Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
File:                     PRLRHJogPV58gmPt9URH47c1i38.mft (raw, json)
Hash identifier:          egp9uW0cS8jAImJT94O28i3uCrafxOCf7E2r4uhjSFk=
Subject key identifier:   03:36:96:4B:B8:4D:DF:AC:F4:41:BD:61:54:DF:FE:14:10:92:B3:E8
Authority key identifier: 3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
Certificate issuer:       /CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Certificate serial:       019CAA5832785B451A67C89D42BD88A699B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
Manifest number:          136D
Signing time:             Sun 01 Mar 2026 17:00:32 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:32 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:32 +0000
Files and hashes:         1: PRLRHJogPV58gmPt9URH47c1i38.crl (hash: XJQw65Vh9o1s+BsLJLUXhuAgsdJa/2EUEF/qoTKKk+E=)
                          2: fL10Ig4d3crLZGY9ylUsNdJrhx4.roa (hash: 59cphjVnvRGhN51MwGpM2RBhtTLQE+TadVntWntgkw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:32:78:5b:45:1a:67:c8:9d:42:bd:88:a6:99:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
        Validity
            Not Before: Mar  1 17:00:32 2026 GMT
            Not After : Mar  2 17:00:32 2026 GMT
        Subject: CN=0336964bb84ddfacf441bd6154dffe141092b3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d2:49:64:9c:a4:c8:aa:f4:e7:fc:c1:74:4e:
                    5a:70:d1:b6:3b:5f:a4:d1:89:7b:0b:91:91:1a:3a:
                    19:1c:69:99:92:12:65:5e:08:f3:5a:09:fa:c1:c5:
                    89:fc:df:d5:4a:2f:f6:9e:ce:78:a9:d8:cb:23:86:
                    e8:8d:bf:01:16:2a:50:a9:83:a5:81:24:e2:16:4b:
                    37:1f:1b:eb:10:d9:27:83:bc:24:db:50:9a:99:1e:
                    d8:ca:23:e5:62:a2:92:bc:35:8c:44:99:6b:7a:09:
                    49:71:2c:4c:31:c1:66:1a:fd:74:6b:7b:56:34:5a:
                    f5:f4:67:5e:16:29:cc:43:c3:90:8b:6f:ce:e9:fe:
                    c3:74:3d:b0:f8:df:09:c9:f2:84:ce:44:5e:e8:d9:
                    79:4a:9c:98:24:76:51:5c:9c:02:92:7b:6f:a2:48:
                    1c:5a:96:a6:79:a9:70:b8:f9:b6:e5:68:a6:39:95:
                    bd:4b:05:f9:2a:d3:e3:b6:63:d9:de:d3:40:01:1e:
                    9e:df:81:9a:43:1f:45:07:48:44:ca:3b:65:0c:c7:
                    fb:11:e8:cb:e5:65:a3:21:94:52:2c:12:19:a6:fb:
                    e0:44:78:35:af:2c:84:bb:37:a8:19:ce:ae:65:a1:
                    e8:c0:c9:2c:83:b4:bc:21:54:c4:31:1a:49:19:5b:
                    92:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:36:96:4B:B8:4D:DF:AC:F4:41:BD:61:54:DF:FE:14:10:92:B3:E8
            X509v3 Authority Key Identifier:
                keyid:3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:54:b4:96:39:a7:e8:a6:fa:0c:d6:52:b4:02:bf:26:b5:a3:
         64:e3:8c:dd:46:0a:b2:59:92:c3:d1:ff:4a:15:99:6a:38:61:
         bd:d0:9d:38:65:03:53:1a:49:98:22:18:6f:88:b2:64:44:d7:
         aa:88:06:84:d9:1a:d7:2d:b7:e6:4b:3a:c2:d7:e6:26:f1:f9:
         0d:15:b0:d5:5c:6f:db:c4:ca:26:88:74:7f:a0:31:99:a2:58:
         cd:c5:04:d6:2b:74:8b:22:92:1c:b3:b4:7a:37:80:2c:02:33:
         04:eb:75:b6:8d:c5:89:0f:16:ea:8b:00:df:0a:65:0d:7b:36:
         d3:26:61:a6:74:c0:5b:3a:d8:d1:a3:33:7b:04:ed:a0:8b:c7:
         56:f1:b8:88:36:b2:72:5b:16:d1:5f:d1:56:57:39:2c:cb:5a:
         0b:58:1f:d3:6a:96:4e:c9:5c:06:ab:ca:15:88:9d:72:fd:bc:
         b7:6e:21:3a:b3:d6:19:a6:8e:b0:d9:c3:9b:3a:2e:90:d0:67:
         ea:1a:e2:6a:8d:e6:42:f4:2a:d2:79:d1:db:b8:07:f6:4b:53:
         3b:6c:fd:6b:c5:fb:78:9a:f0:71:a0:67:2e:f9:81:07:24:9e:
         8c:a5:1f:e7:cf:a6:65:41:aa:6e:cf:8f:53:dc:9d:a3:13:e1:
         86:9c:f7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:57 2026 by rpki-client