1f:da:fe:58:d5:f9:f9:53:f5:83:8a:fe:f2:9d:
         da:90:d4:03:e2:d1:bf:08:85:24:9a:d2:22:e2:c3:1e:a1:52:
         0d:d7:52:bb:d8:42:13:9b:20:3c:ec:53:d4:e0:48:39:2d:74:
         b1:52:14:31:a1:13:e6:da:31:37:a9:d9:1f:95:4b:81:bf:fc:
         b0:77:ce:4f:67:66:98:34:f3:73:56:0d:57:3d:5b:ac:82:94:
         26:37:cd:af:a2:a2:1b:c5:60:89:3e:19:3a:90:26:43:88:fb:
         b7:5e:cc:3b:3e:51:e5:29:a6:d3:4a:1d:19:ac:05:15:83:36:
         b3:26:b2:80:82:69:f0:20:da:a1:52:07:01:79:45:82:18:22:
         81:7d:5c:26:fa:50:77:cc:84:63:20:ea:ba:ab:14:49:8a:21:
         ce:0c:e2:04:21:30:68:8e:03:f6:a2:9c:ae:54:04:85:b9:99:
         1c:cf:da:aa:26:8f:3d:5c:8f:1d:6e:b9:9b:0d:a5:7b:0f:9c:
         a4:75:9e:aa:d3:4d:4f:72:00:85:32:ca:5d:68:1b:be:9a:b4:
         a2:dd:f9:48:ea:b4:fc:c5:2d:8e:20:94:a9:93:7a:ea:c2:76:
         9c:8b:a5:67:04:63:eb:d6:1b:9a:89:a0:84:c9:ce:dc:0a:3f:
         42:19:9c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:29 2025 by rpki-client