Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
File:                     ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json)
Hash identifier:          AGjkYGoBS7ArPK07rprJeqzWN64qScp+9bQVeyXOOSM=
Subject key identifier:   62:13:A4:36:F2:16:DF:C7:10:E7:ED:55:7B:11:B3:6C:47:85:6F:0C
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Certificate issuer:       /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial:       019FAA19AF21D3C5959FE29ED7FE414E3A9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
Manifest number:          150D
Signing time:             Tue 28 Jul 2026 19:00:37 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:37 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:37 +0000
Files and hashes:         1: 4g_7lRDjAVMNiTiBKsoqJXwuTxg.roa (hash: 7dKVR0uk4d/gBAzlWRdP6bb5gbdbBFTJu4AI+V/kyVQ=)
                          2: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: 2Fc/8+W6U2Sa/EGePm153zvO5pR0PqbhgHYj576H7MY=)
                          3: bMlXKcrpw0hAr8yOAEfamyznAm4.roa (hash: iYHtY1OHYePNt2uPM0XhPZrRDhJ0dgyEMWL61dDMqN0=)
                          4: rbqy0clmqI55jleoqbDhNl2Cihg.roa (hash: 9mmN8R4c+u54HhYaMWLkg9F/Yl2W8b7Mo8bfHqLdKTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:af:21:d3:c5:95:9f:e2:9e:d7:fe:41:4e:3a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
        Validity
            Not Before: Jul 28 19:00:37 2026 GMT
            Not After : Jul 29 19:00:37 2026 GMT
        Subject: CN=6213a436f216dfc710e7ed557b11b36c47856f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:40:9b:65:6e:79:a0:28:d7:dc:41:16:16:
                    98:e6:7f:0b:19:40:ca:85:78:10:9e:ed:5f:e5:ed:
                    17:01:2c:d5:db:6b:4c:e7:65:ff:fa:9d:98:b3:cd:
                    47:f5:5b:e0:aa:b9:2f:7c:dc:93:d4:d3:ce:6a:b0:
                    6c:50:e7:cf:11:3c:14:c3:14:a2:1f:5d:92:d9:26:
                    58:22:e5:73:5a:eb:3b:47:a6:70:b6:49:b6:3a:b5:
                    cc:93:8f:28:e3:36:2b:62:1a:28:28:70:78:02:ac:
                    e1:e8:2f:2d:8f:53:ab:48:e7:e9:0f:96:a5:f5:07:
                    77:4e:fd:d9:ac:1e:90:97:fc:97:ea:5d:f8:e9:35:
                    43:15:55:e7:63:e3:27:70:46:33:cd:85:3a:71:82:
                    5b:a1:b2:0f:f2:c6:e1:ec:2b:23:25:00:a7:8f:80:
                    f6:93:a6:fa:06:e2:dc:6d:02:f3:24:88:97:35:d9:
                    09:ce:ff:de:af:e1:2f:6b:f3:f7:92:b3:30:f0:31:
                    be:7e:3f:ed:df:06:a8:24:c9:8f:e5:a8:a2:12:5e:
                    da:dd:ca:74:47:78:62:11:39:ae:ae:06:0a:0f:e6:
                    d4:65:e6:2c:be:25:7b:1b:57:4c:d3:50:82:55:e8:
                    ff:7a:67:92:54:97:5b:5c:b8:3b:c0:9b:43:27:7f:
                    a0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:13:A4:36:F2:16:DF:C7:10:E7:ED:55:7B:11:B3:6C:47:85:6F:0C
            X509v3 Authority Key Identifier:
                keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:61:da:b0:01:e8:ed:b4:87:a4:bc:26:62:1e:e4:19:c1:bc:
         6f:24:17:ae:7d:24:4d:9f:7f:0a:0a:e2:13:1c:c1:05:ad:a2:
         ca:bc:f1:53:a8:74:0d:6f:84:3a:fc:43:85:0e:df:07:5e:98:
         9a:37:45:19:ae:2d:c5:84:02:68:25:0c:23:05:76:af:bd:4c:
         de:21:bb:1c:cc:1b:55:e7:fd:f9:fa:01:d3:ef:59:ff:a6:70:
         a2:c0:49:2c:bc:0a:c0:ec:8a:a6:7d:c1:5b:ca:06:5d:dd:ee:
         c9:47:e3:c6:1f:39:8b:10:7b:d7:5d:d7:e8:72:c3:01:40:84:
         0a:0b:24:96:7f:f4:d8:0e:d6:78:d0:42:88:c3:33:1e:f6:10:
         9a:fe:12:ad:8d:64:92:a1:fa:bb:2e:91:68:60:4b:99:1d:70:
         46:5d:77:5a:80:ae:0d:c7:f5:f1:98:43:5c:ac:14:b5:2e:82:
         bc:90:73:3e:cc:2e:ac:6f:10:2f:7e:82:18:bb:dd:98:78:ad:
         f9:65:f8:d8:ff:11:bd:39:49:f4:b8:60:63:01:f6:ad:d4:7c:
         59:4a:83:e8:fe:40:0d:30:74:9d:0b:02:58:9c:63:67:72:af:
         d4:01:12:1d:a9:fa:6a:cb:69:5d:5c:92:93:77:e7:8f:2d:9b:
         57:f1:60:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:42:42 2026 by rpki-client