Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
File:                     PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft (raw, json)
Hash identifier:          4XFm3uNF6NHt8msfoZlbWC9ZeVTAUaiky/3KL64Bcy4=
Subject key identifier:   AF:5F:D7:B6:47:EE:37:0B:27:CE:39:30:2A:0C:90:B8:BF:91:7D:E2
Authority key identifier: 3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
Certificate issuer:       /CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Certificate serial:       019EBAA260AFC916784C053BDE48BEF880EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
Manifest number:          03AA
Signing time:             Fri 12 Jun 2026 07:01:04 +0000
Manifest this update:     Fri 12 Jun 2026 07:01:04 +0000
Manifest next update:     Sat 13 Jun 2026 07:01:04 +0000
Files and hashes:         1: PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl (hash: BsUoW2gIN8RliGcuKVOvtgU57yRtzpiFvabXyVi0D2U=)
                          2: j0XYpT3fQfPhqOVaGf1qoZYJiUY.roa (hash: p96sB0NTL/aNTTxP4wqEBEwGR5tjmR72wLuv/hfrJqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:a2:60:af:c9:16:78:4c:05:3b:de:48:be:f8:80:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d82f1fce008bcc725ddbbe7067451dd82059307
        Validity
            Not Before: Jun 12 07:01:04 2026 GMT
            Not After : Jun 13 07:01:04 2026 GMT
        Subject: CN=af5fd7b647ee370b27ce39302a0c90b8bf917de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:e9:33:e7:49:aa:74:8e:27:bb:ac:07:a0:
                    4c:1f:0a:e9:c7:2c:eb:93:5b:bc:f8:db:82:5d:86:
                    ab:15:dc:0f:4f:ac:85:cb:0d:3b:c1:82:8e:b7:0c:
                    5d:84:e1:49:73:13:32:d3:9e:bd:20:1f:c3:47:f4:
                    8b:f5:4d:2b:89:b5:9d:93:2f:23:04:db:b5:39:fe:
                    df:05:1e:07:0c:85:1c:39:25:c1:c8:9a:d6:c7:79:
                    90:b4:bf:ff:34:3b:26:da:4e:35:23:d8:a7:34:db:
                    59:63:e1:11:0d:e3:42:80:87:d8:fb:25:11:6c:8d:
                    ed:c2:c1:bb:a8:77:e1:99:6f:52:ec:2a:8f:80:b2:
                    f8:7d:e1:0c:c7:b8:56:1a:14:70:44:bb:30:72:9e:
                    ab:24:51:15:94:51:6b:ac:3f:ec:d7:e5:74:62:ec:
                    1c:ee:7f:32:26:e3:80:03:71:da:92:86:e2:30:0f:
                    9d:8c:00:98:2c:9c:68:e4:e5:18:29:36:c0:db:e2:
                    f6:62:1f:8f:4f:67:4f:0f:40:6e:0f:b5:4d:82:54:
                    06:f9:c4:61:9f:21:13:c7:2a:3d:62:52:65:6e:b2:
                    84:48:6a:e9:9d:c7:eb:b9:21:69:77:76:b8:9f:b3:
                    16:dc:e5:fa:76:52:6b:0d:62:73:8d:3a:a2:3c:da:
                    33:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5F:D7:B6:47:EE:37:0B:27:CE:39:30:2A:0C:90:B8:BF:91:7D:E2
