Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
File:                     ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json)
Hash identifier:          BVjGKjsI4xh+HYS1LodU/Y/ksPE7xBbjCe2pm5KLbwg=
Subject key identifier:   B2:A9:7D:5B:F7:36:6F:45:07:72:05:90:ED:18:91:8B:D7:F6:BF:27
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Certificate issuer:       /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial:       01987418B410B4AB0FA4FF604C2D3BAD12E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
Manifest number:          1151
Signing time:             Mon 04 Aug 2025 08:00:32 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:32 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:32 +0000
Files and hashes:         1: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: kSb6L4nZ7MizBB4CUBWbLGvbM54tIjmKCqkjoDNFTO4=)
                          2: RN98TJ7kqQI5BuSnvdMcE3q1sxc.roa (hash: YxQcvIdmH83Dh0Q3zwPjsii4N4gNYgzKFTXwaXCIS7Y=)
                          3: eIZENcgK1XZflT_O-9vOWF5_c5k.roa (hash: 72shYqXGHw00bwK02sJ1cpdaJwagVhfPsDZJsD/Kbnk=)
                          4: pw-uXfj6mcJrqBi6AQ_DbhRWlvc.roa (hash: F9GSSa/n4nzQc1So+eTia4zHzLGf70ctYWS6RuL9cmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:b4:10:b4:ab:0f:a4:ff:60:4c:2d:3b:ad:12:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
        Validity
            Not Before: Aug  4 08:00:32 2025 GMT
            Not After : Aug  5 08:00:32 2025 GMT
        Subject: CN=b2a97d5bf7366f4507720590ed18918bd7f6bf27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:cd:bc:64:c5:24:44:93:44:c1:09:5b:28:
                    ae:ff:18:43:a2:6f:18:a8:9b:18:3f:9c:3b:4d:79:
                    b2:f8:8b:5d:18:bd:28:78:c8:8b:77:9d:ae:25:6f:
                    af:3e:85:60:42:ca:be:94:07:4d:42:8c:f5:80:65:
                    aa:f2:c3:53:a3:88:23:47:c2:af:66:91:2d:3f:6d:
                    d2:1d:12:6c:ff:d5:c1:9d:a8:f4:c5:89:6d:f6:42:
                    1e:89:00:39:5f:b0:08:36:49:ed:0a:d8:f9:72:95:
                    e8:d9:36:04:40:85:dd:90:b9:a4:3e:90:86:1a:7d:
                    ff:2d:ac:c1:f2:e9:82:79:89:ff:af:ce:e3:1b:d3:
                    89:62:c8:9f:4f:8b:6e:74:20:a5:e8:be:ac:07:8c:
                    22:d2:dc:ea:3a:f2:71:05:46:f5:88:2f:f0:5a:db:
                    9c:c5:b3:2a:94:10:9c:32:46:0d:a2:e5:94:67:3e:
                    7d:1a:34:7f:a7:d1:8b:79:c5:d8:9b:da:00:88:19:
                    26:1b:04:c9:63:a6:60:77:29:04:74:75:26:92:16:
                    1a:dc:b3:51:ce:9c:25:b7:9c:62:3a:e6:79:62:d1:
                    a6:01:25:eb:87:27:13:81:56:e1:c4:03:67:ff:e3:
                    70:7f:ad:8c:bc:51:a5:15:0f:5c:55:6d:c7:4b:65:
                    a4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A9:7D:5B:F7:36:6F:45:07:72:05:90:ED:18:91:8B:D7:F6:BF:27
            X509v3 Authority Key Identifier:
                keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:86:b7:2b:e4:af:80:ff:30:f4:db:4d:85:4a:4c:9f:04:a7:
         34:c6:fe:2e:48:2d:eb:db:37:ab:76:eb:6a:ee:9e:6b:b1:3f:
         98:fd:b0:1e:bb:29:57:fd:90:fc:86:b0:f3:76:8d:a9:f1:04:
         dc:74:ad:28:d5:92:a0:93:fc:09:9a:b8:0e:a6:13:ca:9c:b1:
         f0:04:fa:9f:a2:58:39:b8:77:a6:d9:ba:a0:87:6e:89:06:ab:
         19:88:45:d8:e3:61:af:66:a4:b8:f4:da:cf:31:07:83:17:3e:
         df:fc:0c:04:28:32:be:2c:30:82:4e:fe:99:86:a0:ce:8b:12:
         76:e0:b7:52:d8:d7:ef:57:4a:d2:7e:46:1b:79:b8:7e:da:60:
         5f:cd:d0:57:3f:92:6e:72:7d:05:68:19:b4:02:c3:a9:0c:86:
         58:b1:ee:bd:98:82:20:3e:0a:cf:da:10:49:e4:06:cc:ef:23:
         6e:9f:de:03:08:c6:47:57:a0:18:4f:48:d2:ce:08:12:51:6d:
         81:47:fe:5f:ec:e0:29:f5:0e:7e:24:3f:af:f3:43:ad:d9:fb:
         e0:6b:6e:db:f4:5a:c2:17:19:f8:1e:6a:fa:c8:8c:d8:12:4e:
         55:1d:c1:c1:cd:96:5b:1a:57:83:3b:b3:d9:b8:d5:6b:4a:2b:
         fe:e8:a3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:05 2025 by rpki-client