Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
File:                     PRLRHJogPV58gmPt9URH47c1i38.mft (raw, json)
Hash identifier:          O2s3kK7aGGxH+wGKw0vITMuyqGBv/YkBqrMuELg7IHw=
Subject key identifier:   2A:59:CE:AC:9C:64:30:49:DE:45:38:70:C2:79:7D:E8:D5:96:69:B5
Authority key identifier: 3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
Certificate issuer:       /CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Certificate serial:       019F93C8D4833E9256A41D2DA4943C5467FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
Manifest number:          14EF
Signing time:             Fri 24 Jul 2026 11:00:39 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:39 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:39 +0000
Files and hashes:         1: PRLRHJogPV58gmPt9URH47c1i38.crl (hash: l2h1Zmfrb9TaJd+3kojXK3CwpEcvQ5ivQ225Y0+NZ3c=)
                          2: fL10Ig4d3crLZGY9ylUsNdJrhx4.roa (hash: 59cphjVnvRGhN51MwGpM2RBhtTLQE+TadVntWntgkw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:d4:83:3e:92:56:a4:1d:2d:a4:94:3c:54:67:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
        Validity
            Not Before: Jul 24 11:00:39 2026 GMT
            Not After : Jul 25 11:00:39 2026 GMT
        Subject: CN=2a59ceac9c643049de453870c2797de8d59669b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d3:43:95:53:0e:cd:e8:de:08:b7:5a:76:58:
                    19:98:72:68:87:b3:15:95:4e:f6:7b:1a:09:40:06:
                    10:85:9f:fd:54:6d:66:db:c2:56:ae:e9:48:7a:8e:
                    3a:e3:84:c0:35:69:e8:9c:14:5b:eb:a2:16:5b:b6:
                    f5:de:c5:9a:3e:9b:60:f3:68:ae:73:09:77:71:32:
                    3e:6b:8a:8c:5b:4c:8e:64:75:3a:06:81:c4:7c:bf:
                    ae:77:8c:f7:ea:3e:38:f1:12:91:d1:47:42:01:7a:
                    69:e4:56:41:c4:78:f7:66:b6:72:26:43:40:90:0b:
                    c9:94:41:33:92:66:a4:e8:16:49:e6:f1:95:f4:8c:
                    2d:28:73:91:6d:24:ce:90:37:b9:27:dc:03:eb:36:
                    c8:54:81:75:08:eb:b6:88:48:79:83:4d:cb:9c:16:
                    8f:df:ab:9e:fc:05:d6:91:ec:fd:cc:be:f0:80:17:
                    1a:53:89:c1:3b:0f:03:59:56:b4:db:52:64:3e:6f:
                    b3:f3:38:c8:9f:4b:2d:49:4b:7a:e4:dd:2e:2b:ad:
                    a8:97:c0:59:06:76:dd:ec:1d:25:24:a0:07:31:25:
                    17:98:7e:f5:be:3d:49:5e:68:0e:38:88:b0:09:ac:
                    32:af:1f:6c:4b:d7:bc:26:28:79:4e:a0:7c:3e:9e:
                    7a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:59:CE:AC:9C:64:30:49:DE:45:38:70:C2:79:7D:E8:D5:96:69:B5
            X509v3 Authority Key Identifier:
                keyid:3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:7a:a0:38:b7:fd:80:39:d4:0a:49:09:b6:25:2f:e9:89:64:
         af:07:d8:32:bb:b1:f3:04:0d:ad:94:ab:90:f5:5c:b8:67:6b:
         70:2d:bd:5d:50:09:32:bf:5a:dc:67:75:b8:6e:69:9b:a6:f1:
         10:2f:fe:a0:ba:4a:e6:5a:ae:1c:f0:c9:16:a9:1e:b2:5c:c4:
         9f:22:00:a9:2c:b8:e1:97:0e:ef:da:8b:aa:55:00:94:24:de:
         3c:61:02:bb:66:f9:ad:36:a4:24:9b:ab:08:04:fa:56:ad:c1:
         ee:bd:de:12:bf:6f:11:1d:d9:90:f8:d0:3c:03:79:f3:8d:74:
         c8:5b:2d:98:18:70:82:c7:d4:11:1c:96:0d:52:c3:29:78:15:
         52:7b:58:33:36:01:4a:36:16:9c:e1:52:1b:97:b6:64:66:40:
         dd:4f:c5:df:80:e5:5a:f6:fd:18:23:7c:27:ce:b9:b0:d0:f0:
         13:99:3c:e7:c4:11:65:a8:aa:60:20:2a:e2:28:0c:88:e0:ea:
         cf:3d:e1:04:4b:a8:73:bb:64:5b:18:5e:24:3f:44:8c:ae:c9:
         a4:fd:f3:d1:25:6d:c9:26:c0:30:7f:7a:f0:cb:50:6e:de:49:
         15:63:3c:8d:0d:4f:33:2d:64:16:75:0f:10:b6:27:d6:3d:7f:
         c1:f0:f6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:21 2026 by rpki-client