Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
File:                     ArvU-GWhLXmgmgNEhs5hugI4gsc.mft (raw, json)
Hash identifier:          KPdFzuOd9dCJ0Zbk77kUy10rUKdTbqsZEoHGe4XMnq0=
Subject key identifier:   BB:C2:EA:42:72:BB:4B:B3:FF:12:9B:E3:D0:34:48:ED:73:C7:72:54
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Certificate issuer:       /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial:       0198941233EF11D21791C02038DD6F3141C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
Manifest number:          1661
Signing time:             Sun 10 Aug 2025 13:01:17 +0000
Manifest this update:     Sun 10 Aug 2025 13:01:17 +0000
Manifest next update:     Mon 11 Aug 2025 13:01:17 +0000
Files and hashes:         1: 06SLQj8M0JloqOLLSJQsS9Mvvt8.roa (hash: pOdJZOCbzwERcaHXTxoPc47TuC69tCgfLF74nW59Yqg=)
                          2: 6hP3YFxQ2zc1yxq1Yg-S-ttZkIE.roa (hash: Ed6WzwrI1cGg+JnmB5cY91VGvzN+Zax7iz4h1sld3DE=)
                          3: AIbMivTzigEw-GugeqJKqc642o8.roa (hash: nvF24+uIu7BukwLpQQuMp8PSZkNr3wMfYSYXJqQlLck=)
                          4: ArvU-GWhLXmgmgNEhs5hugI4gsc.crl (hash: IFNSbjLgBFi+V9GTyqzy5p3re25JvdiBsx/7kSWcJ4M=)
                          5: jMA9c4tYB9OWs7SxOnS4hAfxG_0.roa (hash: hG++HUML6bsn16/tDvQN2S8grWblRsqRCPRXMdONRJg=)
                          6: kU4sWVvEXvpfFIWiAeVwr_LDqWI.roa (hash: WPm3b9qQQzxthupDsTzro6o6AJsuP42XyxlUTyGK+5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:12:33:ef:11:d2:17:91:c0:20:38:dd:6f:31:41:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
        Validity
            Not Before: Aug 10 13:01:17 2025 GMT
            Not After : Aug 11 13:01:17 2025 GMT
        Subject: CN=bbc2ea4272bb4bb3ff129be3d03448ed73c77254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:14:c4:65:4d:b6:5e:bd:4a:a7:e8:91:25:d1:
                    87:45:70:34:1f:36:90:85:ba:2d:bc:af:c2:ce:f8:
                    2b:67:a9:2e:37:7b:19:2a:af:d4:c1:8f:4b:fd:7e:
                    03:5c:7b:85:17:0a:72:a2:68:41:aa:62:df:62:22:
                    03:07:70:c0:a6:4d:7d:fd:ec:fa:5d:17:f3:c4:46:
                    76:17:e6:0b:81:25:32:e9:12:80:ba:57:4e:3a:3f:
                    a8:9f:03:8c:0e:12:14:1b:fb:cd:69:fb:7d:67:2e:
                    60:2c:d5:af:93:0e:22:b2:d9:bd:0f:d5:88:c7:e3:
                    56:16:20:a4:f9:4d:43:0d:d0:23:9e:06:4d:5f:a5:
                    75:53:1d:d6:dd:79:7a:bf:04:ac:e3:62:4e:f7:c8:
                    7e:ce:da:77:26:c9:37:86:76:af:cc:de:a1:e5:07:
                    b6:c6:54:06:ed:e3:77:47:73:e7:e4:c8:72:e5:01:
                    76:4a:42:eb:e4:85:88:57:37:82:f9:f6:a7:f1:7e:
                    26:57:77:75:93:37:4d:c6:4a:f9:7b:97:bb:fe:11:
                    b5:ca:9a:2b:e9:33:29:55:38:de:08:ae:87:9c:85:
                    c0:3b:cd:0f:71:63:a1:e2:da:25:ec:23:ac:aa:f1:
                    78:73:c3:11:88:bb:77:5a:bd:ef:a0:90:f9:8e:9e:
                    f3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C2:EA:42:72:BB:4B:B3:FF:12:9B:E3:D0:34:48:ED:73:C7:72:54
            X509v3 Authority Key Identifier:
                keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e4:09:c4:a5:51:28:06:17:f0:b8:d6:ab:94:3f:0b:a9:7f:
         54:c7:ca:07:b3:7f:d8:ae:c0:e4:44:82:11:cd:8c:81:53:fb:
         1c:f6:6e:54:e9:6b:aa:f0:21:92:e2:b8:9f:0a:1e:70:bf:bf:
         a5:fa:19:d2:b7:fb:79:77:fb:7b:52:59:40:15:40:f7:48:c1:
         1c:41:61:cc:4a:af:26:e7:56:a4:b8:c1:d2:3b:b1:f4:bc:40:
         ea:3b:3b:f2:59:83:c2:dc:5c:f3:6b:de:be:47:68:b6:94:4b:
         0a:5d:79:ee:79:88:19:5b:61:49:8b:8a:3b:1d:6c:97:9f:51:
         b5:ea:a1:49:54:5c:a3:0c:81:20:a4:f3:76:fa:ae:23:7b:86:
         f3:07:77:7e:ac:04:b8:f2:ed:96:6d:08:43:aa:ce:d7:af:5d:
         c1:be:14:2e:41:e0:03:26:2a:91:d9:7b:1a:e1:58:bc:48:37:
         8c:f7:a1:30:ff:92:97:be:1b:5e:fe:e3:62:b4:ea:d7:41:1b:
         14:b7:26:0b:11:f3:bf:3f:c9:3c:00:ec:24:1f:66:cd:0f:dc:
         4b:55:bf:55:82:e0:f4:b4:70:67:57:13:c0:7b:bb:19:22:6b:
         cf:68:2c:9e:48:fa:9b:9e:70:06:82:2b:31:6c:b1:2b:5d:1d:
         7b:c2:b9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:59:01 2025 by rpki-client