Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
File:                     PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft (raw, json)
Hash identifier:          HZ+UPEgq3xLDI4krFHp62YqGUe5uzmB0QjHyzVQB5Fs=
Subject key identifier:   21:96:70:1C:89:A1:72:9F:D8:10:76:FD:5D:B6:0C:9E:03:2D:93:F3
Authority key identifier: 3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
Certificate issuer:       /CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Certificate serial:       019EB8B445EDE9B9791B485DD8E941E8B4A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
Manifest number:          03A9
Signing time:             Thu 11 Jun 2026 22:01:22 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:22 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:22 +0000
Files and hashes:         1: PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl (hash: Tb2st3VBBHao87i7hanpNhbdnNyzDYezoPvMWnwHTqk=)
                          2: j0XYpT3fQfPhqOVaGf1qoZYJiUY.roa (hash: p96sB0NTL/aNTTxP4wqEBEwGR5tjmR72wLuv/hfrJqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:45:ed:e9:b9:79:1b:48:5d:d8:e9:41:e8:b4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d82f1fce008bcc725ddbbe7067451dd82059307
        Validity
            Not Before: Jun 11 22:01:22 2026 GMT
            Not After : Jun 12 22:01:22 2026 GMT
        Subject: CN=2196701c89a1729fd81076fd5db60c9e032d93f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:4b:b4:6b:0d:45:c1:26:f7:16:fa:62:c9:
                    d8:dc:13:91:fe:60:2c:48:60:ba:ca:03:56:c0:08:
                    d9:3e:ff:d9:8b:12:5f:b4:68:ab:4b:50:79:e4:7c:
                    5b:53:e2:97:f9:7c:4f:20:63:77:bd:07:db:bf:45:
                    f6:e4:68:84:2f:b8:a5:3e:05:f3:ad:7c:53:c2:f1:
                    de:e6:f8:58:69:f4:ec:7f:c4:9e:d9:b0:16:68:61:
                    6c:01:41:86:42:67:f1:73:1b:88:a1:e9:5e:9b:10:
                    bb:2b:69:a9:11:ad:87:5b:c7:47:af:a3:df:d9:99:
                    86:66:23:6c:91:55:00:78:a0:4f:fe:e1:e1:b4:97:
                    1b:1a:00:71:9d:bf:97:73:49:3b:f2:30:67:9c:52:
                    27:92:47:32:0a:cb:b7:b5:c6:76:2b:47:fc:6f:e8:
                    c3:88:b8:fa:2a:d2:a0:fa:5b:ca:e7:88:40:11:e0:
                    25:f1:93:c6:c1:5d:14:9b:a0:73:79:cd:41:71:4c:
                    aa:85:e0:aa:bf:8a:56:d5:3f:fd:88:c2:35:a4:b6:
                    8b:f0:03:62:88:c9:f0:1c:98:1d:64:4f:af:ea:3a:
                    48:3f:d6:a7:53:20:f1:f6:b3:08:74:42:7e:9f:af:
                    55:81:76:3a:52:d0:64:f8:ac:da:6a:1d:36:17:57:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:96:70:1C:89:A1:72:9F:D8:10:76:FD:5D:B6:0C:9E:03:2D:93:F3
