Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
File:                     ARmUscWuj1grvs9ndysUttl3uqw.mft (raw, json)
Hash identifier:          Xxzh5atWRe3ZLM45m98Xr6V/zYY3StpAmj+Bj6gyn4s=
Subject key identifier:   43:28:2E:11:01:10:14:B6:FC:9F:1C:CA:8A:F0:02:10:51:A4:7A:AD
Authority key identifier: 01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
Certificate issuer:       /CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Certificate serial:       01A0CA0F8DA92B0015D57AB8269471680E08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
Manifest number:          0980
Signing time:             Tue 22 Sep 2026 17:00:11 +0000
Manifest this update:     Tue 22 Sep 2026 17:00:11 +0000
Manifest next update:     Wed 23 Sep 2026 17:00:11 +0000
Files and hashes:         1: ARmUscWuj1grvs9ndysUttl3uqw.crl (hash: q4j2zWsJGMGfVI/TSlqvMT7Zt1y7RRaGLyFxX7pvZf8=)
                          2: jMbUatOv3XAsr_KrVEX1mPMT9Mg.roa (hash: XrXEaVvF+zoDFjw4K3BmRj8i0r+TbNLILJR4PzBUuZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:0f:8d:a9:2b:00:15:d5:7a:b8:26:94:71:68:0e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011994b1c5ae8f582bbecf67772b14b6d977baac
        Validity
            Not Before: Sep 22 17:00:11 2026 GMT
            Not After : Sep 23 17:00:11 2026 GMT
        Subject: CN=43282e11011014b6fc9f1cca8af0021051a47aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ba:05:3f:46:4e:39:c3:ae:68:36:9b:f2:2d:
                    9b:76:6b:05:a5:fb:fb:2a:2b:c0:36:e6:46:42:d6:
                    8b:88:db:78:88:f8:d2:7c:cb:cf:97:5f:90:c4:34:
                    09:ab:6d:43:1c:71:02:06:e8:0b:45:14:6a:37:69:
                    5e:b9:be:7c:15:8f:39:9d:ea:47:31:e6:bf:65:90:
                    23:03:8b:24:66:d5:8d:0f:39:b2:63:98:13:d6:00:
                    1a:37:7c:18:5f:46:d5:20:61:08:6a:cd:19:6b:d3:
                    f6:b4:e1:96:99:3b:11:0f:4e:ad:44:dd:d9:0e:59:
                    29:62:78:19:5f:e8:28:1e:4e:de:5a:79:5c:02:5e:
                    fd:06:77:56:3c:e2:3a:d8:3c:f2:b0:ed:be:0e:b5:
                    ff:2f:d8:9b:9d:22:33:8d:45:bd:8d:e5:1d:2d:8c:
                    26:5b:1f:51:23:b3:0b:bc:e2:5b:ff:10:7f:af:99:
                    c7:fe:a1:96:e0:25:3a:fd:10:75:6c:60:2a:58:53:
                    3f:76:c6:bd:02:3e:cc:c7:fb:bb:53:d7:01:eb:53:
                    f9:cc:8a:25:d0:a7:51:f8:4b:44:4c:24:50:7a:2a:
                    dd:cb:c4:30:4c:2b:22:67:1f:99:d2:a9:a0:a0:53:
                    7d:0c:8c:35:ca:aa:df:8d:06:3a:78:ff:6c:1d:7f:
                    c4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:28:2E:11:01:10:14:B6:FC:9F:1C:CA:8A:F0:02:10:51:A4:7A:AD
            X509v3 Authority Key Identifier:
                keyid:01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a3:72:8b:ad:9d:21:f9:62:e3:e0:37:c1:d4:03:59:bd:1e:
         82:d4:6d:61:65:2e:86:7b:36:30:71:32:5e:00:60:76:77:92:
         61:ac:e8:67:89:99:92:c4:5d:33:39:e4:f3:95:e2:2f:8e:2d:
         21:ac:10:9c:ae:dc:94:37:c2:57:8f:41:38:b1:03:07:67:a4:
         a4:b2:68:60:1a:73:e2:c9:6c:87:c8:d4:c1:90:c8:fa:fa:6c:
         5b:a2:9b:a3:c1:e4:7e:d4:f3:1d:2e:d8:77:7b:ce:25:0d:67:
         28:dd:71:6f:9e:78:e2:fd:47:e2:8d:11:62:e7:7c:9d:e8:f3:
         54:78:87:95:39:af:c6:48:c8:8a:da:06:77:61:ff:5e:8f:af:
         24:34:dd:a5:43:be:d8:bc:a7:27:0c:2b:8a:32:63:ac:ef:ea:
         6d:2c:30:25:36:32:80:de:c8:04:b9:4f:13:a0:66:f8:52:f2:
         78:0f:e4:58:a5:a8:9d:af:16:09:25:84:37:a0:8e:9a:67:a7:
         d2:12:14:73:d4:db:6f:54:0a:55:95:36:c8:1b:43:de:75:cf:
         4a:cb:fe:3c:07:a3:94:b4:4c:22:7d:24:a3:fd:0f:de:6c:99:
         f1:81:72:bb:87:cc:47:a8:9a:3d:59:17:b1:53:51:1c:d3:0a:
         b3:c6:47:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKD42pKwAV1Xq4JpRxaA4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMTk5NGIxYzVhZThmNTgyYmJlY2Y2Nzc3MmIxNGI2ZDk3
N2JhYWMwHhcNMjYwOTIyMTcwMDExWhcNMjYwOTIzMTcwMDExWjAzMTEwLwYDVQQD
Eyg0MzI4MmUxMTAxMTAxNGI2ZmM5ZjFjY2E4YWYwMDIxMDUxYTQ3YWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoroFP0ZOOcOuaDab8i2bdmsFpfv7
KivANuZGQtaLiNt4iPjSfMvPl1+QxDQJq21DHHECBugLRRRqN2leub58FY85nepH
Mea/ZZAjA4skZtWNDzmyY5gT1gAaN3wYX0bVIGEIas0Za9P2tOGWmTsRD06tRN3Z
DlkpYngZX+goHk7eWnlcAl79BndWPOI62DzysO2+DrX/L9ibnSIzjUW9jeUdLYwm
Wx9RI7MLvOJb/xB/r5nH/qGW4CU6/RB1bGAqWFM/dsa9Aj7Mx/u7U9cB61P5zIol
0KdR+EtETCRQeirdy8QwTCsiZx+Z0qmgoFN9DIw1yqrfjQY6eP9sHX/EdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMoLhEBEBS2/J8cyorwAhBRpHqtMB8GA1UdIwQY
MBaAFAEZlLHFro9YK77PZ3crFLbZd7qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEt
M2E3M2MzMzNlN2U3LzEvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEtM2E3M2MzMzNlN2U3
LzEvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKNyi62d
Ifli4+A3wdQDWb0egtRtYWUuhns2MHEyXgBgdneSYazoZ4mZksRdMznk85XiL44t
IawQnK7clDfCV49BOLEDB2ekpLJoYBpz4slsh8jUwZDI+vpsW6Kbo8HkftTzHS7Y
d3vOJQ1nKN1xb5544v1H4o0RYud8nejzVHiHlTmvxkjIitoGd2H/Xo+vJDTdpUO+
2LynJwwrijJjrO/qbSwwJTYygN7IBLlPE6Bm+FLyeA/kWKWona8WCSWEN6COmmen
0hIUc9Tbb1QKVZU2yBtD3nXPSsv+PAejlLRMIn0ko/0P3myZ8YFyu4fMR6iaPVkX
sVNRHNMKs8ZHGQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 03:13:58 2026 by rpki-client