Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
File:                     ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json)
Hash identifier:          wBP2AnSXICylutC6T0RflrOr84VIG02irFq1OMFAJKM=
Subject key identifier:   B5:6E:F3:30:E0:11:48:1B:C7:5C:B8:81:9A:D2:4F:0E:CA:5F:8D:1C
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Certificate issuer:       /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial:       019F8F10C3EA692FAA3EE852722FE26F4337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
Manifest number:          14FF
Signing time:             Thu 23 Jul 2026 13:01:08 +0000
Manifest this update:     Thu 23 Jul 2026 13:01:08 +0000
Manifest next update:     Fri 24 Jul 2026 13:01:08 +0000
Files and hashes:         1: 4g_7lRDjAVMNiTiBKsoqJXwuTxg.roa (hash: 7dKVR0uk4d/gBAzlWRdP6bb5gbdbBFTJu4AI+V/kyVQ=)
                          2: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: Pazv3MFBv7DXNZjY99LbQLcfWM3d32W462CTwy8Wbek=)
                          3: bMlXKcrpw0hAr8yOAEfamyznAm4.roa (hash: iYHtY1OHYePNt2uPM0XhPZrRDhJ0dgyEMWL61dDMqN0=)
                          4: rbqy0clmqI55jleoqbDhNl2Cihg.roa (hash: 9mmN8R4c+u54HhYaMWLkg9F/Yl2W8b7Mo8bfHqLdKTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:c3:ea:69:2f:aa:3e:e8:52:72:2f:e2:6f:43:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
        Validity
            Not Before: Jul 23 13:01:08 2026 GMT
            Not After : Jul 24 13:01:08 2026 GMT
        Subject: CN=b56ef330e011481bc75cb8819ad24f0eca5f8d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:18:60:76:d6:66:c1:00:48:22:5c:5a:63:92:
                    72:25:ea:88:76:38:c2:44:26:6b:b5:48:0d:05:a4:
                    3b:d3:47:8b:f0:4e:b4:d8:3c:b7:e5:41:37:8d:9a:
                    38:25:a5:f7:5c:0a:f2:58:e0:90:68:45:08:a3:2f:
                    98:b2:b8:70:f9:92:e1:f8:35:91:9e:2c:0c:1a:84:
                    bd:3c:bb:5b:88:5a:ff:66:ae:12:b0:69:44:a6:cf:
                    1a:c2:75:13:a9:0b:65:3f:0f:d9:52:ce:a2:cf:9c:
                    e5:bb:39:67:cd:b8:5a:c2:5a:d7:5a:b3:96:83:df:
                    c3:d3:53:d3:6d:0b:93:7d:4c:cb:87:0c:98:a2:3f:
                    55:b4:b1:49:1c:77:35:8b:7f:9a:a8:75:02:78:c1:
                    d5:4e:6d:c7:a8:af:2c:ad:2e:38:7b:66:0f:ee:97:
                    60:67:33:00:f3:be:52:71:55:65:36:53:7e:2e:1d:
                    57:30:9e:6f:46:93:ca:2a:26:a2:52:3e:c1:08:48:
                    c3:07:e2:49:44:ea:38:07:95:d4:a9:b3:20:51:09:
                    74:ff:2c:fa:68:26:d5:13:09:29:0a:d8:cb:6d:17:
                    0c:58:51:14:a2:d2:5e:be:68:9c:8c:2f:e4:ce:db:
                    6a:f8:55:78:ff:a1:56:8f:54:3d:47:0b:24:bb:3e:
                    27:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6E:F3:30:E0:11:48:1B:C7:5C:B8:81:9A:D2:4F:0E:CA:5F:8D:1C
            X509v3 Authority Key Identifier:
                keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:a7:74:33:e5:8a:43:6b:a2:d2:f6:9a:00:eb:a6:90:f3:29:
         b8:a7:bc:7b:57:69:a3:c6:ba:97:36:4a:e9:77:f5:9c:d1:d6:
         d6:ef:49:07:ba:20:5b:68:87:d7:2d:eb:66:0d:98:12:92:05:
         d6:c2:62:b5:18:57:57:5b:72:2a:22:e1:57:76:97:c8:c1:0b:
         97:aa:12:e1:df:b1:62:b2:dd:63:d3:92:54:4a:fa:8b:f8:2d:
         fd:ee:1f:21:1f:f2:f8:3c:e0:39:80:88:d1:3d:54:75:8d:bd:
         55:15:f5:ac:42:f0:b8:04:72:43:59:f2:df:4f:ac:79:a9:08:
         53:70:ac:6c:08:d5:73:c1:2a:e4:c8:2a:c4:d7:ea:bf:42:73:
         30:3d:ff:b7:83:72:81:47:e2:06:e9:b3:53:ee:47:94:1e:ed:
         e7:64:32:21:ef:97:a6:85:3e:27:17:ad:97:1c:88:06:d6:a0:
         4f:89:70:f1:d2:d0:0f:51:7a:e6:ad:19:cd:be:f7:82:91:0b:
         62:4f:cf:5a:c2:a4:00:c0:a5:bf:63:61:ea:22:dd:ea:a7:85:
         eb:49:b0:5c:fc:0f:91:28:9f:23:08:89:b1:ba:98:72:af:81:
         fd:3f:1c:eb:59:80:b1:11:e4:aa:69:d1:44:8d:3a:7d:d7:ac:
         a5:7f:e7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:56 2026 by rpki-client