Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
File:                     1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft (raw, json)
Hash identifier:          /jXZZdpYUjHMrE9JfNv1ox0WcSW8nz46O7MA/V+ExJk=
Subject key identifier:   86:8A:C7:92:AD:24:D8:67:45:E9:FA:7B:21:CE:59:CC:25:9E:AA:C8
Authority key identifier: F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21
Certificate issuer:       /CN=f80aef4640437f2307f79871bfb632bb8bddad21
Certificate serial:       019FAABEB1DCA14B04AF4B7946A314E90378
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
Manifest number:          04C4
Signing time:             Tue 28 Jul 2026 22:00:51 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:51 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:51 +0000
Files and hashes:         1: 1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl (hash: +qBu0SnFYxfAfRifCCjk0n5jcaoRWrbiFvr8VPeceLg=)
                          2: l8PTvEKg1q3xibFISiKYXuYoQzg.asa (hash: EW6iPD7DNIHaYH6kQZEbC7i0XvcuUJ+cnKRZbNJcwko=)
                          3: zjiuWoSKLx6AH4I2Xm1CmHapSEk.roa (hash: Eq7t794MZuOUyh5WfvsvEhySf6YH7sOyOdd9K7whuQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:b1:dc:a1:4b:04:af:4b:79:46:a3:14:e9:03:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80aef4640437f2307f79871bfb632bb8bddad21
        Validity
            Not Before: Jul 28 22:00:51 2026 GMT
            Not After : Jul 29 22:00:51 2026 GMT
        Subject: CN=868ac792ad24d86745e9fa7b21ce59cc259eaac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fd:30:29:91:42:b9:77:2e:da:bb:e3:07:82:
                    55:c2:f8:09:e5:dc:4e:7a:a2:30:3f:4c:f5:b8:51:
                    e1:9f:7d:7e:55:17:89:05:c8:58:0c:4e:0d:4a:58:
                    b5:45:62:df:45:e7:56:13:9c:c2:3d:2c:10:17:cd:
                    94:26:c9:8a:88:3e:af:b3:0b:db:44:b9:41:61:78:
                    39:20:69:c6:60:04:9f:d4:76:14:4a:b1:91:5e:3f:
                    4d:90:2c:b8:97:06:60:eb:32:49:55:35:60:b2:72:
                    3c:a6:38:fb:57:89:da:15:df:f7:44:3b:d2:f8:7c:
                    0c:fc:ee:dd:d0:b0:76:7e:45:0b:af:ef:fc:8b:60:
                    0f:19:81:8d:ae:b7:62:0a:1c:06:50:d3:18:3a:51:
                    28:44:ab:00:3d:f8:dc:90:cc:01:ed:ff:2f:6f:70:
                    c8:31:53:94:56:15:39:a0:d8:8b:a5:b0:52:bf:60:
                    60:b2:ec:99:2e:e1:55:b4:b1:76:96:e6:df:cd:2d:
                    03:5a:ec:cb:c9:34:29:df:49:cb:46:b7:f4:78:6c:
                    17:b6:38:b9:df:7a:0f:4d:07:2c:35:a5:1d:94:5e:
                    63:79:20:3f:1f:46:03:76:37:38:b1:5c:34:5d:90:
                    f5:1b:df:95:a1:e0:43:d8:0c:2a:73:1d:ea:60:ff:
                    98:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8A:C7:92:AD:24:D8:67:45:E9:FA:7B:21:CE:59:CC:25:9E:AA:C8
            X509v3 Authority Key Identifier:
                keyid:F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ad:00:01:65:bf:59:7c:b6:d9:0e:20:1f:d5:13:24:27:ae:
         0a:a3:c0:4a:1c:d5:fe:0a:95:5a:9d:d6:8a:6f:92:a1:e8:e5:
         b4:25:82:5a:9a:cc:60:f6:3d:11:e3:4e:e8:1b:e0:79:b9:cf:
         dd:c5:ff:bc:fa:ad:34:ca:9f:86:b2:7a:4b:58:3f:c0:23:19:
         e9:f9:51:df:b0:f7:13:f4:92:94:76:f9:0e:6f:d0:ac:71:64:
         c8:e6:70:48:9c:08:82:ca:a3:2c:bb:4c:63:a4:15:53:6b:a2:
         0b:76:91:b4:1c:cd:37:cd:ac:00:44:54:45:77:64:24:a6:20:
         fd:fd:4c:74:87:0c:d2:78:93:e6:f7:77:89:36:88:9d:f2:13:
         90:ed:a5:2b:da:41:3e:85:cd:2b:f3:7a:9c:91:5c:ea:7f:bb:
         19:dd:d9:bc:05:44:82:ce:67:25:19:5a:44:a8:65:48:22:db:
         4d:57:dd:b0:a0:42:c2:44:ef:fe:b8:b1:79:d1:c9:22:47:ae:
         f4:fa:6b:f2:c9:d8:2a:2a:de:6e:29:a6:4c:64:4c:37:4f:3e:
         92:45:a7:9e:e4:be:9b:1a:b8:4c:ee:50:c8:e9:7e:83:78:99:
         d6:dc:f8:d2:85:d8:4e:3f:89:cb:a0:78:d9:70:e8:de:67:9f:
         8d:ef:50:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:14:46 2026 by rpki-client