Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
File:                     PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft (raw, json)
Hash identifier:          dR5S5NlOhV10KmQsVbTExLnkEijAYzU2pwyfFV1Bt1Y=
Subject key identifier:   79:01:5F:9F:07:72:63:4D:D6:0E:16:D7:12:95:6C:38:C6:CA:D0:5B
Authority key identifier: 3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
Certificate issuer:       /CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Certificate serial:       01A0D5707E38A194B0D73F4E2995B2C38205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
Manifest number:          04C1
Signing time:             Thu 24 Sep 2026 22:01:54 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:54 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:54 +0000
Files and hashes:         1: PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl (hash: +y6nyiQqz6vZEw5p5+zKa2jdKn7NVivRHC+4URRNCOA=)
                          2: j0XYpT3fQfPhqOVaGf1qoZYJiUY.roa (hash: p96sB0NTL/aNTTxP4wqEBEwGR5tjmR72wLuv/hfrJqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:70:7e:38:a1:94:b0:d7:3f:4e:29:95:b2:c3:82:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d82f1fce008bcc725ddbbe7067451dd82059307
        Validity
            Not Before: Sep 24 22:01:54 2026 GMT
            Not After : Sep 25 22:01:54 2026 GMT
        Subject: CN=79015f9f0772634dd60e16d712956c38c6cad05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:8d:19:82:92:20:ce:54:45:f0:81:92:b6:
                    b8:f3:aa:32:9c:36:bc:d8:27:1c:c5:84:50:f0:a2:
                    f1:b5:22:13:ea:12:86:d7:e6:f1:28:fd:8f:db:08:
                    10:0f:38:f4:de:3a:30:f2:45:0a:dd:93:95:09:f6:
                    97:d4:4e:49:d2:fa:e3:2c:7a:8a:7b:87:35:f5:21:
                    16:10:4b:6b:6a:4e:b8:20:1c:44:54:90:48:cb:4f:
                    0e:bc:97:c9:d9:28:06:17:0c:5d:8a:5d:b8:a3:64:
                    0f:5d:96:37:dd:75:af:6e:c7:e6:da:7f:62:d3:d7:
                    1d:ab:e4:2a:7b:1d:c4:de:15:cf:bb:20:ee:5e:a4:
                    63:f3:da:23:3e:3c:b6:d6:d1:52:77:33:9e:2d:a1:
                    5c:7b:38:34:8a:5d:74:6f:7d:ef:50:56:b4:fd:09:
                    a4:2e:c1:0f:74:c6:8a:c0:9e:3e:89:47:b9:00:9f:
                    2a:1d:d2:31:3b:95:55:80:a4:c5:2f:0c:e5:54:6b:
                    3f:6e:c4:06:49:5c:40:80:c2:42:87:74:aa:5e:62:
                    a3:f5:3b:ff:9c:fc:f0:cf:6c:79:82:5a:e2:b3:8b:
                    fb:ad:6f:ae:5f:0a:7b:00:9e:df:80:0e:16:32:7f:
                    d0:96:df:08:e8:6e:3d:f7:72:22:44:1e:4c:c0:19:
                    31:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:01:5F:9F:07:72:63:4D:D6:0E:16:D7:12:95:6C:38:C6:CA:D0:5B
            X509v3 Authority Key Identifier:
                keyid:3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:26:59:28:12:0e:de:7b:d0:8a:61:e1:3f:44:f8:18:9b:8f:
         83:12:c4:89:9c:f3:7d:81:ee:77:9f:b3:ae:c7:c3:a6:50:8c:
         5e:43:1b:0b:a7:79:99:a2:11:86:10:3d:43:75:93:0b:62:85:
         5f:0c:87:ac:21:08:a1:86:2d:0e:f8:2c:7f:ac:b7:0c:ab:86:
         72:09:a2:20:0b:ff:fb:70:2c:fb:9d:9f:1a:38:eb:31:12:15:
         40:fd:aa:50:b4:11:6a:a4:39:ef:69:38:95:96:f0:ef:00:c1:
         56:11:e1:af:d6:94:36:e2:f5:07:63:58:e1:7c:53:4a:0f:7f:
         45:ac:da:b3:9d:04:5a:ce:50:f8:76:d4:fa:f8:e2:ab:c6:40:
         af:c0:97:4a:da:fd:17:3c:bf:70:35:15:9e:31:2a:07:3b:2a:
         3c:87:17:d9:06:2b:75:6f:d9:6b:3b:fe:f1:08:30:43:e9:7c:
         d4:74:c5:2a:c0:a2:b3:77:73:31:41:58:81:a3:de:4a:51:70:
         04:e5:ad:0c:f8:b9:81:dc:ab:f2:47:bf:97:2a:c3:4e:bd:1d:
         be:f4:87:5f:fb:46:ab:54:f7:11:4f:33:82:82:34:7d:b9:04:
         36:91:23:a0:c5:38:4e:86:d8:28:e0:7d:48:25:87:31:b0:54:
         2f:a9:07:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:35:55 2026 by rpki-client