Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File:                     ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier:          PUKq89zs4IcJKDpXsjtCvGwmmgBpL/O11mY/4eaEOFA=
Subject key identifier:   59:63:9C:ED:51:87:A7:E7:87:0E:7B:9B:74:09:46:81:BD:7A:66:36
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer:       /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial:       01987C09EB6C9D420D2EE85885E9254E805B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number:          0F0C
Signing time:             Tue 05 Aug 2025 21:01:21 +0000
Manifest this update:     Tue 05 Aug 2025 21:01:21 +0000
Manifest next update:     Wed 06 Aug 2025 21:01:21 +0000
Files and hashes:         1: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: BC3vPctA6Xtf2uZ2O59RsKj+coAaxOZKqBhdX8Rpk40=)
                          2: BFXbBXmgj_U02tRnQ5cIwT3U598.roa (hash: Y3AkRUWe6b+8HIEcIYVHhjtW0X1zsv/QwB6RX5f9lr8=)
                          3: KkxpxMmS8S1Mkz143AE6R41uFZE.roa (hash: eXPgSZI2TwSvGEkwL2CEgSDrAeeuar7/NsGxHBBximA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:09:eb:6c:9d:42:0d:2e:e8:58:85:e9:25:4e:80:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
        Validity
            Not Before: Aug  5 21:01:21 2025 GMT
            Not After : Aug  6 21:01:21 2025 GMT
        Subject: CN=59639ced5187a7e7870e7b9b74094681bd7a6636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:61:9b:65:fa:cc:5d:32:88:26:62:49:c0:ba:
                    29:82:14:10:db:02:2f:d7:9b:5e:4c:26:e8:00:f7:
                    29:62:b4:5c:8a:06:a7:7b:c1:cc:4f:a3:d7:25:56:
                    7d:71:58:f7:63:02:00:32:ea:6c:8a:4a:ff:77:e5:
                    25:24:cb:4c:02:18:c2:96:92:dd:80:46:e7:18:52:
                    70:c3:64:c6:81:a7:0b:a0:82:f4:bb:f0:4e:39:2e:
                    24:99:70:d3:92:9c:14:d1:a7:10:b2:8b:9a:ea:d1:
                    9c:7e:aa:85:26:9a:5d:b8:b3:fc:6a:92:b5:59:c9:
                    98:cc:96:15:f2:38:16:61:97:ce:4e:5a:80:12:ea:
                    e3:2a:17:e4:29:d1:72:eb:60:59:c8:6d:36:98:f5:
                    b4:06:cb:d7:95:b0:68:3d:ab:6d:95:73:68:f4:66:
                    dd:47:80:7d:80:1a:98:c1:81:6a:28:e9:2e:69:2f:
                    4b:66:2c:e1:49:ad:43:2b:db:66:85:06:68:56:74:
                    3b:42:62:e4:b0:ec:50:6e:56:b3:38:b0:6e:1d:0f:
                    a2:d9:f2:38:b0:fc:d9:10:f2:7e:91:ee:69:28:eb:
                    7c:18:09:ad:e6:5f:4f:81:47:73:2e:60:e6:6f:29:
                    6f:e4:60:f1:b0:25:26:3a:df:4b:e3:b3:7b:a6:48:
                    c6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:63:9C:ED:51:87:A7:E7:87:0E:7B:9B:74:09:46:81:BD:7A:66:36
            X509v3 Authority Key Identifier:
                keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:50:ea:71:a2:54:f4:3a:2e:77:05:b4:e0:8b:3f:97:e7:47:
         53:2f:9b:08:dc:8a:7f:dc:31:5e:9f:3a:f4:ad:50:0a:e4:3a:
         ae:1f:37:5c:13:81:58:77:f7:55:fa:59:5f:90:42:65:71:21:
         5a:70:e8:eb:76:fc:d0:0a:d7:02:24:75:f0:00:d1:fe:37:82:
         a6:24:76:75:7e:42:f3:fd:af:30:a5:d9:3e:79:e0:6c:14:f4:
         8a:53:7d:c1:85:b9:24:99:e8:a2:37:2d:92:c8:3c:0e:82:47:
         f6:1e:df:5d:3c:a6:75:1a:4f:76:fc:8d:aa:01:22:22:0c:15:
         17:08:a2:95:70:50:b0:21:d8:44:89:99:2f:8f:4e:61:44:89:
         a5:e3:59:45:6d:bb:d7:50:dc:ab:64:a0:af:0f:25:5c:56:4f:
         41:ae:5c:61:d3:15:a5:e7:80:68:40:87:9a:b5:42:25:d9:04:
         9d:53:61:20:4f:f1:3e:d1:c3:c7:4e:6e:c8:1a:be:b3:b8:ae:
         f2:e3:61:9f:00:74:77:fb:ed:1e:cb:a2:8d:47:27:14:f9:a5:
         a4:b4:59:35:87:c6:b0:1b:27:b1:83:e5:b4:65:e1:62:ec:87:
         85:46:e5:39:e7:d9:47:a3:54:c7:41:41:68:ac:13:83:a7:6f:
         e0:5c:47:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:44:32 2025 by rpki-client