Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
File:                     tvpArb6TaxhPhEWGoPkNEjC2hTc.mft (raw, json)
Hash identifier:          WMYUP3gnKb5xaWLd1nCUEixp+7MUR5gV1nDFAw2pchM=
Subject key identifier:   87:FB:26:A7:FC:4E:49:84:6E:A1:3E:C4:DC:91:9A:DF:79:2F:6F:55
Authority key identifier: B6:FA:40:AD:BE:93:6B:18:4F:84:45:86:A0:F9:0D:12:30:B6:85:37
Certificate issuer:       /CN=b6fa40adbe936b184f844586a0f90d1230b68537
Certificate serial:       01989E95378FF98807E5E579D6D211D94BF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
Manifest number:          0E22
Signing time:             Tue 12 Aug 2025 14:00:35 +0000
Manifest this update:     Tue 12 Aug 2025 14:00:35 +0000
Manifest next update:     Wed 13 Aug 2025 14:00:35 +0000
Files and hashes:         1: 7XTv9hOTaLviFUQwCXilEpYpbHU.roa (hash: 4LkrU5FXjLzeM7TTaFB6Rd3GTMio8T94peCl7zXgOHM=)
                          2: tvpArb6TaxhPhEWGoPkNEjC2hTc.crl (hash: OtNEORqviVM6dJY/w5DLlvESAtdSh3OzSMVbJCNsF8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 13:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9e:95:37:8f:f9:88:07:e5:e5:79:d6:d2:11:d9:4b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6fa40adbe936b184f844586a0f90d1230b68537
        Validity
            Not Before: Aug 12 14:00:35 2025 GMT
            Not After : Aug 13 14:00:35 2025 GMT
        Subject: CN=87fb26a7fc4e49846ea13ec4dc919adf792f6f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:63:61:38:ad:d2:36:91:35:85:b2:5a:50:03:
                    71:fb:65:8d:e5:47:3b:c2:cd:be:87:ef:f3:75:b3:
                    bb:f7:79:d4:f1:b0:1f:44:47:94:c6:ed:32:0d:d3:
                    37:66:c8:4c:64:0f:ab:7c:70:98:31:b2:2c:42:28:
                    b6:c9:39:84:fa:4f:dc:a7:51:24:05:58:03:c5:07:
                    db:f1:23:b3:82:f5:83:c8:0b:bc:f7:0b:a2:6d:fb:
                    b3:f1:66:63:6b:3a:53:89:12:ff:01:60:8e:d2:4c:
                    bf:4c:0d:9a:69:f5:45:54:2f:71:63:d9:4b:ec:75:
                    b2:94:81:16:e2:9e:15:60:14:2c:a6:f2:12:5a:91:
                    70:9d:05:69:31:0e:8f:a3:b4:7a:2a:21:00:af:6c:
                    1c:88:9d:73:e0:3c:a0:a6:9e:0b:90:71:1e:80:d0:
                    a2:e5:8a:4f:b6:1f:f0:d9:78:d9:56:3b:c2:7b:fb:
                    05:6d:70:20:d8:af:77:a3:66:36:48:63:f9:56:34:
                    e4:a0:43:28:a0:dc:9f:24:83:b6:1a:3c:05:ad:b7:
                    69:1e:30:cb:58:8d:c7:86:4c:38:ad:a4:e1:46:5c:
                    a9:89:02:b7:67:ae:d1:ac:f4:b0:8e:75:8d:bb:61:
                    39:92:a8:17:88:0a:1a:4a:ff:88:e6:01:c8:80:9d:
                    e1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FB:26:A7:FC:4E:49:84:6E:A1:3E:C4:DC:91:9A:DF:79:2F:6F:55
            X509v3 Authority Key Identifier:
                keyid:B6:FA:40:AD:BE:93:6B:18:4F:84:45:86:A0:F9:0D:12:30:B6:85:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:5a:0e:b9:7c:10:40:fd:e8:17:b9:ea:c5:82:4c:42:5f:54:
         44:0a:75:0c:40:82:78:09:f3:ee:ae:a7:56:6b:dd:9e:ee:e8:
         eb:14:ef:9e:a2:b5:ec:96:b5:0e:ab:a4:86:4b:4e:14:13:93:
         67:17:90:01:43:68:3b:8b:34:8a:72:0a:9d:db:89:24:2b:b8:
         b4:2d:3f:4b:ff:5b:e1:22:f6:7b:71:10:cf:f0:03:0f:6b:ac:
         65:24:ea:d3:ab:ba:e1:8e:a7:84:8d:5d:94:a4:f5:0d:75:9d:
         76:f2:9d:9f:4c:50:e0:d5:b7:ed:10:c8:16:b8:32:d2:10:cb:
         cc:36:06:0d:68:26:02:4c:1a:05:6b:4d:bb:34:8d:63:2a:c7:
         d1:a5:47:2b:fd:b0:03:18:27:cc:70:18:62:01:f3:18:3b:e6:
         f6:52:8d:cb:94:04:85:5a:b1:b1:3b:4b:fc:80:39:6f:51:c8:
         1a:d9:82:d2:38:75:e1:c5:d0:bc:40:05:7f:1b:62:70:f3:62:
         bd:b8:31:34:8e:43:90:cc:8d:1d:7c:83:c6:43:71:65:21:bd:
         b0:4c:3b:fe:e4:ee:34:10:4f:b7:42:1a:85:22:21:09:63:91:
         41:24:73:e4:39:b0:07:20:dc:99:77:00:64:6e:c5:08:e4:7e:
         ae:9a:a7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:36 2025 by rpki-client