Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
File:                     phvll6k-axrZQXjQPo6MFVcmeMc.mft (raw, json)
Hash identifier:          r7XPSFuqrfvne0JA2VjIWHcHi7wrTebZC4SChF2e3y0=
Subject key identifier:   67:18:59:C4:A5:AD:5B:CC:FB:AB:7C:29:4E:61:4C:5B:99:47:A7:04
Authority key identifier: A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7
Certificate issuer:       /CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
Certificate serial:       0198D5BC3626386B32296382D3BFB092025E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
Manifest number:          042E
Signing time:             Sat 23 Aug 2025 07:02:18 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:18 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:18 +0000
Files and hashes:         1: phvll6k-axrZQXjQPo6MFVcmeMc.crl (hash: 41T+1HpFf4d0Wmkd3rvq04pbMimiZBH2kRiUtV7x5hc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:36:26:38:6b:32:29:63:82:d3:bf:b0:92:02:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
        Validity
            Not Before: Aug 23 07:02:18 2025 GMT
            Not After : Aug 24 07:02:18 2025 GMT
        Subject: CN=671859c4a5ad5bccfbab7c294e614c5b9947a704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:39:01:50:a3:6f:a4:1c:aa:66:a3:8f:b6:
                    32:57:24:4d:a1:5c:a6:c8:e7:d6:ce:f6:9d:84:97:
                    55:7f:fd:d9:39:86:e5:12:30:32:a9:12:12:11:ce:
                    cc:ee:4e:df:15:b3:f3:2a:34:6b:b7:41:cb:5c:f0:
                    e3:ea:01:91:e1:71:9e:bc:42:a2:cf:3a:56:d8:6b:
                    4d:83:0b:e1:91:2e:9a:bc:f1:ea:f4:55:20:d7:27:
                    f4:a1:54:7e:7b:29:e4:5e:34:54:5f:c0:92:3a:20:
                    25:e6:13:b2:1b:77:9f:f3:03:b5:be:1c:ab:f6:2b:
                    55:f6:8b:0c:d5:8e:9f:33:af:83:b7:a9:40:24:7d:
                    13:d0:13:f9:34:f7:c8:01:d0:18:64:42:a1:cc:15:
                    d3:9f:7d:b2:f1:6e:46:d8:28:71:0a:15:e6:53:8c:
                    0b:b5:f0:ce:a9:70:c5:2a:49:ad:37:7c:f9:76:44:
                    9c:02:f5:d8:7e:97:8f:ac:05:71:98:df:00:18:d1:
                    a5:41:e6:cb:0d:f6:6e:24:27:7f:02:84:22:75:d9:
                    8c:e2:92:15:a6:35:97:f9:ab:b3:ee:ff:c3:5c:8a:
                    7a:5a:23:a2:af:45:81:cc:8a:0f:b1:7c:d8:17:ad:
                    94:b9:00:0b:a1:24:57:98:24:c0:f8:15:12:ad:29:
                    46:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:18:59:C4:A5:AD:5B:CC:FB:AB:7C:29:4E:61:4C:5B:99:47:A7:04
            X509v3 Authority Key Identifier:
                keyid:A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:7e:18:74:0e:70:83:ee:31:43:8f:2b:5d:53:f4:14:c9:40:
         96:b5:d1:52:7b:84:b0:59:fc:6d:ff:fe:86:71:ca:0c:f3:fa:
         80:ff:40:fe:8c:03:71:fd:e9:14:21:c5:0b:18:23:93:cd:04:
         36:e0:90:34:80:95:12:11:e9:14:bb:12:97:90:9b:25:18:66:
         89:50:22:45:33:e7:0a:11:04:6b:d3:9f:db:ca:d0:f6:26:44:
         ec:39:c7:e1:3b:2c:47:74:83:4d:20:7c:41:2f:27:07:2f:6b:
         9b:29:c2:5d:f3:ec:a4:87:d8:07:df:df:65:a0:d5:f8:5d:1f:
         d1:a8:ae:97:7d:e2:58:f7:59:e4:f8:d6:53:50:c9:19:57:ac:
         94:04:9c:13:33:62:09:59:6c:7f:b9:f6:d7:f3:2e:f8:e7:23:
         d7:3a:2e:a1:69:72:be:a8:ea:0a:d5:e0:cd:2b:48:b5:6d:63:
         7f:de:2e:cb:e2:aa:95:a5:6e:9b:5c:1b:5f:cc:63:1b:b7:ff:
         aa:5c:5a:3f:04:e1:5d:dc:d5:3a:a5:53:c8:46:5c:43:59:2a:
         eb:f7:e5:bc:35:72:27:29:3e:5e:40:4d:72:e2:e6:a4:b0:a7:
         b4:fa:1b:97:24:d7:e0:61:a1:e7:50:6a:44:42:ba:c8:6f:6d:
         2d:c7:d1:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvDYmOGsyKWOC07+wkgJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MWJlNTk3YTkzZTZiMWFkOTQxNzhkMDNlOGU4YzE1NTcy
Njc4YzcwHhcNMjUwODIzMDcwMjE4WhcNMjUwODI0MDcwMjE4WjAzMTEwLwYDVQQD
Eyg2NzE4NTljNGE1YWQ1YmNjZmJhYjdjMjk0ZTYxNGM1Yjk5NDdhNzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxws5AVCjb6Qcqmajj7YyVyRNoVym
yOfWzvadhJdVf/3ZOYblEjAyqRISEc7M7k7fFbPzKjRrt0HLXPDj6gGR4XGevEKi
zzpW2GtNgwvhkS6avPHq9FUg1yf0oVR+eynkXjRUX8CSOiAl5hOyG3ef8wO1vhyr
9itV9osM1Y6fM6+Dt6lAJH0T0BP5NPfIAdAYZEKhzBXTn32y8W5G2ChxChXmU4wL
tfDOqXDFKkmtN3z5dkScAvXYfpePrAVxmN8AGNGlQebLDfZuJCd/AoQiddmM4pIV
pjWX+auz7v/DXIp6WiOir0WBzIoPsXzYF62UuQALoSRXmCTA+BUSrSlGKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcYWcSlrVvM+6t8KU5hTFuZR6cEMB8GA1UdIwQY
MBaAFKYb5ZepPmsa2UF40D6OjBVXJnjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGh2bGw2ay1heHJaUVhqUVBvNk1GVmNtZU1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81NmEwZWYtZjZiOS00MjQwLTljZGMt
YzFlNGNjYjE1NmVlLzEvcGh2bGw2ay1heHJaUVhqUVBvNk1GVmNtZU1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC81NmEwZWYtZjZiOS00MjQwLTljZGMtYzFlNGNjYjE1NmVl
LzEvcGh2bGw2ay1heHJaUVhqUVBvNk1GVmNtZU1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaH4YdA5w
g+4xQ48rXVP0FMlAlrXRUnuEsFn8bf/+hnHKDPP6gP9A/owDcf3pFCHFCxgjk80E
NuCQNICVEhHpFLsSl5CbJRhmiVAiRTPnChEEa9Of28rQ9iZE7DnH4TssR3SDTSB8
QS8nBy9rmynCXfPspIfYB9/fZaDV+F0f0aiul33iWPdZ5PjWU1DJGVeslAScEzNi
CVlsf7n21/Mu+Ocj1zouoWlyvqjqCtXgzStItW1jf94uy+KqlaVum1wbX8xjG7f/
qlxaPwThXdzVOqVTyEZcQ1kq6/flvDVyJyk+XkBNcuLmpLCntPoblyTX4GGh51Bq
REK6yG9tLcfRHg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:25 2025 by rpki-client