Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
File:                     PRKXkoZrFiE7VsW_pr66x8YYsVA.mft (raw, json)
Hash identifier:          yCodgHkivlF2mLEXN5LSOrY/AKBtg59izWjUHQc+hm8=
Subject key identifier:   21:0D:E4:02:16:E3:6A:EA:D8:A9:52:55:A8:70:81:47:6C:7F:8C:C7
Authority key identifier: 3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
Certificate issuer:       /CN=3d129792866b16213b56c5bfa6bebac7c618b150
Certificate serial:       0198D65F4618224AEFB0D9F06712713B2FF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
Manifest number:          11D8
Signing time:             Sat 23 Aug 2025 10:00:24 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:24 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:24 +0000
Files and hashes:         1: PRKXkoZrFiE7VsW_pr66x8YYsVA.crl (hash: EPARkfyJvzDPQ0oX2mIbuIY63OnbZcRyCgB6RbwfMD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:46:18:22:4a:ef:b0:d9:f0:67:12:71:3b:2f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d129792866b16213b56c5bfa6bebac7c618b150
        Validity
            Not Before: Aug 23 10:00:24 2025 GMT
            Not After : Aug 24 10:00:24 2025 GMT
        Subject: CN=210de40216e36aead8a95255a87081476c7f8cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2a:90:69:f1:f6:06:6a:fe:23:6e:28:39:7a:
                    23:84:05:fb:e5:f3:2e:1e:ed:0e:38:3c:94:5a:72:
                    5b:77:37:94:54:80:6e:14:d6:25:65:f9:d8:61:dd:
                    2b:d0:49:37:3c:6b:1f:29:13:d3:76:1a:bd:db:9f:
                    05:08:70:9d:f7:b5:53:c6:be:fe:6d:fd:14:e0:56:
                    50:41:f4:d3:81:3c:3a:1c:f0:2c:85:5e:b1:54:47:
                    12:b9:9e:48:4a:1c:82:2b:84:19:92:8d:91:26:c5:
                    d2:46:ec:26:98:57:2d:56:2e:16:9e:62:6a:5b:01:
                    89:ba:e1:1b:09:3a:b2:19:79:3f:20:15:dc:d8:05:
                    f6:58:74:a7:d4:51:8e:49:4e:0d:ae:29:c0:9a:e8:
                    00:e5:54:52:a1:b2:7e:75:20:7e:84:e2:aa:c5:3f:
                    62:a3:c5:8b:4c:02:73:f4:93:16:d3:1a:fc:c3:27:
                    c7:80:c4:64:2d:80:7e:ee:73:89:fb:a3:0c:f5:b4:
                    9f:1b:a6:96:87:b1:c9:cf:a7:09:e0:6d:b3:7b:20:
                    1c:75:67:04:5b:0d:a8:5c:80:84:4a:cc:a0:a8:98:
                    8e:fc:aa:ab:ae:30:65:af:46:92:f3:62:1e:35:3d:
                    be:89:0e:da:d6:56:15:4d:53:db:9c:07:d3:46:c4:
                    0f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0D:E4:02:16:E3:6A:EA:D8:A9:52:55:A8:70:81:47:6C:7F:8C:C7
            X509v3 Authority Key Identifier:
