Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File:                     PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier:          YqinM6NUZ2CVIgBQUyyJFOR6T+lo8sl8Txf2AV4ANSA=
Subject key identifier:   45:C2:C6:C7:EC:DE:B6:E7:BD:9D:B2:58:F2:5D:05:C8:92:B6:12:5D
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer:       /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial:       019ED4622C050955ADCF682E43BC21E21EC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number:          153A
Signing time:             Wed 17 Jun 2026 07:01:03 +0000
Manifest this update:     Wed 17 Jun 2026 07:01:03 +0000
Manifest next update:     Thu 18 Jun 2026 07:01:03 +0000
Files and hashes:         1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: F/Fhl0EzPGyJvMtnsmqJsWkHCqu1ZPdV5RWjY2XdEKs=)
                          2: Ydl5RfFIrbsmSH6-XTvntjcnl-A.roa (hash: lwEnqSA72LQH4xIm5xneqDzJT1+5eNfuOciZJI5TDZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:62:2c:05:09:55:ad:cf:68:2e:43:bc:21:e2:1e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
        Validity
            Not Before: Jun 17 07:01:03 2026 GMT
            Not After : Jun 18 07:01:03 2026 GMT
        Subject: CN=45c2c6c7ecdeb6e7bd9db258f25d05c892b6125d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2f:93:69:70:f6:4d:3d:08:14:df:1b:ff:c9:
                    83:0e:f2:55:da:6a:a4:fc:ac:5b:58:ea:12:0d:df:
                    7d:95:91:8b:bd:3f:8d:42:24:02:f9:ca:d4:f7:5e:
                    97:2b:cd:32:17:2c:10:af:d2:36:6e:8b:30:2c:a1:
                    79:14:f9:59:56:b9:0b:36:cf:3b:7a:e0:5a:31:b2:
                    db:c2:f5:d0:61:ca:a6:c6:c2:00:bb:e0:25:af:c3:
                    c9:59:31:b9:e2:ef:3f:84:2a:68:75:49:12:52:36:
                    a7:72:7d:45:0d:94:2e:b9:6b:c9:bb:0c:79:33:7d:
                    c3:f0:a0:a1:0a:06:87:47:d8:0f:67:37:0e:4a:62:
                    df:88:cf:4d:7f:a4:d0:60:63:0f:ac:2e:e6:bb:57:
                    c9:6e:4f:c1:3a:e4:2f:3a:c2:1a:28:2c:40:a6:8e:
                    c1:77:67:fc:27:70:16:a8:db:f3:23:6c:d0:80:14:
                    de:50:44:d7:3a:6e:93:7f:f1:6f:fc:45:8c:06:e9:
                    88:97:cf:41:df:43:a3:60:7e:f6:26:fa:a9:85:ba:
                    14:58:0a:20:4f:62:99:31:96:7a:0a:0a:53:5a:45:
                    36:4e:16:c1:cf:33:74:0c:76:6a:26:14:c7:7f:b7:
                    2f:2f:0d:67:89:29:b7:cf:2a:2f:ec:d3:c1:be:d8:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C2:C6:C7:EC:DE:B6:E7:BD:9D:B2:58:F2:5D:05:C8:92:B6:12:5D
            X509v3 Authority Key Identifier:
                keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e9:45:8d:f1:10:a8:84:ce:49:39:bf:58:23:c4:a3:eb:a5:
         d4:2c:dc:f3:fb:72:7e:c8:f0:83:f7:2a:e6:d9:27:75:8d:81:
         eb:89:de:70:da:59:4b:2b:83:f3:ed:ae:05:61:4a:86:b7:54:
         42:86:10:1b:fd:fd:f0:7b:86:f7:b5:56:42:30:01:90:09:aa:
         06:9a:7a:07:55:3d:44:61:7c:4b:f8:e4:65:76:80:c8:7a:c0:
         28:f1:83:d0:6b:f8:9a:59:cf:a3:87:86:9e:50:93:b7:f8:d0:
         36:79:7a:58:35:be:76:6b:fb:95:62:b1:79:5d:99:95:21:7f:
         bd:78:23:ee:96:74:cf:0b:2a:4f:0b:ee:27:77:a7:41:40:9a:
         1e:71:ff:20:87:5e:14:1b:2a:47:da:4c:31:1d:f6:9c:63:1f:
         85:82:c5:22:82:48:44:70:93:cd:b9:9d:37:12:99:37:09:55:
         74:e9:64:15:3c:a5:6d:79:69:a8:a3:fb:e3:3d:19:d8:48:cb:
         b5:68:d2:7d:83:b9:ec:00:4c:e4:b0:70:9b:bf:9a:0c:27:59:
         00:94:a4:8a:bd:59:69:9b:87:a1:4d:31:21:fc:b6:83:55:c6:
         90:38:0d:fd:95:69:d1:fa:be:30:7d:b5:03:65:d6:84:e6:58:
         ed:6b:d6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:43:02 2026 by rpki-client