            X509v3 Authority Key Identifier:
                keyid:3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:e9:9a:1d:e8:e6:b8:b1:db:95:de:9b:1e:9f:98:5a:d8:2f:
         da:0b:0d:1b:81:8f:0a:fa:c5:d9:5c:0a:18:d5:53:54:b9:e9:
         64:ac:cd:78:e1:98:52:e5:c0:c4:a9:8f:ff:ee:eb:31:b3:83:
         37:af:3f:62:7e:dc:0b:37:24:28:53:55:b2:50:75:fb:c2:8f:
         56:88:74:45:8b:61:c1:c2:a8:e4:d5:1d:ba:2c:9f:f4:7d:95:
         93:86:68:ef:58:f1:18:07:65:e7:38:de:12:d5:25:d1:d2:c3:
         ac:03:dd:44:0d:da:57:e2:b4:42:d7:a2:c1:3b:a9:3a:30:5b:
         44:0a:e9:59:e4:67:34:ff:39:db:1a:52:34:6b:2e:4e:2d:66:
         b8:8c:df:a3:d7:62:93:9e:c1:eb:b5:11:c3:a4:7a:20:87:d9:
         fe:e8:c6:d8:dd:eb:c8:ac:3d:e6:aa:6e:6b:ce:20:75:a6:f9:
         b7:46:c9:2c:6c:89:88:6f:91:bd:d9:bd:82:5e:b9:87:41:27:
         0c:19:16:cf:78:d0:77:27:10:be:50:48:4d:07:6b:ca:99:79:
         8d:f1:ba:0a:3c:c9:05:58:f0:b5:1a:1d:a4:09:52:48:3c:e0:
         8d:05:72:7b:d3:bf:31:b4:51:e8:83:ca:e8:f2:e3:c7:14:44:
         d1:46:0c:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66omCvyRZ4TAU73ki++IDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkODJmMWZjZTAwOGJjYzcyNWRkYmJlNzA2NzQ1MWRkODIw
NTkzMDcwHhcNMjYwNjEyMDcwMTA0WhcNMjYwNjEzMDcwMTA0WjAzMTEwLwYDVQQD
EyhhZjVmZDdiNjQ3ZWUzNzBiMjdjZTM5MzAyYTBjOTBiOGJmOTE3ZGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrPpM+dJqnSOJ7usB6BMHwrpxyzr
k1u8+NuCXYarFdwPT6yFyw07wYKOtwxdhOFJcxMy0569IB/DR/SL9U0ribWdky8j
BNu1Of7fBR4HDIUcOSXByJrWx3mQtL//NDsm2k41I9inNNtZY+ERDeNCgIfY+yUR
bI3twsG7qHfhmW9S7CqPgLL4feEMx7hWGhRwRLswcp6rJFEVlFFrrD/s1+V0Yuwc
7n8yJuOAA3HakobiMA+djACYLJxo5OUYKTbA2+L2Yh+PT2dPD0BuD7VNglQG+cRh
nyETxyo9YlJlbrKESGrpncfruSFpd3a4n7MW3OX6dlJrDWJzjTqiPNozkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9f17ZH7jcLJ845MCoMkLi/kX3iMB8GA1UdIwQY
MBaAFD2C8fzgCLzHJd275wZ0Ud2CBZMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlMeF9PQUl2TWNsM2J2bkJuUlIzWUlGa3djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85YzRhNzctMGM3ZS00OTRjLWEyMzEt
YmYxZTk5YzBjZjNmLzEvUFlMeF9PQUl2TWNsM2J2bkJuUlIzWUlGa3djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi85YzRhNzctMGM3ZS00OTRjLWEyMzEtYmYxZTk5YzBjZjNm
LzEvUFlMeF9PQUl2TWNsM2J2bkJuUlIzWUlGa3djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz+maHejm
uLHbld6bHp+YWtgv2gsNG4GPCvrF2VwKGNVTVLnpZKzNeOGYUuXAxKmP/+7rMbOD
N68/Yn7cCzckKFNVslB1+8KPVoh0RYthwcKo5NUduiyf9H2Vk4Zo71jxGAdl5zje
EtUl0dLDrAPdRA3aV+K0QteiwTupOjBbRArpWeRnNP852xpSNGsuTi1muIzfo9di
k57B67URw6R6IIfZ/ujG2N3ryKw95qpua84gdab5t0bJLGyJiG+Rvdm9gl65h0En
DBkWz3jQdycQvlBITQdrypl5jfG6CjzJBVjwtRodpAlSSDzgjQVye9O/MbRR6IPK
6PLjxxRE0UYM5Q==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:50:23 2026 by rpki-client