Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
File:                     ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json)
Hash identifier:          RylRvceqnIUixZoo5IRU10nh2l5ykav7hVpnv9nHflU=
Subject key identifier:   71:0A:06:50:AE:19:AE:93:A7:83:A9:9C:26:24:42:5C:94:82:21:B5
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Certificate issuer:       /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial:       01969ED1428420C9D013F6EDA15D756E241C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
Manifest number:          105E
Signing time:             Mon 05 May 2025 05:00:36 +0000
Manifest this update:     Mon 05 May 2025 05:00:36 +0000
Manifest next update:     Tue 06 May 2025 05:00:36 +0000
Files and hashes:         1: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: NY7EPlaVIY/UhppOtAZek+mpiGQ78mCFbR/4XwT8kTs=)
                          2: RN98TJ7kqQI5BuSnvdMcE3q1sxc.roa (hash: YxQcvIdmH83Dh0Q3zwPjsii4N4gNYgzKFTXwaXCIS7Y=)
                          3: eIZENcgK1XZflT_O-9vOWF5_c5k.roa (hash: 72shYqXGHw00bwK02sJ1cpdaJwagVhfPsDZJsD/Kbnk=)
                          4: pw-uXfj6mcJrqBi6AQ_DbhRWlvc.roa (hash: F9GSSa/n4nzQc1So+eTia4zHzLGf70ctYWS6RuL9cmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:d1:42:84:20:c9:d0:13:f6:ed:a1:5d:75:6e:24:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
        Validity
            Not Before: May  5 05:00:36 2025 GMT
            Not After : May  6 05:00:36 2025 GMT
        Subject: CN=710a0650ae19ae93a783a99c2624425c948221b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:b5:8a:00:4e:81:23:9f:18:6a:2e:4b:66:
                    0a:4d:f5:b9:b7:8b:1d:bb:c0:55:22:04:7f:27:f8:
                    c7:85:d7:b9:60:0d:eb:55:67:00:e6:df:64:98:7e:
                    1e:38:1e:5b:e8:e8:9e:55:39:bc:de:a9:75:d8:fa:
                    29:cc:97:4f:bb:1b:6f:de:cb:90:00:10:0c:92:2b:
                    68:24:92:7c:65:4c:3b:76:d1:2a:2e:09:dc:8c:ea:
                    45:10:d4:97:29:0f:99:83:4a:d4:b7:66:db:07:7d:
                    85:86:b1:84:9b:51:44:c5:53:91:08:8b:18:0e:ae:
                    9c:06:f7:91:3f:43:5b:79:70:96:3a:c9:10:fb:64:
                    4e:bd:90:91:0f:ed:91:ec:64:30:0a:37:40:4a:d1:
                    d3:92:46:0d:39:96:22:82:3c:54:3a:0d:b6:77:9d:
                    8d:a7:81:66:e3:b9:07:1a:0a:fa:1a:a1:d7:34:b8:
                    c1:fb:64:2c:a9:59:09:db:71:32:16:46:18:4d:30:
                    53:45:58:95:43:c4:67:3b:e3:92:79:35:c8:db:10:
                    e3:26:df:88:c3:9d:b8:f4:ce:99:31:3f:c4:ae:e6:
                    b3:4a:d2:19:2b:65:47:6b:a9:21:b3:f3:93:4f:8e:
                    4d:29:08:42:c2:f1:ff:ce:b0:92:44:6d:07:bb:b7:
                    e7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0A:06:50:AE:19:AE:93:A7:83:A9:9C:26:24:42:5C:94:82:21:B5
            X509v3 Authority Key Identifier:
                keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:3e:14:7e:84:2d:a3:40:c7:12:d8:0b:54:6f:b6:21:89:60:
         d2:9e:6c:51:d8:23:cd:3d:13:e3:83:28:2c:ee:84:97:88:fa:
         47:6e:c6:56:29:55:99:b9:10:f5:b3:07:d3:84:c3:cf:33:c3:
         8d:ab:b0:ef:a0:23:6a:a6:00:51:5e:a6:85:18:d1:e8:c1:51:
         e3:ed:96:df:c9:f3:15:11:62:b6:4f:ce:e2:69:fd:d9:86:70:
         02:93:68:81:a0:0a:6b:97:17:1d:dd:f3:67:ca:d7:65:bd:b4:
         09:a3:2b:f8:f4:b4:49:24:01:4c:cf:82:b6:a1:ea:23:ed:1f:
         1c:9d:f7:d1:d7:14:b7:14:5b:24:7e:c7:74:43:ce:93:93:3a:
         af:54:ea:c0:f3:14:a9:e6:2c:f6:b8:ee:cc:26:94:7f:d5:3e:
         02:7b:d6:c7:45:80:d9:32:3d:48:a2:fc:9d:4f:e9:f2:19:c1:
         63:a2:07:ed:cd:4d:5a:29:ac:df:a1:31:f0:d3:cc:b0:36:c8:
         9e:7f:14:14:ea:25:eb:8f:ec:9b:61:b9:58:a1:5e:5c:d1:7b:
         0a:01:9d:5b:54:b7:f4:7c:60:34:3a:e2:2d:12:5e:77:4e:2e:
         97:d1:9d:5a:1b:42:b0:b7:8b:6d:cb:7d:91:61:d2:7c:5b:37:
         e3:4e:35:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:34:17 2025 by rpki-client