Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File:                     P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier:          Y3tnf8s3RgztRhUmYVYl+4SDk6fH7ytIAXVlCUKl5Tg=
Subject key identifier:   C9:5E:1E:D5:AA:49:A4:D1:65:40:13:4C:26:60:65:DF:48:87:96:C5
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer:       /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial:       019EC035DA16C444C39CA8732F5C4B68000E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number:          046F
Signing time:             Sat 13 Jun 2026 09:00:14 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:14 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:14 +0000
Files and hashes:         1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: kjFexryvNmiBdykQFDb4jKGP3gWeehCEOtruspSo5/8=)
                          2: wmftFtvbm2f7JWmltpRyVvfDvRg.roa (hash: ifS1jUFk0Eu0JB0mDMS9nd/R8eNPClng/HidlRk7lts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:35:da:16:c4:44:c3:9c:a8:73:2f:5c:4b:68:00:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
        Validity
            Not Before: Jun 13 09:00:14 2026 GMT
            Not After : Jun 14 09:00:14 2026 GMT
        Subject: CN=c95e1ed5aa49a4d16540134c266065df488796c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5b:75:9c:79:63:f7:5a:dd:88:33:05:a8:16:
                    63:d8:16:de:cf:31:1a:e6:23:c3:99:80:be:26:bf:
                    c8:13:34:49:64:38:87:82:b7:9a:a3:81:71:e7:c5:
                    d8:47:19:a4:07:99:12:d7:86:a1:99:b4:85:72:c6:
                    0f:14:26:f3:ab:c9:d3:6d:50:98:0d:ef:dc:12:3c:
                    4e:c8:80:47:02:9b:15:a6:c8:20:ca:89:72:77:89:
                    a1:33:e7:4b:c6:97:28:3c:f7:d3:d0:7a:52:ac:60:
                    d6:09:31:59:70:fa:59:e1:88:ce:1f:f4:89:3c:78:
                    dd:a4:d4:55:97:12:35:ce:96:a2:87:8d:74:d5:33:
                    54:be:87:b3:ce:71:a4:9c:a1:a7:a8:32:7e:23:76:
                    82:08:35:6f:9a:20:f0:b6:d3:b5:75:eb:84:2e:55:
                    b9:da:59:62:80:06:ee:bf:8e:55:32:8c:e2:1a:65:
                    fa:7f:09:29:11:7b:da:ed:30:82:23:1f:05:b8:fb:
                    8a:a9:c3:d5:ec:43:a4:09:16:7b:e8:e4:87:e9:b0:
                    53:df:8c:ca:0c:3d:0c:b2:a9:11:e8:77:5a:d0:d4:
                    53:ed:bd:77:75:eb:1c:a0:fc:d5:97:5c:a8:31:31:
                    38:4c:7d:98:b0:78:2e:47:9a:1c:0e:02:23:1d:e4:
                    ea:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5E:1E:D5:AA:49:A4:D1:65:40:13:4C:26:60:65:DF:48:87:96:C5
            X509v3 Authority Key Identifier:
                keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:ca:f4:72:f0:81:83:81:eb:c4:58:38:42:2b:e4:2e:d8:54:
         f9:02:63:b5:51:41:88:55:e2:0b:29:eb:ac:9a:80:54:46:cf:
         c6:28:9e:0b:bd:83:e8:e1:9a:e5:c6:75:7b:b8:7d:02:d8:e2:
         9b:c6:2c:49:38:d3:81:d2:09:83:27:95:49:d1:90:79:65:0f:
         2e:d2:d1:4a:57:37:46:aa:3e:a1:a7:98:40:46:a4:5f:8b:c6:
         ca:67:d8:35:46:94:8b:1a:0f:f7:59:0b:de:96:e8:ea:ed:62:
         57:c7:56:d6:4a:25:db:9d:5b:f8:ea:41:81:d5:a1:c1:39:a8:
         df:ad:ec:ce:a4:00:47:63:75:b3:62:f4:63:50:a9:04:e4:f0:
         be:31:10:26:ac:76:69:95:0f:a4:88:fc:50:1f:cd:37:ce:8b:
         c2:e7:6d:95:fc:8e:0f:ef:08:03:6f:fc:59:e5:56:59:15:7a:
         0f:f4:de:17:2a:1a:7e:8f:76:7d:32:1f:21:01:5f:d1:ad:45:
         ba:a1:0f:50:01:bf:f3:92:14:38:d2:40:32:71:43:b3:55:91:
         8b:07:11:9b:10:43:84:84:25:3d:96:ef:ec:40:45:2f:d0:09:
         01:cb:35:0f:b1:bc:c0:f3:3a:19:33:fe:9a:32:bd:98:78:59:
         5c:0c:bd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:31:32 2026 by rpki-client