Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
File:                     Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft (raw, json)
Hash identifier:          oDSMJj5ic2iND6h+fFQ3tzmG4Ush1UZtO/szzvr3QeY=
Subject key identifier:   19:E8:75:A0:E5:14:4C:82:7C:22:39:71:E1:E2:AE:44:CF:7C:81:E2
Authority key identifier: 3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
Certificate issuer:       /CN=3f296fe945a23180753f67f7748e6f299d2e672a
Certificate serial:       019FAAF61935643DA9E95326B14215A26ED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
Manifest number:          10B9
Signing time:             Tue 28 Jul 2026 23:01:22 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:22 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:22 +0000
Files and hashes:         1: NgG8sLNb-W8-OHBCGxZ73IB5nDI.roa (hash: lrLVn7ENnn4C2ElW6lbxmaOhdEvNhEpkcSeT7X4B1AQ=)
                          2: Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl (hash: Zc++u1irQj+N3XF26RB8//o6Q8K0H23oe7+IZGCkcbE=)
                          3: ogybvPCYv0zaHbI7IAnfqKXESCM.roa (hash: LonaEgi/rXosvauw091QvQs3rhGZRi+ZXg091i9IY6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f6:19:35:64:3d:a9:e9:53:26:b1:42:15:a2:6e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f296fe945a23180753f67f7748e6f299d2e672a
        Validity
            Not Before: Jul 28 23:01:22 2026 GMT
            Not After : Jul 29 23:01:22 2026 GMT
        Subject: CN=19e875a0e5144c827c223971e1e2ae44cf7c81e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6b:6b:8d:e4:65:4f:2c:0b:91:58:fa:31:f1:
                    92:0b:73:d0:24:9e:b8:ab:4f:76:43:9c:d6:11:76:
                    2d:b8:c2:a8:49:07:dc:94:51:6f:b3:6a:28:97:8f:
                    81:e6:50:3a:5b:36:15:3e:76:b9:9d:d6:9e:b6:88:
                    72:30:09:d1:91:d2:be:98:2b:36:fe:3e:21:e4:3b:
                    7d:46:84:fa:cd:42:1f:d0:8c:b9:96:33:e3:62:5a:
                    94:56:7e:47:a0:f0:32:94:65:97:47:c0:50:ae:f4:
                    53:cb:b5:61:9c:d2:9c:87:a5:38:a2:07:f5:04:20:
                    61:15:a8:88:76:26:65:f3:c5:39:14:d2:53:36:bb:
                    1c:86:11:17:3f:56:d8:69:69:b4:6d:59:e6:0a:bd:
                    c4:77:18:be:a8:db:c0:cd:e2:b2:b9:73:a2:75:4d:
                    d8:32:bf:93:9f:83:d6:c8:8a:a3:ed:ce:04:5f:ec:
                    df:20:8f:74:09:a8:fa:c4:bf:6f:58:24:e3:d8:cd:
                    f7:fc:c8:a1:c0:61:12:46:20:79:7d:8b:10:2c:f0:
                    b7:c6:4f:5c:81:e7:0e:9c:4f:0c:fb:f4:51:76:ec:
                    9f:c4:38:a7:bb:87:a9:e2:89:7f:9e:7d:d5:34:2c:
                    b5:78:88:c8:a1:09:a3:d0:1f:97:77:87:5e:09:2a:
                    87:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E8:75:A0:E5:14:4C:82:7C:22:39:71:E1:E2:AE:44:CF:7C:81:E2
