Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
File:                     ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft (raw, json)
Hash identifier:          Xt6k9/AmC5QvvEAq5ilMm8nDBqAnqlgogrrrCLv1/6U=
Subject key identifier:   B6:2C:55:96:B6:6D:60:3B:E9:B4:03:54:4F:6C:7E:E0:0E:FF:C5:D0
Authority key identifier: 02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
Certificate issuer:       /CN=02ba9db2674f734565f0953393f0a56961ca57c8
Certificate serial:       01A1DCF07EB14580AD117303DEA3B60EEC9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
Manifest number:          13CF
Signing time:             Sun 15 Nov 2026 02:01:50 +0000
Manifest this update:     Sun 15 Nov 2026 02:01:50 +0000
Manifest next update:     Mon 16 Nov 2026 02:01:50 +0000
Files and hashes:         1: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl (hash: CO95/4iw0Kd1cKoyKhI8pjGUmDdU6QpIHhmUZN1WqoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 02:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:f0:7e:b1:45:80:ad:11:73:03:de:a3:b6:0e:ec:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba9db2674f734565f0953393f0a56961ca57c8
        Validity
            Not Before: Nov 15 02:01:50 2026 GMT
            Not After : Nov 16 02:01:50 2026 GMT
        Subject: CN=b62c5596b66d603be9b403544f6c7ee00effc5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:45:ba:69:6b:3b:32:39:5e:6b:4a:b2:a2:
                    d1:4c:a3:db:f9:79:eb:76:0b:69:da:d5:fb:8f:cc:
                    d7:48:4f:43:75:ce:ae:9e:a6:18:5c:79:cf:12:8e:
                    6f:cf:3c:ea:ac:1e:3d:60:77:0d:56:94:9b:e4:78:
                    55:76:8a:22:30:ef:04:ad:87:cc:e5:58:24:21:ee:
                    83:f9:2a:e6:0b:bd:b8:6d:e6:57:d4:60:7b:65:6c:
                    da:06:39:b0:d8:a8:bb:1f:d2:99:17:67:57:f2:5a:
                    0c:7f:84:30:c8:29:8f:a1:dd:99:fb:45:62:da:7e:
                    ff:e5:a5:ee:7f:f2:82:f6:7c:83:3c:74:08:be:40:
                    4f:83:5b:2c:13:be:44:f2:f5:b7:d1:55:02:4e:0e:
                    2e:91:29:1c:ae:48:7e:ef:fb:e7:dc:07:70:21:f2:
                    a8:ca:fd:c4:1a:0b:68:9c:97:94:ca:f4:96:67:68:
                    7b:3e:5e:ac:85:89:ba:2f:24:7f:aa:de:c3:43:d8:
                    a4:82:31:c1:e3:67:74:66:e5:7b:f4:ec:6d:0d:fb:
                    1f:75:f3:cf:00:5f:98:1f:14:1b:d4:6b:ba:7c:c5:
                    43:6f:05:26:be:ad:c7:34:8c:0a:32:8e:d6:6f:78:
                    db:f7:74:8e:6a:50:cf:34:b2:9b:62:c7:e8:ae:b4:
                    ac:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2C:55:96:B6:6D:60:3B:E9:B4:03:54:4F:6C:7E:E0:0E:FF:C5:D0
            X509v3 Authority Key Identifier:
                keyid:02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:55:f2:6b:34:53:06:be:73:83:29:23:24:7e:2b:e2:de:28:
         3c:ce:ee:33:8b:7f:72:2a:36:c9:05:82:0a:94:83:c5:29:b6:
         09:d5:79:59:6e:98:16:6b:c5:3e:cf:61:de:cb:52:b7:78:09:
         20:ac:50:52:1d:2e:c0:6e:43:99:d4:5e:e0:12:9b:76:a2:2d:
         38:5f:a7:cc:63:58:d1:1e:ed:7c:f0:47:a2:50:29:3e:29:43:
         ac:cd:8d:fc:93:95:19:94:b5:5f:0a:5e:16:c7:7c:68:d1:58:
         50:0a:1e:97:0c:08:23:57:39:14:c0:a4:df:11:c4:01:bf:9c:
         07:c7:ef:37:d7:ea:f8:40:08:b1:8e:0e:84:89:94:f8:a9:4d:
         4d:80:62:d4:95:30:a1:32:a9:bf:13:b1:4a:5c:7d:28:46:40:
         b8:d1:4a:5a:b1:3b:48:82:eb:eb:e8:37:2f:6e:87:37:b4:d3:
         03:bf:d5:83:be:b4:cf:e6:ca:f4:6d:7e:51:be:8c:2a:d6:a4:
         0f:ce:5f:f0:ca:aa:59:22:0a:0c:bf:4c:11:19:bc:7b:e2:6d:
         e6:3b:95:61:7a:34:87:64:be:54:1b:24:02:89:c6:89:d9:8e:
         67:dc:f1:e3:f5:41:96:17:ea:4c:11:1b:9d:0d:c0:87:38:07:
         6b:2b:b9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:53:01 2026 by rpki-client