Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
File:                     phvll6k-axrZQXjQPo6MFVcmeMc.mft (raw, json)
Hash identifier:          DTOrIALeLxlJp2S7xxwda+sw6LiJNkQbP2lWHCDnErQ=
Subject key identifier:   63:CC:A0:9B:FE:48:2A:89:B1:59:48:60:C4:16:61:14:10:2D:90:1F
Authority key identifier: A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7
Certificate issuer:       /CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
Certificate serial:       019CAEA3F7562B15CFB47F2F0F9FD7A55CA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
Manifest number:          062C
Signing time:             Mon 02 Mar 2026 13:01:47 +0000
Manifest this update:     Mon 02 Mar 2026 13:01:47 +0000
Manifest next update:     Tue 03 Mar 2026 13:01:47 +0000
Files and hashes:         1: phvll6k-axrZQXjQPo6MFVcmeMc.crl (hash: jX82DG/SpYCyf9dfkUXWkEid5OyGiZfIkxfHjQr7WHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a3:f7:56:2b:15:cf:b4:7f:2f:0f:9f:d7:a5:5c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
        Validity
            Not Before: Mar  2 13:01:47 2026 GMT
            Not After : Mar  3 13:01:47 2026 GMT
        Subject: CN=63cca09bfe482a89b1594860c4166114102d901f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fd:92:a9:95:7a:fe:11:53:04:aa:e6:3b:67:
                    bf:6f:f2:c6:58:c8:fa:ac:7b:84:4e:d1:14:9a:4e:
                    f4:ef:2b:99:a5:9d:78:f8:fe:1a:9e:ac:25:66:4a:
                    9a:9d:7b:0f:5f:ec:54:28:c3:92:1f:22:60:41:dc:
                    f2:26:72:f5:65:c3:15:f0:74:6a:b7:8d:8c:ad:f1:
                    66:49:d3:0b:24:72:dc:88:88:07:64:b0:86:dc:20:
                    88:84:ac:00:df:f8:14:21:18:ea:5d:63:f6:90:de:
                    4a:ea:24:52:6e:8a:2b:c5:37:4b:e5:bd:09:cf:18:
                    66:91:53:75:f9:eb:dc:98:d4:81:08:c0:06:2b:0e:
                    ba:7d:36:ae:85:9a:37:73:8a:de:0f:5d:06:42:07:
                    71:ca:4a:c0:8d:1d:79:bf:35:ae:5c:05:0e:a3:42:
                    5a:ea:7a:d6:14:80:f5:3a:d3:e1:b6:db:f4:39:8c:
                    27:c1:c1:57:d8:df:f2:a8:28:a3:dd:ad:4a:35:b2:
                    5d:5f:e2:71:58:cc:3f:3e:2c:55:57:50:30:15:8b:
                    8d:3b:8a:92:d6:b7:a6:3d:ce:5a:a8:40:e2:2a:a2:
                    53:8f:e7:5a:b9:9e:58:69:36:54:10:ff:a0:63:0b:
                    b7:7c:68:c6:d7:53:94:54:37:f3:ad:ff:2d:af:ae:
                    0a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CC:A0:9B:FE:48:2A:89:B1:59:48:60:C4:16:61:14:10:2D:90:1F
            X509v3 Authority Key Identifier:
                keyid:A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:01:35:73:29:9f:b1:0e:66:36:7e:54:89:1d:49:d1:88:b7:
         88:76:60:27:ab:a1:98:cb:bb:d1:b0:7d:9f:04:72:d7:36:f2:
         17:a0:8e:bf:be:04:2c:aa:09:e5:42:0f:a8:74:2f:fa:40:87:
         19:1c:6d:19:cb:a0:07:7e:5a:b9:d1:7f:81:81:43:ed:8a:b0:
         5f:de:44:90:9e:6f:8c:3a:b2:49:b6:4d:84:70:2d:8d:23:64:
         49:56:0d:bb:96:d1:d4:bd:a0:de:8b:35:13:a6:12:5d:39:43:
         62:84:ce:a0:b5:67:b9:a6:b4:f9:43:28:ad:fa:1c:45:b9:60:
         8c:29:b3:43:72:97:00:2c:b4:d3:fd:3e:43:76:37:74:4e:fa:
         a8:62:32:1f:71:7a:7b:b5:5f:52:c5:e5:3b:63:5d:77:4a:90:
         d8:19:56:40:dd:e3:b6:c7:60:18:04:a1:51:42:a8:34:40:7f:
         2e:c8:61:ec:c3:8b:07:47:ff:5c:68:9c:95:ed:78:4f:f9:27:
         5a:8b:fc:69:68:78:25:6a:30:6b:4f:28:e3:92:2b:22:ae:84:
         c4:4c:60:06:4c:2a:56:be:99:70:65:ff:f0:a0:d2:dc:6f:f7:
         21:07:be:72:7a:22:86:19:39:0a:dc:96:3d:29:db:55:66:e0:
         ce:75:1c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:39:30 2026 by rpki-client