Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File:                     P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier:          v8Wz8jx4D3zn0zRV3v+RHCVYewGbNYXZHR8sPIsVbU0=
Subject key identifier:   01:0C:84:E9:49:DC:77:87:FD:48:06:D2:CC:45:18:33:90:DD:57:E5
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer:       /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial:       01A17B4D670A0014475C822F4D01A2F4E5CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number:          05D9
Signing time:             Tue 27 Oct 2026 03:00:32 +0000
Manifest this update:     Tue 27 Oct 2026 03:00:32 +0000
Manifest next update:     Wed 28 Oct 2026 03:00:32 +0000
Files and hashes:         1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: 8hLk3kompjRCqFhtAd0n0LMOZFJiqRKvn3YGspMEwYA=)
                          2: wmftFtvbm2f7JWmltpRyVvfDvRg.roa (hash: ifS1jUFk0Eu0JB0mDMS9nd/R8eNPClng/HidlRk7lts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 03:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:4d:67:0a:00:14:47:5c:82:2f:4d:01:a2:f4:e5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
        Validity
            Not Before: Oct 27 03:00:32 2026 GMT
            Not After : Oct 28 03:00:32 2026 GMT
        Subject: CN=010c84e949dc7787fd4806d2cc45183390dd57e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5e:45:9f:cd:93:ef:f0:14:6d:b7:6c:06:ff:
                    60:40:8e:f6:ca:10:0c:20:e2:1a:c8:a6:d1:25:ac:
                    da:da:71:15:c3:e1:87:54:90:4b:be:6a:cd:67:fa:
                    c5:66:47:8f:5a:19:b2:04:37:11:d8:bd:e7:36:88:
                    8d:0a:9c:67:6e:7e:c7:4c:f1:8a:59:53:a4:85:82:
                    7d:16:ad:53:6d:e5:12:88:76:ed:5b:b8:eb:ba:89:
                    27:77:32:23:cf:2b:50:0f:82:11:ba:e3:ca:0b:f3:
                    b8:ff:f9:c6:89:b4:ac:ce:d3:e8:49:d8:8c:f3:fd:
                    d7:8d:6e:0f:02:89:58:8e:35:fa:d9:11:9e:c8:2e:
                    6a:15:59:e7:62:51:68:f2:4c:32:e0:c8:73:18:96:
                    3e:a4:eb:f2:f5:9f:68:d4:34:c9:6d:4e:ac:a5:6b:
                    04:b3:66:9b:89:ef:8e:19:01:0b:28:6e:e3:f2:f4:
                    ed:21:00:2b:24:8d:63:bd:45:bf:e0:7a:0d:7d:66:
                    d5:04:53:6f:08:df:b9:5b:fd:2b:60:6b:7c:61:37:
                    9c:bb:53:05:7a:81:0b:44:d2:2c:e4:73:ba:50:71:
                    06:2b:4a:10:65:50:68:16:64:78:9f:b4:b3:61:76:
                    e3:3b:77:f1:fb:ca:b1:e1:d4:05:bc:9d:d1:89:a0:
                    aa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0C:84:E9:49:DC:77:87:FD:48:06:D2:CC:45:18:33:90:DD:57:E5
            X509v3 Authority Key Identifier:
                keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c5:ed:e9:fd:0c:79:2e:76:ce:21:98:e1:11:c7:07:9e:fa:
         c0:94:72:12:fa:f4:c5:35:62:f8:18:a1:ec:d2:b5:27:55:e9:
         90:a9:1c:af:5e:46:58:09:04:9e:b4:ca:94:51:78:45:35:cb:
         e8:17:43:4d:52:a1:8a:24:03:dd:7c:1f:e4:d8:db:df:a9:f9:
         0e:6a:27:87:0b:24:03:37:b9:b0:ee:33:5e:f2:13:f2:73:d1:
         c5:8b:3d:a2:9e:47:d4:e9:3e:95:1d:77:eb:f4:ce:ab:fe:9b:
         ca:af:7e:f7:a5:87:02:9a:d6:53:d1:70:1b:ba:19:ce:41:15:
         9b:74:d3:18:d8:20:b5:aa:fd:bd:0f:f5:2e:fb:7e:dc:a3:75:
         8f:be:23:b7:18:a6:09:7c:9d:8a:b5:86:a4:b3:b9:d5:84:f7:
         9d:9b:69:bd:6d:97:63:84:9e:38:6e:45:ed:be:87:e0:29:00:
         09:9f:16:3f:bf:f5:a6:3b:e4:bb:33:f0:77:ce:36:8b:36:6d:
         30:f0:c3:19:e3:a8:1c:0a:74:8f:75:fe:3f:ac:1b:32:c3:e7:
         7c:f7:50:41:ae:6a:2c:d6:02:bb:6a:ca:2e:9c:42:77:2b:04:
         f6:54:fe:cc:f5:36:45:42:46:04:2e:af:d0:61:60:aa:ed:6a:
         1d:ca:6b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:39:29 2026 by rpki-client