            X509v3 Authority Key Identifier:
                keyid:3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:61:ad:a8:95:5e:98:43:8e:03:e3:93:55:c4:43:df:a2:e1:
         cc:5a:9a:22:ec:e5:35:23:52:e5:fa:53:67:e5:5d:8e:10:77:
         99:e7:d2:bb:4b:99:35:b4:50:06:36:a7:8f:3f:1e:84:8f:ef:
         e6:cd:7b:ad:36:86:71:87:f6:4c:ab:32:f6:63:6e:ac:6c:5f:
         9d:92:60:f7:a1:a3:be:a7:18:c6:c6:12:81:be:ef:1c:4a:c9:
         f8:99:d5:95:0e:0e:a0:16:46:7c:4e:77:e2:71:08:37:29:3a:
         8f:41:95:97:40:65:f4:0b:19:cb:42:7d:60:c6:fd:eb:ae:e4:
         7b:6a:ba:20:7b:4f:dd:e6:9a:a3:eb:22:4f:03:bf:25:80:f4:
         67:70:48:f8:77:4c:55:02:cc:c3:a2:4c:9d:be:a0:d2:61:f3:
         3c:7e:f1:78:2a:97:94:4b:e9:92:5f:0e:dc:19:70:8b:98:9c:
         7e:76:40:a2:49:60:ce:30:80:63:ae:b1:d3:4a:72:7a:bf:77:
         eb:e6:75:11:f8:83:80:0c:5a:a3:42:cf:f1:4b:c5:5a:25:63:
         a1:4e:11:70:57:9e:fa:f2:a7:09:b4:fd:e5:ea:cc:55:ff:7c:
         0a:ce:1f:2b:17:19:cd:36:95:ea:a8:dc:2b:cd:8d:b6:89:0b:
         26:2e:bb:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9hk1ZD2p6VMmsUIVom7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjk2ZmU5NDVhMjMxODA3NTNmNjdmNzc0OGU2ZjI5OWQy
ZTY3MmEwHhcNMjYwNzI4MjMwMTIyWhcNMjYwNzI5MjMwMTIyWjAzMTEwLwYDVQQD
EygxOWU4NzVhMGU1MTQ0YzgyN2MyMjM5NzFlMWUyYWU0NGNmN2M4MWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymtrjeRlTywLkVj6MfGSC3PQJJ64
q092Q5zWEXYtuMKoSQfclFFvs2ool4+B5lA6WzYVPna5ndaetohyMAnRkdK+mCs2
/j4h5Dt9RoT6zUIf0Iy5ljPjYlqUVn5HoPAylGWXR8BQrvRTy7VhnNKch6U4ogf1
BCBhFaiIdiZl88U5FNJTNrschhEXP1bYaWm0bVnmCr3Edxi+qNvAzeKyuXOidU3Y
Mr+Tn4PWyIqj7c4EX+zfII90Caj6xL9vWCTj2M33/MihwGESRiB5fYsQLPC3xk9c
gecOnE8M+/RRduyfxDinu4ep4ol/nn3VNCy1eIjIoQmj0B+Xd4deCSqH8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnodaDlFEyCfCI5ceHirkTPfIHiMB8GA1UdIwQY
MBaAFD8pb+lFojGAdT9n93SObymdLmcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHlsdjZVV2lNWUIxUDJmM2RJNXZLWjB1WnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jYmQzNjItNzY5NC00MTgzLTkxNWQt
OGY0ZjI5MWIyM2I2LzEvUHlsdjZVV2lNWUIxUDJmM2RJNXZLWjB1WnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9jYmQzNjItNzY5NC00MTgzLTkxNWQtOGY0ZjI5MWIyM2I2
LzEvUHlsdjZVV2lNWUIxUDJmM2RJNXZLWjB1WnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmGtqJVe
mEOOA+OTVcRD36LhzFqaIuzlNSNS5fpTZ+VdjhB3mefSu0uZNbRQBjanjz8ehI/v
5s17rTaGcYf2TKsy9mNurGxfnZJg96GjvqcYxsYSgb7vHErJ+JnVlQ4OoBZGfE53
4nEINyk6j0GVl0Bl9AsZy0J9YMb9667ke2q6IHtP3eaao+siTwO/JYD0Z3BI+HdM
VQLMw6JMnb6g0mHzPH7xeCqXlEvpkl8O3Blwi5icfnZAoklgzjCAY66x00pyer93
6+Z1EfiDgAxao0LP8UvFWiVjoU4RcFee+vKnCbT95erMVf98Cs4fKxcZzTaV6qjc
K82NtokLJi673Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:34 2026 by rpki-client