Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
File:                     phvll6k-axrZQXjQPo6MFVcmeMc.mft (raw, json)
Hash identifier:          ifNWSkIwsZ4kmwBM9CfuY2FzGQWtklbHPjhvebk+YlA=
Subject key identifier:   84:56:3F:2C:7A:8C:B4:47:F9:C6:F3:F7:01:63:73:41:F8:9C:BC:BA
Authority key identifier: A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7
Certificate issuer:       /CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
Certificate serial:       019D33E3385A247275243EEA48A78C629E06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
Manifest number:          0671
Signing time:             Sat 28 Mar 2026 10:00:22 +0000
Manifest this update:     Sat 28 Mar 2026 10:00:22 +0000
Manifest next update:     Sun 29 Mar 2026 10:00:22 +0000
Files and hashes:         1: phvll6k-axrZQXjQPo6MFVcmeMc.crl (hash: XlSKyrESBtcU7iK2j3gZYoDQc5G4Toh6edCCsohYIpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:e3:38:5a:24:72:75:24:3e:ea:48:a7:8c:62:9e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
        Validity
            Not Before: Mar 28 10:00:22 2026 GMT
            Not After : Mar 29 10:00:22 2026 GMT
        Subject: CN=84563f2c7a8cb447f9c6f3f701637341f89cbcba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:a2:61:02:84:93:9e:df:f4:3f:90:06:60:
                    c4:0a:9a:ca:35:30:73:50:b6:d7:b9:4c:a3:fa:b4:
                    ff:c8:83:c4:58:dd:59:e1:58:45:b9:f9:64:da:39:
                    9a:4b:6c:91:90:c1:f1:8f:c3:6e:3e:6f:80:8b:6a:
                    56:50:ec:7a:b1:c9:3f:a1:88:21:f2:73:96:57:0d:
                    a1:02:b2:0b:63:bd:39:bf:2e:c7:64:be:e5:89:5f:
                    df:16:4a:22:48:e5:17:d6:48:15:4e:85:29:b9:17:
                    41:c3:52:cd:25:c8:3b:2e:99:b4:1b:57:3d:fc:49:
                    92:dc:cf:ca:44:e3:85:a6:a6:a2:bb:e3:d8:23:c3:
                    98:46:5b:40:a4:c6:80:d7:39:07:48:39:65:52:44:
                    89:db:df:85:0c:f6:06:b5:5a:5c:9b:9f:13:31:89:
                    33:d5:66:42:2f:8d:e0:b2:5e:70:18:36:46:85:78:
                    8c:c3:99:63:d5:fa:64:b6:0a:0b:4a:a4:12:18:31:
                    3b:0a:32:dc:da:83:a2:9a:f5:50:75:0e:d5:01:75:
                    b1:cc:66:b3:62:8d:99:43:c6:77:b4:bb:2e:cc:2e:
                    9b:4f:ca:df:ac:8c:6a:79:b1:81:b3:58:d4:48:d0:
                    14:eb:7b:50:55:1f:f9:ad:c9:ab:d2:51:74:50:8c:
                    8a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:56:3F:2C:7A:8C:B4:47:F9:C6:F3:F7:01:63:73:41:F8:9C:BC:BA
            X509v3 Authority Key Identifier:
                keyid:A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:28:70:6c:78:fb:9d:84:79:a3:b5:53:f3:39:77:9f:fa:0a:
         19:8d:8e:e0:88:8c:01:b7:8a:b3:37:3f:68:fd:94:bf:dc:42:
         95:22:f6:2a:38:44:9d:40:c7:01:70:a1:c9:1a:59:43:2f:6b:
         20:20:c2:9d:af:36:b7:2b:e6:bc:11:59:f6:2a:da:70:b7:85:
         06:8e:5c:b0:4b:e1:6a:a5:68:95:f5:d0:96:66:b0:02:f4:45:
         0c:41:1c:bb:79:51:6b:5d:ae:ab:c7:b4:17:97:e8:3b:fc:1d:
         ab:67:f7:91:f2:1c:fc:82:9e:c9:e1:0d:23:25:92:b2:8d:42:
         90:a0:17:65:f5:b6:00:d3:72:93:ea:90:d2:58:af:95:6b:3b:
         d1:19:51:5f:19:80:23:af:25:e4:c1:33:9a:01:cc:c9:30:1a:
         03:9c:00:78:48:d2:47:f2:52:09:ea:f0:1f:93:2e:63:db:59:
         c1:35:fb:b1:18:00:79:ac:32:91:4e:ff:10:6a:87:eb:5a:57:
         bd:38:42:73:d5:fa:68:98:8d:f5:10:b8:fd:d2:5b:04:57:63:
         46:8b:d1:b3:57:b8:4d:c5:59:f8:a2:c4:48:c8:3c:be:4d:fb:
         30:07:23:05:76:cd:44:3e:ad:21:79:06:09:18:e9:22:e7:b7:
         d3:ab:9e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:54 2026 by rpki-client