Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File:                     PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier:          NDbO8Y4hjYTA9A8gZvb4iy+u+Rs86hrCFfPCHvwdJOA=
Subject key identifier:   C7:98:AC:A2:53:2F:1D:1A:BB:00:0C:6D:C0:E1:19:0E:91:44:01:BC
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer:       /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial:       019E322984816BBD073361F813B1068566B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number:          14E6
Signing time:             Sat 16 May 2026 19:00:41 +0000
Manifest this update:     Sat 16 May 2026 19:00:41 +0000
Manifest next update:     Sun 17 May 2026 19:00:41 +0000
Files and hashes:         1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: RWg4xjFIZ/EqxlV1N2iPd1ZYAaYvYhFhM32ZQp6AcW4=)
                          2: Ydl5RfFIrbsmSH6-XTvntjcnl-A.roa (hash: lwEnqSA72LQH4xIm5xneqDzJT1+5eNfuOciZJI5TDZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:29:84:81:6b:bd:07:33:61:f8:13:b1:06:85:66:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
        Validity
            Not Before: May 16 19:00:41 2026 GMT
            Not After : May 17 19:00:41 2026 GMT
        Subject: CN=c798aca2532f1d1abb000c6dc0e1190e914401bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:f7:ef:31:cc:98:8c:df:ba:ea:57:05:b0:
                    a7:0e:b1:cc:79:f9:a3:e1:8c:d7:da:d7:93:52:24:
                    66:8f:34:57:65:7d:8a:7e:72:95:04:db:55:85:d6:
                    98:cf:fe:c4:c7:fd:27:48:ef:6b:65:96:d4:cc:9a:
                    53:bf:42:40:b7:b0:df:14:36:6c:d5:cf:64:28:1f:
                    a5:d4:37:1e:cc:69:06:16:f4:e3:8b:94:d4:3a:77:
                    a7:31:8e:e7:fc:34:57:20:b4:64:63:b2:88:ef:de:
                    6f:e1:1d:4b:b7:e0:6e:96:b6:93:b0:45:37:68:f6:
                    8f:1d:7c:22:33:47:80:54:80:c1:fa:eb:bd:e4:da:
                    d6:6b:c5:08:ec:39:52:65:9d:36:41:b8:9d:01:ea:
                    a5:b2:d3:f9:15:49:9d:e0:d3:a9:d8:21:84:ff:90:
                    be:65:f2:24:05:b0:13:6f:ca:93:ce:49:55:81:6b:
                    db:18:58:ee:58:da:2e:c7:0d:bb:29:4a:5d:71:83:
                    cf:e7:c0:98:b9:68:6e:71:bd:1b:26:ba:05:6d:b5:
                    0c:25:c0:9e:b0:7a:44:62:4c:39:38:32:30:e0:75:
                    00:ca:b0:04:d7:e3:3b:72:ba:f6:5e:dd:65:e8:cc:
                    00:d5:83:98:0e:9a:77:b1:05:c4:2f:82:2e:93:1a:
                    2b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:98:AC:A2:53:2F:1D:1A:BB:00:0C:6D:C0:E1:19:0E:91:44:01:BC
            X509v3 Authority Key Identifier:
                keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c9:11:b9:04:4f:1e:9a:10:4a:f5:d3:e4:b9:8f:8c:08:06:
         32:d3:ed:16:54:ab:f1:0a:c4:72:b0:66:07:78:6d:ac:56:a6:
         13:ff:26:de:8c:17:c9:9d:06:e5:21:f1:c9:db:ee:f2:ca:76:
         c0:91:d9:0b:7e:89:ca:15:fc:11:c6:02:7c:01:67:eb:85:80:
         7a:97:50:c7:fe:9d:f3:25:50:a0:21:85:c2:dd:6c:a0:ba:59:
         e1:60:9f:9e:47:47:78:42:d2:ae:49:40:15:5e:2a:40:69:f1:
         33:af:ec:2a:c3:f2:4d:af:2a:22:4e:11:4a:cc:36:bb:f2:26:
         16:76:1c:f8:20:3b:ec:74:f5:67:63:f2:36:80:3a:5a:23:d3:
         7b:e6:18:ff:e9:0c:4b:86:bb:22:75:8e:69:9c:4d:d8:cd:f4:
         17:1f:59:c7:69:db:22:bc:96:57:ea:db:b4:fc:5c:d1:44:42:
         52:44:e7:78:17:22:86:8f:a3:20:d4:39:e1:17:52:10:87:44:
         63:1d:ae:f1:39:9a:90:fa:ff:3b:cc:23:95:70:a7:4d:e7:a2:
         c1:e4:41:ff:ea:fc:86:6d:f8:cd:a9:bc:9c:48:2d:6b:a8:ee:
         f2:a0:2c:90:ae:2d:16:86:36:76:5a:fe:9c:c2:1f:f1:8a:52:
         33:c4:5c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:29:36 2026 by rpki-client