            X509v3 Authority Key Identifier:
                keyid:3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:94:70:2f:9c:ec:8b:ec:1a:3b:75:37:4a:2a:e8:6f:c8:3f:
         68:77:f3:a7:f7:59:fc:a4:65:14:c3:10:64:b7:fe:af:3f:e9:
         26:1c:3c:9f:8d:8e:e8:29:38:f5:d2:eb:b9:c6:c3:ab:e4:7e:
         af:db:76:33:c9:df:5f:44:d4:b5:51:53:2a:8f:b7:06:8e:64:
         bb:d7:40:57:6e:60:7a:cd:b4:46:e6:4f:be:ac:b5:4e:a7:3f:
         0f:66:90:b2:8d:89:d0:2c:92:67:1e:02:db:7b:4f:41:04:6b:
         19:91:21:7f:99:a8:27:9c:4c:d3:34:51:b0:a9:57:a2:00:fa:
         c5:4c:82:ea:52:72:af:aa:e7:76:d0:3a:80:d6:a7:a7:1b:31:
         d7:60:a3:16:a1:c5:e5:a1:2b:80:08:1d:54:f7:1c:bb:ae:6e:
         7a:4f:a2:a4:5e:98:57:29:e0:f6:0a:d2:8e:00:b6:b0:ab:5c:
         11:65:99:bf:97:6b:f7:1c:f9:3d:17:1b:44:51:39:f6:19:d4:
         bf:2c:82:4f:cf:8c:69:0b:bd:74:f0:08:70:1a:5e:47:dc:08:
         cf:5d:cb:ad:61:91:c2:32:ce:7e:37:c5:a5:2f:51:40:c4:c2:
         a2:32:e6:90:2c:0f:8b:77:a7:5f:2a:38:11:b8:c8:b2:2c:60:
         da:c3:a0:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64tEXt6bl5G0hd2OlB6LSiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkODJmMWZjZTAwOGJjYzcyNWRkYmJlNzA2NzQ1MWRkODIw
NTkzMDcwHhcNMjYwNjExMjIwMTIyWhcNMjYwNjEyMjIwMTIyWjAzMTEwLwYDVQQD
EygyMTk2NzAxYzg5YTE3MjlmZDgxMDc2ZmQ1ZGI2MGM5ZTAzMmQ5M2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKBLtGsNRcEm9xb6YsnY3BOR/mAs
SGC6ygNWwAjZPv/ZixJftGirS1B55HxbU+KX+XxPIGN3vQfbv0X25GiEL7ilPgXz
rXxTwvHe5vhYafTsf8Se2bAWaGFsAUGGQmfxcxuIoelemxC7K2mpEa2HW8dHr6Pf
2ZmGZiNskVUAeKBP/uHhtJcbGgBxnb+Xc0k78jBnnFInkkcyCsu3tcZ2K0f8b+jD
iLj6KtKg+lvK54hAEeAl8ZPGwV0Um6Bzec1BcUyqheCqv4pW1T/9iMI1pLaL8ANi
iMnwHJgdZE+v6jpIP9anUyDx9rMIdEJ+n69VgXY6UtBk+Kzaah02F1cU/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGWcByJoXKf2BB2/V22DJ4DLZPzMB8GA1UdIwQY
MBaAFD2C8fzgCLzHJd275wZ0Ud2CBZMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlMeF9PQUl2TWNsM2J2bkJuUlIzWUlGa3djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85YzRhNzctMGM3ZS00OTRjLWEyMzEt
YmYxZTk5YzBjZjNmLzEvUFlMeF9PQUl2TWNsM2J2bkJuUlIzWUlGa3djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi85YzRhNzctMGM3ZS00OTRjLWEyMzEtYmYxZTk5YzBjZjNm
LzEvUFlMeF9PQUl2TWNsM2J2bkJuUlIzWUlGa3djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5RwL5zs
i+waO3U3Sirob8g/aHfzp/dZ/KRlFMMQZLf+rz/pJhw8n42O6Ck49dLrucbDq+R+
r9t2M8nfX0TUtVFTKo+3Bo5ku9dAV25ges20RuZPvqy1Tqc/D2aQso2J0CySZx4C
23tPQQRrGZEhf5moJ5xM0zRRsKlXogD6xUyC6lJyr6rndtA6gNanpxsx12CjFqHF
5aErgAgdVPccu65uek+ipF6YVyng9grSjgC2sKtcEWWZv5dr9xz5PRcbRFE59hnU
vyyCT8+MaQu9dPAIcBpeR9wIz13LrWGRwjLOfjfFpS9RQMTCojLmkCwPi3enXyo4
EbjIsixg2sOgFA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:45:08 2026 by rpki-client