Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
File:                     ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json)
Hash identifier:          Ja7yHD8gVTHD12HUyZfqm1yIbvMwy+kEXgRugAeP4J8=
Subject key identifier:   80:3F:81:B7:A2:F2:D6:CD:72:FC:CD:39:39:BF:FD:A0:BB:F7:B5:A2
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Certificate issuer:       /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial:       01A1C6D60657E898F3DF8804B14FA3146381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
Manifest number:          1625
Signing time:             Tue 10 Nov 2026 19:01:17 +0000
Manifest this update:     Tue 10 Nov 2026 19:01:17 +0000
Manifest next update:     Wed 11 Nov 2026 19:01:17 +0000
Files and hashes:         1: 4g_7lRDjAVMNiTiBKsoqJXwuTxg.roa (hash: 7dKVR0uk4d/gBAzlWRdP6bb5gbdbBFTJu4AI+V/kyVQ=)
                          2: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: 4QVy62uHZmrwzzfPOIJSK7/VGRcvAx7KMa8tGCzEv5E=)
                          3: bMlXKcrpw0hAr8yOAEfamyznAm4.roa (hash: iYHtY1OHYePNt2uPM0XhPZrRDhJ0dgyEMWL61dDMqN0=)
                          4: rbqy0clmqI55jleoqbDhNl2Cihg.roa (hash: 9mmN8R4c+u54HhYaMWLkg9F/Yl2W8b7Mo8bfHqLdKTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Nov 2026 16:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c6:d6:06:57:e8:98:f3:df:88:04:b1:4f:a3:14:63:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
        Validity
            Not Before: Nov 10 19:01:17 2026 GMT
            Not After : Nov 11 19:01:17 2026 GMT
        Subject: CN=803f81b7a2f2d6cd72fccd3939bffda0bbf7b5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:8c:57:dc:44:83:59:5b:c7:5f:e9:49:1a:
                    a1:55:60:8f:8f:54:93:40:35:43:93:41:b7:37:e3:
                    97:81:49:8e:9b:c1:e5:75:80:5d:d2:96:70:88:4f:
                    9e:cf:d5:20:7b:c0:20:c3:c4:d7:6f:da:75:5c:3c:
                    6e:a3:1d:a3:77:84:ba:fe:8f:75:18:77:2a:7e:d3:
                    43:96:0f:60:db:4a:8a:fb:3c:cf:da:49:00:5e:e2:
                    52:3d:75:a7:af:fb:47:fe:bd:b4:9e:d3:32:b8:ee:
                    1e:c0:ce:1d:f0:82:99:88:d2:7b:97:ef:72:3f:7d:
                    38:5f:07:6c:3a:fc:93:1d:2d:27:00:be:83:f5:57:
                    f9:97:1b:9c:14:3c:90:30:6b:b3:e9:9b:6d:4b:4a:
                    b7:18:17:ae:79:61:5b:8b:cb:4f:f5:4c:a4:1a:a1:
                    31:87:65:dc:9f:84:d4:55:5e:e8:36:96:6b:7f:bc:
                    ed:4f:64:76:83:2c:72:a6:ba:1b:cc:dd:a9:15:f0:
                    22:46:b9:3e:c2:d7:1f:e1:36:75:a5:cd:81:c5:36:
                    4c:75:57:9f:a3:bd:91:9a:a2:77:74:bf:db:90:31:
                    6e:a8:47:5e:68:e9:37:2c:59:06:82:54:7f:60:36:
                    12:fd:ba:3e:25:78:8a:97:0d:01:2e:06:e1:1b:35:
                    23:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3F:81:B7:A2:F2:D6:CD:72:FC:CD:39:39:BF:FD:A0:BB:F7:B5:A2
            X509v3 Authority Key Identifier:
                keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:7a:ed:24:45:a5:ce:b9:14:30:d9:86:7d:06:3b:43:88:5a:
         55:ac:c5:64:c2:12:22:f4:90:ee:7d:fa:dc:e7:85:9c:c9:a1:
         94:ba:2a:b3:be:b3:cc:b3:81:a6:d4:f4:a5:78:16:c4:ef:48:
         38:d3:cf:dc:c4:03:1b:6f:f6:6c:8d:11:53:94:83:76:91:d6:
         d5:f8:f2:a9:98:ab:82:60:36:0d:bd:26:80:37:34:7a:1d:e8:
         66:ae:28:6f:1d:71:d4:e4:54:00:56:fc:3f:49:cb:a2:eb:27:
         b0:99:2f:71:22:d2:7e:8c:36:f2:18:61:c1:e1:25:22:22:05:
         83:de:9c:c5:7d:d5:cb:5b:a0:ef:37:66:f8:78:08:f0:c0:30:
         10:12:a0:87:84:84:33:4b:78:11:b3:96:20:49:a1:bc:35:29:
         f3:a8:38:2a:ff:a3:60:53:77:88:09:09:31:8d:2e:18:a8:58:
         9b:70:5d:2a:8f:89:76:8a:33:31:4a:1d:e8:db:d4:f9:15:81:
         db:ba:be:a4:64:bc:a4:f1:b6:1d:71:af:28:cd:43:ff:00:9c:
         3e:ec:90:62:4f:db:42:fe:7a:80:d1:4b:77:39:f8:e0:46:3a:
         72:78:5f:ae:c3:e7:66:45:9f:76:14:c4:a2:94:67:6b:d1:45:
         ac:98:3b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 03:53:39 2026 by rpki-client