Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
File:                     ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft (raw, json)
Hash identifier:          rQn0czR1nErruTGNpcXiWbU2NwcP2xBmNMurV0yh7S0=
Subject key identifier:   8D:59:65:3F:03:9A:FF:4C:1C:33:EA:B7:98:A7:27:28:60:FC:78:5E
Authority key identifier: 02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
Certificate issuer:       /CN=02ba9db2674f734565f0953393f0a56961ca57c8
Certificate serial:       019CAC46D922D9AC44C41F7162C434135F98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
Manifest number:          111F
Signing time:             Mon 02 Mar 2026 02:00:49 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:49 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:49 +0000
Files and hashes:         1: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl (hash: E47GT7AmapvQ2MtgCinpitX6uebdvR94DVoH8S8Q/Vc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:d9:22:d9:ac:44:c4:1f:71:62:c4:34:13:5f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba9db2674f734565f0953393f0a56961ca57c8
        Validity
            Not Before: Mar  2 02:00:49 2026 GMT
            Not After : Mar  3 02:00:49 2026 GMT
        Subject: CN=8d59653f039aff4c1c33eab798a7272860fc785e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f2:c0:24:b9:74:0d:5a:72:b5:ce:5b:f0:60:
                    66:e9:01:67:1d:c9:49:40:12:86:6c:18:99:07:17:
                    5c:8c:01:ac:7a:aa:68:b6:3e:f6:62:4a:45:32:5b:
                    fd:b8:12:9e:d9:8d:97:74:bb:1d:51:c1:e6:b4:17:
                    e0:fc:de:cc:1e:69:84:c5:8e:83:a6:3d:90:2a:8e:
                    09:60:81:cc:18:97:64:88:39:2a:80:eb:9e:52:a0:
                    ad:bb:bc:d0:79:f1:39:65:ac:19:25:cb:d4:0b:66:
                    c9:2e:7d:2c:b4:d6:1b:3b:dc:97:6b:e4:62:12:4d:
                    d8:a0:c4:f8:b9:3f:ed:9f:2c:01:fe:ca:60:93:80:
                    c7:5f:8f:9a:a3:92:4a:7d:c2:24:1c:4f:e3:c4:fa:
                    cb:73:a1:b0:96:62:11:37:14:8a:08:6c:aa:48:89:
                    07:c8:78:9c:c5:de:e7:ad:78:54:3f:ab:02:ac:ab:
                    af:b9:d2:9a:5e:58:a1:4c:1a:ee:74:1a:37:9e:e6:
                    b5:70:e6:4f:14:2b:20:4d:b8:73:eb:64:ab:89:b6:
                    f2:18:f6:0b:ab:37:ba:f6:d7:38:b2:14:88:39:6a:
                    eb:72:ac:5e:ea:7e:8e:42:9e:10:9a:9a:56:bf:bf:
                    db:5d:9e:12:b8:f0:e9:5a:b3:c4:0e:ee:9e:f4:a8:
                    0c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:59:65:3F:03:9A:FF:4C:1C:33:EA:B7:98:A7:27:28:60:FC:78:5E
            X509v3 Authority Key Identifier:
                keyid:02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c9:08:f9:2b:db:f9:9f:36:e5:38:b6:09:58:cf:7a:74:20:
         15:17:bc:c4:ec:09:18:f0:93:27:33:c0:82:6f:b9:c4:2f:c7:
         be:de:3e:d1:8f:dd:d8:a5:3d:74:78:34:3a:b0:7d:c7:3e:e7:
         95:5d:9d:f4:86:b1:35:3e:33:fc:60:35:18:2b:cd:1a:b9:18:
         d1:19:39:b1:0b:2e:81:a9:b2:96:9b:c6:5a:27:62:be:e2:0d:
         3c:c3:4f:11:a6:98:0c:46:cd:ee:e0:f0:c7:bc:bc:0a:ec:85:
         c8:52:eb:93:d5:56:9f:3d:92:54:5f:d2:5c:5d:93:c8:f9:0b:
         4a:08:04:62:c2:49:e2:d3:ff:27:5c:d7:c2:65:3e:77:33:81:
         cd:2c:fe:cf:08:dc:7a:f9:9c:08:dc:38:5c:15:05:e1:c3:1a:
         54:0e:f1:25:74:48:53:be:62:35:6e:3b:52:f2:25:cd:28:8d:
         d8:a4:04:1b:a3:74:c3:8e:9d:aa:9a:32:ac:ce:ab:43:37:7e:
         72:7a:89:bc:52:17:0b:64:17:a4:00:2a:0e:d4:31:ef:d7:df:
         2f:43:22:4b:7a:ee:be:57:fd:10:08:90:59:6c:bf:96:53:d1:
         4b:2b:1e:e6:a8:37:d7:01:72:0e:fe:9d:98:77:13:b9:e4:d7:
         3b:e9:b5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:44 2026 by rpki-client