Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File:                     P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier:          0CvIL/37tRMMZC+A+7UpziaYlFrhej8Pn9jcxAn/438=
Subject key identifier:   5B:2A:BA:74:1B:A2:BC:5D:BB:56:4A:F0:51:A8:EE:23:11:42:92:87
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer:       /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial:       019F92B5F9F37CD079F9AF2CBE13A21445F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number:          04DC
Signing time:             Fri 24 Jul 2026 06:00:27 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:27 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:27 +0000
Files and hashes:         1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: 0RS83BelcDXZNcUAVyYsk1hVHedSY0hBzRn4h7BPw5U=)
                          2: wmftFtvbm2f7JWmltpRyVvfDvRg.roa (hash: ifS1jUFk0Eu0JB0mDMS9nd/R8eNPClng/HidlRk7lts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b5:f9:f3:7c:d0:79:f9:af:2c:be:13:a2:14:45:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
        Validity
            Not Before: Jul 24 06:00:27 2026 GMT
            Not After : Jul 25 06:00:27 2026 GMT
        Subject: CN=5b2aba741ba2bc5dbb564af051a8ee2311429287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:57:42:75:c0:f7:12:ac:7a:bd:80:a0:81:
                    cb:cd:b9:3a:8b:f0:9f:0c:f3:2d:4d:08:d7:10:86:
                    e7:f6:2e:5d:ee:e4:ab:39:3d:96:74:62:4c:ae:bb:
                    60:4b:df:f2:2d:82:37:35:d1:95:48:15:1d:e9:30:
                    34:a2:d0:12:f7:c5:50:fc:f1:8f:b8:c3:8e:1a:6a:
                    26:e2:81:4a:99:3b:8b:b7:9c:8c:df:c0:89:1d:9e:
                    f1:4f:0b:93:6b:10:ac:33:98:90:a1:1e:28:c1:83:
                    95:12:e7:0f:c4:dd:99:df:90:62:41:40:19:95:86:
                    4e:d1:5f:54:3d:15:ab:31:d4:cc:b0:32:67:6a:df:
                    32:94:a4:9d:8e:e5:99:8c:ba:8e:d7:18:9a:22:6e:
                    ce:64:50:b5:7c:46:11:a5:0b:94:8e:9d:07:ca:f4:
                    cf:8d:92:a8:93:53:dc:ac:44:1d:b1:25:46:54:d9:
                    01:0c:58:a9:bc:a3:a9:5f:bc:ec:1f:8e:cf:39:f4:
                    e6:25:be:e2:e7:09:3c:b4:01:12:66:a5:5e:67:9f:
                    7b:31:92:9e:a4:62:29:a9:bb:e4:d0:ea:6a:04:13:
                    08:19:71:43:27:a0:6d:dc:4d:27:72:65:1e:59:36:
                    47:e5:c0:6b:68:3c:4d:42:37:3b:37:47:c8:ff:3e:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2A:BA:74:1B:A2:BC:5D:BB:56:4A:F0:51:A8:EE:23:11:42:92:87
            X509v3 Authority Key Identifier:
                keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:31:3b:f3:ea:a8:83:17:80:b8:bb:46:98:62:3c:2e:ab:55:
         6d:dc:99:0c:8e:9d:bb:7c:ab:35:5d:ee:50:a3:cd:19:62:0a:
         b3:d5:96:ac:d4:a9:ee:77:d0:db:60:a0:3c:01:71:4c:ef:41:
         69:61:0d:fd:2b:c9:42:00:8b:b8:7f:5f:a4:5f:22:ef:82:8e:
         a4:6c:47:c4:e9:71:66:f2:cc:34:e6:59:73:9f:e1:f1:2b:4d:
         7f:e2:94:73:70:dd:31:2c:b1:37:92:b2:b9:9d:b3:0f:40:bc:
         66:9c:a2:00:44:c3:35:ae:41:5f:67:cb:6b:a5:6f:b9:48:06:
         c6:7a:32:29:8f:57:fe:ae:15:fa:a0:4a:a5:ca:3a:15:8a:f6:
         dc:88:88:3f:2c:79:39:0e:11:4d:8b:b7:80:b4:af:4f:26:d0:
         5a:fa:a6:54:0c:c1:4d:25:e9:db:f5:ff:c8:c8:83:ad:d3:67:
         a1:32:b2:29:3c:39:29:cd:d9:96:a2:aa:23:37:07:91:37:ff:
         15:e7:a1:c0:ac:cb:9f:b2:9a:7e:9c:e2:98:bd:c3:ef:e8:67:
         24:dd:eb:58:06:9e:d1:43:e1:94:ff:87:43:02:43:33:93:bc:
         f6:ed:ac:5a:44:2f:3a:c8:5d:82:71:a1:8a:e9:2c:9f:05:4a:
         f6:5f:85:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:19 2026 by rpki-client