Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
File:                     PRLRHJogPV58gmPt9URH47c1i38.mft (raw, json)
Hash identifier:          vc9rxum++tANdZoeUcW+eIdRP4SDewOsT6IMVpf2+r8=
Subject key identifier:   E1:60:91:89:DD:4B:A9:24:B5:41:3D:9A:55:7C:E5:37:C2:08:3E:B9
Authority key identifier: 3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
Certificate issuer:       /CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Certificate serial:       01A08AFB269EFCBDDF48B581016796BE1AB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
Manifest number:          156F
Signing time:             Thu 10 Sep 2026 11:01:50 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:50 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:50 +0000
Files and hashes:         1: PRLRHJogPV58gmPt9URH47c1i38.crl (hash: rNkjltfDmz3xGCFLBO8IbSEd3F32iiU/YQ2ct7pRb40=)
                          2: fL10Ig4d3crLZGY9ylUsNdJrhx4.roa (hash: 59cphjVnvRGhN51MwGpM2RBhtTLQE+TadVntWntgkw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fb:26:9e:fc:bd:df:48:b5:81:01:67:96:be:1a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
        Validity
            Not Before: Sep 10 11:01:50 2026 GMT
            Not After : Sep 11 11:01:50 2026 GMT
        Subject: CN=e1609189dd4ba924b5413d9a557ce537c2083eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:7b:d1:81:24:a4:9c:62:3c:7b:12:c9:8a:
                    67:f4:eb:2f:40:42:db:7b:b8:5f:99:16:a4:fc:1c:
                    af:ea:e7:09:a6:22:f1:c5:81:6a:c7:1d:68:eb:30:
                    d3:e8:4f:66:c3:78:cd:ca:62:7c:1e:76:1c:0e:42:
                    11:7e:1b:82:d6:2f:65:f8:14:4d:fa:91:bb:7c:32:
                    88:ae:ea:94:48:cc:55:d0:7f:06:ad:23:a8:35:75:
                    e9:39:9e:9a:05:12:e3:ef:79:7b:f7:42:9d:27:6d:
                    4b:45:ea:9e:a5:3f:3c:4c:50:6a:3e:9b:93:0a:ab:
                    5d:b9:65:f9:ea:9f:a4:64:c9:87:1c:22:db:d6:4d:
                    50:0d:09:81:d2:c3:a4:74:63:c4:6a:07:74:e1:cb:
                    c8:2f:d0:d9:78:73:9e:01:97:ce:ac:66:ad:f1:7f:
                    e4:28:41:1b:fc:6a:3d:17:e9:a0:a1:bf:3c:09:cf:
                    c6:f3:f7:a5:e8:8f:8d:3d:0a:a6:21:e9:c6:5e:dd:
                    a7:8c:aa:f5:f4:f7:46:39:f5:fc:54:b5:1a:e7:e6:
                    84:d4:d7:b0:e5:64:10:db:9f:fe:3d:3d:3b:04:66:
                    74:dd:00:a8:99:6c:8e:c0:0a:88:65:24:8e:a0:a4:
                    47:1c:16:47:72:95:c8:86:ab:f1:88:a9:4f:f9:c4:
                    39:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:60:91:89:DD:4B:A9:24:B5:41:3D:9A:55:7C:E5:37:C2:08:3E:B9
            X509v3 Authority Key Identifier:
                keyid:3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b0:07:7e:50:b7:6f:66:80:9b:c7:db:db:43:96:36:c8:fb:
         1a:48:35:7f:42:8b:e5:39:34:6a:f4:11:47:02:1b:8e:98:1e:
         72:10:3f:25:90:80:5f:9a:f5:78:f0:d4:d9:21:59:16:c0:08:
         c3:c1:e4:00:a2:ef:fe:88:59:00:df:90:1e:f7:cf:aa:9e:b8:
         0a:0a:24:98:93:f1:3e:cc:70:1e:6e:e2:ae:92:13:cc:82:f1:
         c8:6a:40:9b:39:01:a0:56:7d:29:06:69:de:fa:ca:ef:4e:08:
         46:62:82:35:35:5d:f0:9c:dd:01:d1:78:86:eb:f1:7b:6b:4b:
         46:38:b4:ee:47:a6:0d:90:cf:e9:98:9f:fa:90:b9:3e:38:a4:
         c7:f7:08:de:8a:c8:95:d1:e5:65:fb:0c:98:f7:7a:b3:7b:9b:
         ae:82:1c:b1:6d:0a:ab:eb:47:c3:ac:e1:2b:b9:3a:3b:aa:3d:
         2c:04:af:5e:6b:be:59:25:20:3a:ab:32:9b:58:60:a3:77:f8:
         65:71:3b:22:44:28:3d:d6:51:51:41:66:95:d3:2e:03:42:e1:
         f7:f3:f7:0e:a1:17:21:41:f1:45:1f:86:f8:00:a2:24:e6:41:
         a3:82:f6:f4:9f:7f:08:73:ae:79:88:4a:b7:e9:d4:b1:ed:5c:
         c0:a9:d8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:45 2026 by rpki-client