                keyid:3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c0:3a:ae:58:70:9a:5d:28:9f:39:42:ec:ca:18:b2:1f:37:
         da:78:78:18:a6:f6:04:ed:cf:97:50:c4:0c:89:f6:e4:e3:81:
         e5:39:10:2b:79:8f:e5:2d:78:63:d0:35:09:d1:f7:29:e3:f0:
         09:61:4b:04:e2:a1:8e:61:15:d0:60:d8:28:e0:5a:a2:ca:f1:
         54:32:02:25:ce:b9:79:1c:85:9b:b1:4c:69:96:82:ac:f5:8e:
         ee:7e:6a:8d:e2:31:ef:22:4a:80:ac:ef:45:b5:a4:23:db:b1:
         7e:0b:aa:db:d5:c1:cf:5c:f4:9c:2c:f1:23:ec:61:62:df:1f:
         11:14:bc:d9:34:a7:5a:d4:06:2d:a0:b1:f1:53:cb:95:26:d7:
         9d:65:44:26:a3:7f:a6:7e:68:9b:ef:6c:90:28:68:62:25:1e:
         7b:04:c1:b7:81:d5:0e:82:09:ac:c5:26:7a:58:7f:3f:ba:c8:
         0a:12:a5:76:13:66:52:92:ec:a6:5f:aa:09:66:15:a4:f7:52:
         4c:68:1a:ee:ab:2a:d3:e4:b7:37:38:d9:3b:71:73:52:2a:97:
         ac:55:e2:e0:f7:5c:18:e5:e5:c4:c2:8d:30:92:b5:e4:a6:0f:
         a9:7b:b0:db:e6:3f:5e:6c:b2:04:58:8a:b0:ea:96:7d:2f:d5:
         f4:6e:e9:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX0YYIkrvsNnwZxJxOy/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTI5NzkyODY2YjE2MjEzYjU2YzViZmE2YmViYWM3YzYx
OGIxNTAwHhcNMjUwODIzMTAwMDI0WhcNMjUwODI0MTAwMDI0WjAzMTEwLwYDVQQD
EygyMTBkZTQwMjE2ZTM2YWVhZDhhOTUyNTVhODcwODE0NzZjN2Y4Y2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yqQafH2Bmr+I24oOXojhAX75fMu
Hu0OODyUWnJbdzeUVIBuFNYlZfnYYd0r0Ek3PGsfKRPTdhq9258FCHCd97VTxr7+
bf0U4FZQQfTTgTw6HPAshV6xVEcSuZ5IShyCK4QZko2RJsXSRuwmmFctVi4WnmJq
WwGJuuEbCTqyGXk/IBXc2AX2WHSn1FGOSU4NrinAmugA5VRSobJ+dSB+hOKqxT9i
o8WLTAJz9JMW0xr8wyfHgMRkLYB+7nOJ+6MM9bSfG6aWh7HJz6cJ4G2zeyAcdWcE
Ww2oXICESsygqJiO/KqrrjBlr0aS82IeNT2+iQ7a1lYVTVPbnAfTRsQPzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEN5AIW42rq2KlSVahwgUdsf4zHMB8GA1UdIwQY
MBaAFD0Sl5KGaxYhO1bFv6a+usfGGLFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJLWGtvWnJGaUU3VnNXX3ByNjZ4OFlZc1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81NmU5ZDUtZmY0NS00NDY0LWIyYmIt
NjEwYjllNzJhNmJlLzEvUFJLWGtvWnJGaUU3VnNXX3ByNjZ4OFlZc1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81NmU5ZDUtZmY0NS00NDY0LWIyYmItNjEwYjllNzJhNmJl
LzEvUFJLWGtvWnJGaUU3VnNXX3ByNjZ4OFlZc1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcA6rlhw
ml0onzlC7MoYsh832nh4GKb2BO3Pl1DEDIn25OOB5TkQK3mP5S14Y9A1CdH3KePw
CWFLBOKhjmEV0GDYKOBaosrxVDICJc65eRyFm7FMaZaCrPWO7n5qjeIx7yJKgKzv
RbWkI9uxfguq29XBz1z0nCzxI+xhYt8fERS82TSnWtQGLaCx8VPLlSbXnWVEJqN/
pn5om+9skChoYiUeewTBt4HVDoIJrMUmelh/P7rIChKldhNmUpLspl+qCWYVpPdS
TGga7qsq0+S3NzjZO3FzUiqXrFXi4PdcGOXlxMKNMJK15KYPqXuw2+Y/XmyyBFiK
sOqWfS/V9G7pYw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:05 2025 by rpki-client