Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
File:                     ArcBQMA9kMkS3xHw_YNySbfLLhI.mft (raw, json)
Hash identifier:          SDOAyI6S3kRRLlwD6K+toon8wQ7uw9cQuqTCdVrHE10=
Subject key identifier:   83:EE:DE:C8:A7:E3:4A:00:B5:69:CD:D2:18:DF:7D:D9:46:68:CD:14
Authority key identifier: 02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
Certificate issuer:       /CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Certificate serial:       01976A05AE761C075B35A83B1205C4667F85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
Manifest number:          1588
Signing time:             Fri 13 Jun 2025 16:00:46 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:46 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:46 +0000
Files and hashes:         1: ArcBQMA9kMkS3xHw_YNySbfLLhI.crl (hash: Uim3/ovpwGl2IRttaQx/2jSnuUqkn4Sy+AaJRnoXzVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:ae:76:1c:07:5b:35:a8:3b:12:05:c4:66:7f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b70140c03d90c912df11f0fd837249b7cb2e12
        Validity
            Not Before: Jun 13 16:00:46 2025 GMT
            Not After : Jun 14 16:00:46 2025 GMT
        Subject: CN=83eedec8a7e34a00b569cdd218df7dd94668cd14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a6:1f:27:7a:0e:07:d6:60:64:d4:cd:28:93:
                    bc:34:92:45:68:9c:72:35:32:1e:cc:2e:cc:7f:1b:
                    ae:28:59:62:25:e5:29:da:9f:a2:27:83:24:f2:06:
                    30:03:72:92:94:67:66:51:e8:2c:5d:59:08:9e:4b:
                    dc:77:76:cf:1d:7c:92:2e:e5:00:44:56:53:29:46:
                    27:96:1f:03:ae:92:ea:1d:97:2b:95:7f:cc:d9:f2:
                    bb:2f:3c:74:74:35:d8:18:2b:8c:bf:31:40:2e:74:
                    94:0e:a5:4d:32:23:d8:36:99:93:29:64:34:81:c9:
                    22:80:39:0c:72:b1:9f:3c:00:2a:7d:3d:e3:84:ea:
                    87:46:30:75:41:58:31:2a:8d:a8:0b:7d:ad:3c:53:
                    c9:82:a5:24:8e:de:58:98:f8:e4:80:9c:f0:49:e3:
                    41:5c:49:92:92:b8:b5:cf:d7:42:9f:bd:d3:07:e0:
                    50:22:a5:8f:cb:28:a1:8c:c8:73:d7:81:b2:c5:57:
                    0d:47:b5:11:b2:20:a5:e0:fe:7c:38:ea:54:0b:9f:
                    19:29:a8:93:e6:6d:4e:05:c5:c1:33:19:9b:2a:b2:
                    4d:22:cd:87:16:2d:4d:e7:76:c0:7d:a2:59:67:65:
                    7c:0e:eb:d6:9d:91:fc:19:bb:72:aa:50:8f:c3:44:
                    d7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EE:DE:C8:A7:E3:4A:00:B5:69:CD:D2:18:DF:7D:D9:46:68:CD:14
            X509v3 Authority Key Identifier:
                keyid:02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ff:5b:6c:38:f0:aa:e6:8d:b4:58:e3:73:04:ee:f8:83:fb:
         d5:87:9b:60:49:ed:8f:bf:a8:46:42:48:48:b3:91:7e:c6:b4:
         78:53:cf:69:ab:59:25:23:7e:71:19:fb:19:bb:0b:9e:8e:0e:
         e5:f7:df:39:03:c6:a0:29:e2:ee:fd:67:c7:1c:b3:b1:2c:7e:
         db:ff:9b:01:2e:d2:32:4e:b0:8d:c2:b5:98:d1:32:12:56:bb:
         bc:e4:ca:70:ff:5b:d7:3a:d1:5a:ce:5c:27:1f:09:08:0b:8c:
         d6:98:cf:fe:80:ee:b1:36:ed:b4:e4:08:9b:97:52:70:f3:a5:
         85:35:0c:05:d9:5b:40:3a:bd:54:1b:57:7d:fc:37:91:a5:80:
         13:02:28:a9:2b:57:dd:40:49:3f:6e:cc:ff:d9:c5:72:85:fd:
         14:fb:5d:bd:c1:11:69:4d:c5:d9:5b:c2:18:32:92:77:e1:99:
         f4:68:de:ca:46:2f:e4:3f:51:ab:e3:0d:de:de:67:97:f3:d9:
         ee:d5:85:5e:8a:6e:cf:26:de:e8:46:36:ab:03:35:b8:ec:df:
         05:4c:1c:b6:d3:db:ea:77:a7:33:bc:5a:73:7d:64:3b:5d:5a:
         2a:43:60:86:fa:f0:65:fb:d8:6f:18:ad:14:37:18:95:57:b3:
         be:a0:04:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:01 2025 by rpki-client