Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
File:                     ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json)
Hash identifier:          lG45H8OKXeV+dDdNurc+SIWw3RU2OPnXzDVYf8JXAz8=
Subject key identifier:   F5:40:AF:00:7F:7E:A2:54:26:3E:8E:35:A0:2A:E8:9D:5B:45:53:AD
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Certificate issuer:       /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial:       0197B6D7B67A0EE4B8DA38E5D4FD80CB9E12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
Manifest number:          10EF
Signing time:             Sat 28 Jun 2025 14:01:19 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:19 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:19 +0000
Files and hashes:         1: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: r8tontZXknJQItOcM+C4BSq6w77BqY8nBVL+mip2Mnk=)
                          2: RN98TJ7kqQI5BuSnvdMcE3q1sxc.roa (hash: YxQcvIdmH83Dh0Q3zwPjsii4N4gNYgzKFTXwaXCIS7Y=)
                          3: eIZENcgK1XZflT_O-9vOWF5_c5k.roa (hash: 72shYqXGHw00bwK02sJ1cpdaJwagVhfPsDZJsD/Kbnk=)
                          4: pw-uXfj6mcJrqBi6AQ_DbhRWlvc.roa (hash: F9GSSa/n4nzQc1So+eTia4zHzLGf70ctYWS6RuL9cmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:b6:7a:0e:e4:b8:da:38:e5:d4:fd:80:cb:9e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
        Validity
            Not Before: Jun 28 14:01:19 2025 GMT
            Not After : Jun 29 14:01:19 2025 GMT
        Subject: CN=f540af007f7ea254263e8e35a02ae89d5b4553ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:95:73:22:57:01:93:c5:88:18:7b:49:cd:3c:
                    95:2f:ec:6a:d7:8e:ea:8a:ae:9f:05:06:7b:08:3e:
                    9d:ee:42:45:17:ed:ae:1d:5a:13:a9:20:f8:f1:c4:
                    e6:58:ef:ed:0a:d3:4c:ca:d8:dd:4e:a7:b2:7e:f8:
                    0a:9d:f0:e4:aa:07:58:32:ab:0e:fc:0d:d4:10:e3:
                    c9:65:ab:7c:3c:b2:52:81:40:0d:49:73:f4:5b:a8:
                    2d:5f:60:58:af:e5:05:d3:69:36:c4:7a:b7:27:09:
                    50:0c:d7:08:0c:3b:11:3d:68:40:7a:10:1e:21:1b:
                    dd:e8:59:5f:c1:36:71:0d:51:ec:64:80:59:a0:b9:
                    59:40:08:6e:ac:d6:3e:3f:5e:75:39:e5:27:8f:9f:
                    55:05:c0:39:12:d4:b4:b9:7c:cf:f7:53:48:ff:29:
                    18:11:93:d8:03:b4:c2:b1:dc:78:05:bf:58:ac:6e:
                    c0:ad:b7:47:df:9a:5a:e7:d4:9a:0b:bb:a9:4a:ea:
                    27:be:f7:83:4c:a6:ee:b2:21:1d:93:c3:26:f8:d3:
                    a1:b7:6d:b7:c9:a4:f7:dd:07:78:8f:69:1b:5c:38:
                    8c:d0:31:01:18:8a:0a:0f:b9:1a:0c:48:b6:25:8a:
                    0a:eb:48:94:73:b9:97:f9:4e:4c:67:9d:cd:6a:52:
                    0a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:40:AF:00:7F:7E:A2:54:26:3E:8E:35:A0:2A:E8:9D:5B:45:53:AD
            X509v3 Authority Key Identifier:
                keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e0:e8:b3:0e:7f:ef:9b:5d:a0:cd:03:80:94:e0:05:e4:ab:
         3e:52:e7:76:71:2a:bd:1b:8f:a0:a2:9a:80:9b:8a:e4:82:e7:
         53:de:d7:16:e3:6c:7c:46:44:95:50:5a:ed:e7:49:39:c3:05:
         37:e5:7b:40:19:92:c2:4f:b6:1c:65:af:cd:04:6b:7c:de:2e:
         ea:36:91:4b:a9:a2:02:18:0e:14:14:d6:f2:86:d1:8d:80:a9:
         12:17:7f:d1:8f:6c:20:3e:9e:5d:5e:c8:99:78:89:a7:f7:3f:
         95:72:b5:54:87:ee:54:82:04:31:b5:46:c4:17:05:02:5b:c6:
         83:c0:4b:44:f5:dc:2f:4a:20:09:3b:0d:03:4f:ec:ca:4b:3b:
         9a:e9:5c:fd:d0:9d:99:cd:8b:74:da:8d:cd:f8:c2:89:47:15:
         47:80:a2:08:3e:9f:e7:32:57:43:9e:71:14:61:d9:db:f7:f5:
         d5:b1:65:7a:21:c5:42:49:84:df:92:db:7c:e6:48:e0:c7:df:
         d9:ad:a1:86:a4:aa:97:33:bc:bc:98:f2:12:0f:26:07:d5:39:
         e8:b2:5d:2a:91:6e:56:6d:b0:a7:19:98:fe:61:81:fe:e4:d9:
         bb:51:9e:79:f6:ef:67:9b:de:73:5e:41:29:5c:dd:72:a3:21:
         a2:ce:b6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:49 2025 by rpki-client