Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
File:                     ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json)
Hash identifier:          nFU4E9JPwSA3RFlThtqeKJbxSQO91vertfbrJ0zdtjs=
Subject key identifier:   4D:6E:01:68:81:6D:1C:48:61:C1:F6:04:0D:1F:CD:36:5E:6D:B4:CE
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Certificate issuer:       /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial:       019EBE7EE36A1AD69359343DE437B7E8F208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
Manifest number:          1493
Signing time:             Sat 13 Jun 2026 01:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:47 +0000
Files and hashes:         1: 4g_7lRDjAVMNiTiBKsoqJXwuTxg.roa (hash: 7dKVR0uk4d/gBAzlWRdP6bb5gbdbBFTJu4AI+V/kyVQ=)
                          2: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: Dvu9iB+o8J7DIciwlf+nEd27DjPhO4QNJ1M/EH485Gs=)
                          3: bMlXKcrpw0hAr8yOAEfamyznAm4.roa (hash: iYHtY1OHYePNt2uPM0XhPZrRDhJ0dgyEMWL61dDMqN0=)
                          4: rbqy0clmqI55jleoqbDhNl2Cihg.roa (hash: 9mmN8R4c+u54HhYaMWLkg9F/Yl2W8b7Mo8bfHqLdKTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:e3:6a:1a:d6:93:59:34:3d:e4:37:b7:e8:f2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
        Validity
            Not Before: Jun 13 01:00:47 2026 GMT
            Not After : Jun 14 01:00:47 2026 GMT
        Subject: CN=4d6e0168816d1c4861c1f6040d1fcd365e6db4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9b:54:58:03:24:c0:89:99:e8:17:19:43:46:
                    f3:80:36:e7:f7:dd:a1:2f:d9:3e:7a:fd:4f:5e:70:
                    56:61:ed:a3:c8:78:d3:65:97:14:90:d1:b9:9a:a9:
                    32:98:2c:0a:de:74:80:06:52:1b:ce:8e:38:27:45:
                    61:31:00:e1:96:6e:67:0e:b1:92:2b:7e:a6:e5:75:
                    45:f7:58:07:3d:28:0b:a6:6c:4c:5b:cc:a3:24:45:
                    a4:32:99:8f:cf:e2:82:ca:d9:32:6e:e1:d6:89:ff:
                    ce:6d:cc:fa:07:cc:af:c7:0d:9b:2a:a5:ad:ef:2e:
                    68:3b:cb:81:ae:10:4b:d6:da:79:c8:32:f1:d5:1a:
                    81:bd:44:ca:8b:42:ff:96:94:98:56:33:fe:eb:cd:
                    eb:6e:b0:3a:bd:57:e8:9f:d2:f2:28:35:21:c9:ea:
                    3b:1c:fa:c7:09:2c:6d:13:fb:49:79:68:b6:b3:80:
                    8c:86:0e:e5:4b:96:3d:d0:05:1f:56:6e:3f:4f:2d:
                    d1:9b:97:c6:4f:b6:97:2d:8c:31:22:fe:fc:be:0c:
                    49:b8:6e:87:ce:d9:3f:54:d4:2a:8a:89:36:5e:37:
                    70:e3:c2:8a:a6:83:9f:7b:dd:46:ea:c2:9e:8f:c3:
                    c8:a5:04:a1:5c:e8:c3:14:23:3e:1f:12:42:fb:3f:
                    6d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6E:01:68:81:6D:1C:48:61:C1:F6:04:0D:1F:CD:36:5E:6D:B4:CE
            X509v3 Authority Key Identifier:
                keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c1:7f:ca:ea:8e:f9:02:b7:70:8f:50:cd:0b:41:90:93:8d:
         90:d1:8f:74:09:01:f2:7b:1e:66:0f:2e:76:70:2f:59:f5:14:
         24:1b:78:36:5b:60:c6:a8:d4:55:f0:b1:cf:9a:60:44:f3:d9:
         8e:1e:12:be:63:42:7b:32:43:51:fe:70:cb:62:fa:be:a2:c0:
         38:90:2b:17:1c:14:8b:2f:3a:62:70:a6:6f:57:dc:77:e0:fc:
         ed:92:22:a1:39:13:e7:c4:16:4e:82:c9:68:d1:d9:8d:bf:68:
         ec:f0:e0:f4:c9:10:8d:6e:cd:df:0b:54:d5:36:54:9e:b0:1e:
         5d:92:71:c0:8e:0f:4c:e1:1c:4d:b3:3a:e9:fb:f1:c4:e9:cc:
         42:a9:4e:ab:25:f0:1c:b3:bb:a9:e5:bc:9e:bc:3a:c3:61:e3:
         a3:0f:b9:bc:18:40:84:5f:9f:f7:18:93:4c:8a:0b:15:55:45:
         6d:46:ad:e2:12:56:25:91:14:a3:e2:18:e4:5a:1a:2b:5a:ba:
         05:e7:27:53:f0:56:79:a7:e8:96:f7:b6:21:62:fb:cb:7c:2d:
         8a:67:5a:44:6d:d4:5b:8d:2f:57:c8:81:37:5b:8f:0c:28:c5:
         50:7c:ef:1e:20:19:ad:cc:32:0d:03:3a:8e:a7:fa:be:59:35:
         c3:97:f5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:16:47 2026 by rpki-client