Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
File:                     PRLRHJogPV58gmPt9URH47c1i38.mft (raw, json)
Hash identifier:          uMOeMj34mKSstdxcdtWja+MIyZr5je+N9neHJf8TECQ=
Subject key identifier:   09:DA:12:2C:70:96:E1:FF:86:94:C0:DB:28:EF:2D:10:34:32:D5:FA
Authority key identifier: 3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
Certificate issuer:       /CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Certificate serial:       019D99D0BB268E86532CC9112857851F7081
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
Manifest number:          13E9
Signing time:             Fri 17 Apr 2026 05:01:26 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:26 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:26 +0000
Files and hashes:         1: PRLRHJogPV58gmPt9URH47c1i38.crl (hash: zYE+9iMXCMKKZB2DADrHsSTjTxL5phqAFjmCevGEYwE=)
                          2: fL10Ig4d3crLZGY9ylUsNdJrhx4.roa (hash: 59cphjVnvRGhN51MwGpM2RBhtTLQE+TadVntWntgkw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:bb:26:8e:86:53:2c:c9:11:28:57:85:1f:70:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
        Validity
            Not Before: Apr 17 05:01:26 2026 GMT
            Not After : Apr 18 05:01:26 2026 GMT
        Subject: CN=09da122c7096e1ff8694c0db28ef2d103432d5fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c3:8f:65:77:49:ca:9a:13:0c:51:ad:b9:24:
                    1d:dd:11:e5:09:27:f7:25:fc:16:97:72:e7:21:c2:
                    19:7b:8e:4e:ad:0d:09:8d:f9:af:f9:7e:93:30:bb:
                    0b:af:59:87:da:28:36:39:22:ab:6f:dc:32:25:92:
                    3c:e8:e8:48:2d:4d:63:56:e8:61:e6:82:a5:94:80:
                    b7:d3:f8:dd:3b:9e:42:b2:ba:e9:68:87:52:b2:ed:
                    94:a2:73:7b:21:91:6f:b7:b5:77:e0:0d:35:d5:b9:
                    01:c5:88:ab:1a:66:54:7a:69:c0:51:81:da:b7:4a:
                    c6:7e:be:80:db:35:26:30:73:77:61:fa:f0:f7:31:
                    6a:a4:bc:e8:95:d9:33:fa:5c:a9:47:51:12:4b:51:
                    f2:91:25:49:a8:ee:e1:79:b2:18:a1:3d:8a:f4:eb:
                    2f:79:e9:1e:73:3e:a8:49:a8:9b:4f:81:5b:94:3b:
                    dc:6a:79:6f:28:24:0b:d3:80:01:b4:ae:2d:9b:d4:
                    fc:5e:d2:78:ca:de:e7:d8:99:45:08:78:e6:af:a1:
                    0d:ed:34:d8:3b:fe:52:a2:61:a2:9f:3a:f1:d6:17:
                    87:d3:bc:85:c1:bd:fe:4d:10:bd:84:07:7d:42:d4:
                    06:ec:b5:2c:40:19:7e:d1:85:84:7d:6a:8a:cf:0c:
                    8a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DA:12:2C:70:96:E1:FF:86:94:C0:DB:28:EF:2D:10:34:32:D5:FA
            X509v3 Authority Key Identifier:
                keyid:3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:bf:97:43:41:c0:b9:99:02:71:6c:cc:e2:d1:20:5f:93:3f:
         c3:b7:00:78:3b:1d:b1:93:27:55:5a:dd:8e:64:76:48:ed:92:
         58:dd:a5:e1:a4:81:1c:aa:b5:78:8a:d6:dd:a9:6c:95:bd:fd:
         f7:7e:9b:4a:5d:f2:7f:fe:5c:f8:88:d7:65:8a:28:86:3a:e2:
         4b:45:0a:f4:dc:d3:8f:68:3f:1c:56:28:51:c2:fb:b3:ea:76:
         9c:a1:4c:7f:e3:94:db:77:e6:90:61:0e:af:93:95:45:cc:ca:
         69:30:53:7d:01:f3:e3:ec:15:1b:a6:bc:a4:e1:f2:70:81:e8:
         43:47:db:40:ca:d5:e5:9c:52:f3:5b:4a:e4:40:e5:6d:92:ba:
         f0:2b:26:78:a5:ed:90:0e:a3:08:52:f5:9a:35:1c:d5:71:c5:
         ad:c1:bf:52:f7:22:4b:8a:98:1f:d0:71:e1:4d:2e:ce:5f:9b:
         b2:72:9c:12:6f:6e:1f:bd:e8:ff:30:8f:fb:a3:a0:98:0d:6e:
         0d:aa:ef:0a:e6:bd:1c:2d:f8:d6:45:e3:91:5c:19:5a:78:be:
         34:49:95:62:a6:96:19:82:7b:c8:ad:55:60:ee:48:3d:01:07:
         bc:49:68:78:40:d1:5a:75:89:90:c0:94:bf:11:51:08:03:ef:
         d2:dd:8a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:16:52 2026 by rpki-client