Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
File:                     ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json)
Hash identifier:          kxOvqTMuJN9uiUcix4T7EhEDYe4t4LUg4Lm7gIosRqk=
Subject key identifier:   95:0E:4F:F7:56:89:43:7B:A9:51:18:4A:16:54:C1:BF:0D:4C:AF:89
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Certificate issuer:       /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial:       019EFA5EA32AA7522A8B252FC938FE3A9837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
Manifest number:          14B2
Signing time:             Wed 24 Jun 2026 16:02:46 +0000
Manifest this update:     Wed 24 Jun 2026 16:02:46 +0000
Manifest next update:     Thu 25 Jun 2026 16:02:46 +0000
Files and hashes:         1: 4g_7lRDjAVMNiTiBKsoqJXwuTxg.roa (hash: 7dKVR0uk4d/gBAzlWRdP6bb5gbdbBFTJu4AI+V/kyVQ=)
                          2: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: 7gTqq31NWyIu6OsU623XWYXxkoRPstOGEUI5LEvGQUY=)
                          3: bMlXKcrpw0hAr8yOAEfamyznAm4.roa (hash: iYHtY1OHYePNt2uPM0XhPZrRDhJ0dgyEMWL61dDMqN0=)
                          4: rbqy0clmqI55jleoqbDhNl2Cihg.roa (hash: 9mmN8R4c+u54HhYaMWLkg9F/Yl2W8b7Mo8bfHqLdKTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 14:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fa:5e:a3:2a:a7:52:2a:8b:25:2f:c9:38:fe:3a:98:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
        Validity
            Not Before: Jun 24 16:02:46 2026 GMT
            Not After : Jun 25 16:02:46 2026 GMT
        Subject: CN=950e4ff75689437ba951184a1654c1bf0d4caf89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cb:91:8a:43:b1:b7:a8:b1:c6:b2:ca:97:f4:
                    8e:3c:72:e4:f7:6b:24:ab:2d:68:e8:d8:ce:3f:33:
                    57:5d:06:c8:fe:3b:41:11:e2:d7:dc:09:f0:ca:2e:
                    d4:79:6f:57:fa:7c:8e:bb:d8:15:16:7a:d4:64:7e:
                    6e:13:1b:d4:f7:3f:0a:4f:30:aa:f1:b1:5d:a3:07:
                    60:95:5d:c9:57:7d:33:f3:e8:c8:9f:07:38:47:32:
                    28:f7:f1:8c:ff:f6:ad:6e:51:8a:2c:4f:5f:db:4c:
                    99:2f:04:f6:4f:3f:59:01:1a:ce:3e:26:a6:a9:aa:
                    73:97:8e:a1:c4:fb:b4:71:2e:93:0c:3a:85:9f:f8:
                    63:3c:45:eb:d0:75:6d:7e:18:33:fe:9f:cd:19:a8:
                    46:55:b6:a7:ea:a1:d4:2a:32:3e:b2:b4:57:52:aa:
                    4f:bf:81:cc:16:92:8c:fe:e5:7c:27:77:1a:8a:84:
                    6f:fa:91:3b:eb:33:4a:b7:d7:57:d7:ed:44:88:fc:
                    55:f8:a6:ba:6a:82:96:1f:25:b4:a8:39:85:39:19:
                    a3:03:d3:6f:8e:57:cf:f6:00:7b:bc:4a:81:8e:d6:
                    eb:d2:44:64:14:3c:4f:83:bd:f2:16:8b:73:66:24:
                    98:f1:ae:84:32:b9:e3:43:ba:0e:35:be:81:4e:b8:
                    63:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0E:4F:F7:56:89:43:7B:A9:51:18:4A:16:54:C1:BF:0D:4C:AF:89
            X509v3 Authority Key Identifier:
                keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:86:8c:41:36:c0:ff:d5:20:b9:b9:b7:cc:dd:7f:db:52:b0:
         6c:7c:f1:78:7f:96:f6:78:72:eb:e6:8c:cd:dd:b8:b0:10:5d:
         27:2d:3e:6d:ae:70:cc:16:3c:b6:7d:34:07:90:29:63:a5:c7:
         8f:6e:0f:c1:a0:33:cf:05:3c:2d:29:6e:ab:aa:f2:92:a5:71:
         49:fe:71:31:68:c6:24:30:1e:b2:ad:56:42:4d:df:14:e1:ce:
         e1:93:3d:15:d4:14:9c:db:1e:9a:5e:53:8e:60:f5:39:fc:b2:
         98:b8:2a:32:66:cb:68:8f:f5:43:ce:b5:66:24:a5:5e:06:ef:
         65:8b:23:de:4f:1b:59:d3:15:cb:23:2b:3a:b7:76:44:0b:61:
         37:23:7e:ef:c2:b9:ea:ad:50:86:c1:3a:d9:a9:c8:94:71:60:
         f1:70:6b:74:9d:5a:85:46:b8:74:37:cf:85:f4:89:f0:15:15:
         1e:38:94:78:8e:29:da:08:61:27:7d:52:dc:2a:99:f4:ca:0e:
         34:74:19:de:86:89:75:29:60:5c:72:88:d8:94:19:58:bd:cf:
         d4:54:57:a8:3a:0c:27:d8:bc:b0:67:f1:87:68:61:a1:99:e6:
         9d:52:ae:68:20:8a:7a:46:0f:e3:35:10:6e:e6:70:a2:b8:c1:
         ad:9a:3e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:18:29 2026 by rpki-client