Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
File:                     phvll6k-axrZQXjQPo6MFVcmeMc.mft (raw, json)
Hash identifier:          tqJZTx3I9pdEQJPOsbFNWSH5Jc/eQ6qnltAe2N4tZfY=
Subject key identifier:   BA:CD:C9:5B:74:61:1F:3A:7D:85:1B:C0:CF:64:4A:3B:59:BD:08:72
Authority key identifier: A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7
Certificate issuer:       /CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
Certificate serial:       0199FB45C169BCB74FEBB0DF2D184232DD12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
Manifest number:          04C6
Signing time:             Sun 19 Oct 2025 07:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:16 +0000
Files and hashes:         1: phvll6k-axrZQXjQPo6MFVcmeMc.crl (hash: eRbKDrql7F1qpUchs4/PuUccM/pDRa0HV9hV9eaY+H4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:c1:69:bc:b7:4f:eb:b0:df:2d:18:42:32:dd:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
        Validity
            Not Before: Oct 19 07:01:16 2025 GMT
            Not After : Oct 20 07:01:16 2025 GMT
        Subject: CN=bacdc95b74611f3a7d851bc0cf644a3b59bd0872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5e:c7:8f:e5:ee:03:0a:cb:4f:a1:6c:0e:a1:
                    8d:4d:0c:f0:bb:0c:20:b0:52:32:de:13:6d:ed:79:
                    20:ca:2a:23:b1:c4:77:49:96:c1:b0:eb:ca:32:2e:
                    e4:9b:d7:08:b1:8c:08:c4:96:1a:59:95:31:b1:6b:
                    00:e9:d8:c4:7e:72:a2:a3:e1:6d:09:a9:a9:58:8c:
                    e6:8a:d4:a5:a5:0c:d1:ae:65:d6:99:d0:db:c1:79:
                    98:44:8e:a7:33:48:e2:47:dc:50:aa:dc:d0:3f:2a:
                    38:ef:67:83:83:11:99:6c:b2:3d:15:0f:6a:6f:53:
                    a1:74:b9:90:b2:fd:1c:dd:19:94:99:c0:9c:98:fe:
                    cc:5a:9e:a2:eb:e5:df:10:71:5e:a9:a7:7a:e8:63:
                    fe:23:73:4b:ed:69:42:32:85:b0:47:09:a7:a2:3b:
                    55:eb:2d:bd:30:12:6a:8c:f1:00:0c:4e:77:5b:d5:
                    a7:94:ee:f0:b8:dc:fa:24:1e:11:ee:4a:8c:ff:da:
                    3d:c3:20:d5:02:53:6a:a8:67:39:9a:0c:99:eb:18:
                    1f:a4:12:8c:5d:5a:92:39:0d:b7:49:a9:53:9f:30:
                    00:5b:ce:2a:c7:07:11:a7:f4:c4:4e:32:da:f2:d2:
                    49:04:e0:55:fb:b6:17:1b:ac:92:39:aa:85:f2:4b:
                    97:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CD:C9:5B:74:61:1F:3A:7D:85:1B:C0:CF:64:4A:3B:59:BD:08:72
            X509v3 Authority Key Identifier:
                keyid:A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:79:ee:5c:9d:e4:cc:67:45:c5:e1:1f:7d:d6:d5:41:77:eb:
         04:66:84:c0:b3:00:03:1e:6e:2e:1a:59:fd:92:9b:fd:01:d8:
         9e:60:ef:02:40:e5:c8:26:2f:6f:e8:7c:38:95:1b:74:a8:98:
         99:15:34:6b:97:9b:dd:f8:53:8c:b9:61:af:20:29:27:f4:4f:
         03:22:99:c8:26:95:45:49:51:66:44:d6:09:95:12:c4:2f:c9:
         81:ba:25:d5:4d:05:22:6b:df:6e:5d:c2:8e:65:55:1b:09:bd:
         5d:a0:a0:e2:49:11:11:c2:a6:c8:20:60:08:a7:32:3b:2d:1c:
         33:5a:d8:80:64:1e:8f:f2:ff:c6:6b:90:77:c1:22:8d:ec:82:
         53:2f:d0:6f:cc:a3:43:62:f8:e9:2d:b2:b6:7b:62:a3:d2:b4:
         e8:c6:16:7a:a2:d9:ef:82:3e:1d:8c:c5:95:ae:b6:9d:62:b9:
         b3:d0:20:cb:ee:21:93:93:7e:59:d4:14:1e:88:f4:95:df:3f:
         bb:8d:2e:b8:9c:9f:b0:d5:2e:04:26:e5:52:a2:3d:17:46:10:
         a4:22:63:70:d4:0d:da:7f:e3:51:c2:1e:38:8f:72:50:53:32:
         5d:03:7b:ae:10:07:bf:e2:6d:9b:ba:f4:d9:9e:80:9f:a4:9e:
         7e:c4:06:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:47 2025 by rpki-client