Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
File:                     PRLRHJogPV58gmPt9URH47c1i38.mft (raw, json)
Hash identifier:          C8LstL4lXEgv/z+VA6HJP98ae/e+MgVR5bXNfZdmd4s=
Subject key identifier:   63:6F:C6:52:39:4D:A1:C5:BE:A2:08:9C:E6:09:DA:63:6E:32:A3:CD
Authority key identifier: 3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
Certificate issuer:       /CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Certificate serial:       019D27DFC8A39AB0DF3CED64AA22F1FF9A77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
Manifest number:          13AE
Signing time:             Thu 26 Mar 2026 02:01:10 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:10 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:10 +0000
Files and hashes:         1: PRLRHJogPV58gmPt9URH47c1i38.crl (hash: CJIkvzqVO42OqmHll9m9cFD/90fG3DD6w2UmGAaEfzA=)
                          2: fL10Ig4d3crLZGY9ylUsNdJrhx4.roa (hash: 59cphjVnvRGhN51MwGpM2RBhtTLQE+TadVntWntgkw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:c8:a3:9a:b0:df:3c:ed:64:aa:22:f1:ff:9a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
        Validity
            Not Before: Mar 26 02:01:10 2026 GMT
            Not After : Mar 27 02:01:10 2026 GMT
        Subject: CN=636fc652394da1c5bea2089ce609da636e32a3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:cc:da:69:3d:47:23:d1:9c:6d:c0:50:8b:
                    92:4f:ed:e8:58:ba:b5:3a:63:00:b0:78:d2:a2:52:
                    71:87:cb:18:e5:f8:a6:f3:f6:52:e1:74:34:b5:30:
                    68:d6:9f:ea:1f:4e:d1:78:e5:d8:02:0b:16:11:4c:
                    1b:d6:9a:7d:00:5f:61:3f:2e:b2:bb:82:85:05:f6:
                    09:8a:94:3a:41:7b:0e:94:e3:3a:59:f8:7b:7e:6c:
                    09:93:7c:32:af:9d:11:4d:e0:68:c7:17:85:a0:66:
                    76:b0:b9:fb:45:64:d6:42:51:99:40:88:f6:9a:97:
                    c1:e2:46:a8:b7:aa:ab:0f:d5:8d:6c:ad:2b:72:78:
                    8b:cf:64:f0:04:e0:e1:d2:8b:96:e6:cb:eb:7e:51:
                    7b:89:56:c1:bb:24:4d:01:07:8a:07:1a:56:0e:05:
                    4f:62:a9:d4:5d:98:5b:e7:2c:70:4c:b9:2d:d7:e6:
                    86:57:c7:d5:c7:0a:24:e4:d9:8d:94:40:34:64:7f:
                    ea:aa:01:a8:c1:79:31:39:1b:b3:48:dd:c0:eb:1b:
                    6a:1f:8d:d0:8a:8d:fe:03:42:83:75:43:f1:15:2f:
                    2e:b3:c2:52:b0:57:11:d9:89:cb:5a:58:19:bb:67:
                    4f:ff:c9:ed:fc:3a:38:3c:03:20:13:0b:a5:e8:97:
                    d8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6F:C6:52:39:4D:A1:C5:BE:A2:08:9C:E6:09:DA:63:6E:32:A3:CD
            X509v3 Authority Key Identifier:
                keyid:3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:61:67:f7:b4:bf:0a:b2:c0:c5:ee:83:46:cf:a7:9c:c2:55:
         5e:ef:5f:81:32:36:fb:36:f2:19:46:94:ea:84:1d:03:ee:87:
         38:41:8f:6b:f5:a2:97:b4:6d:b5:17:e5:f4:7e:e1:95:f8:c6:
         66:c9:5d:ab:99:bf:67:7d:96:a1:60:20:fb:10:c8:73:bb:6a:
         79:ef:b0:5e:b3:29:99:f8:82:34:51:47:ba:36:70:bd:51:1f:
         ba:6d:78:de:e4:b7:57:82:fa:d7:00:e8:77:8d:86:05:4e:83:
         77:ae:a2:45:aa:42:88:e7:60:26:03:00:78:b8:ba:bb:bb:18:
         60:d1:c1:2a:fa:78:1d:b4:ab:00:1f:da:7c:43:40:19:ff:96:
         d2:56:aa:05:d9:4e:98:10:43:ca:4f:e7:83:02:f7:62:d9:41:
         12:6f:12:89:bf:f6:c7:26:25:c9:e8:04:0e:93:22:d1:c6:42:
         cd:3d:87:42:04:b0:4d:2f:69:c9:28:ad:60:9c:b7:e6:30:82:
         6e:fd:bf:67:28:e9:9a:a2:4b:8d:81:20:ed:4a:7b:a8:ab:a4:
         4d:2f:ef:97:36:b7:7f:94:33:5b:b3:f1:16:a2:fb:8e:68:c5:
         66:f4:e1:12:15:cf:2b:fb:97:0d:d5:37:56:f6:54:14:c1:0a:
         46:f6:c1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:43 2026 by rpki-client