Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
File:                     plBG2F7PIB--9R6L6hxO0z-Vsmg.mft (raw, json)
Hash identifier:          sDzxPOkP+BsG8b9JhxzdIri26GNTM97PSy0Tky2aLKc=
Subject key identifier:   9B:D5:1E:1A:81:AE:F8:17:11:4A:5D:2E:C4:A8:FB:49:CF:E6:E9:31
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Certificate issuer:       /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial:       019F85D778162203C98E0CA20484CFF63677
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
Manifest number:          19CC
Signing time:             Tue 21 Jul 2026 18:01:58 +0000
Manifest this update:     Tue 21 Jul 2026 18:01:58 +0000
Manifest next update:     Wed 22 Jul 2026 18:01:58 +0000
Files and hashes:         1: 6TK55uf4E7Q4i5YH-VAZAMARA00.roa (hash: 3regBELSIWwrIEhCUAfpYTo6zV2ol5bwAAaJIBdpeUs=)
                          2: 9twuQnOJskBwmGMFoupLSFf36QU.roa (hash: RCDNAXL5qdPSc9rP9ORi3f5ylPM5vMAj2oc0ZzFFmFU=)
                          3: DijJx3m0K8IF-fNdq8vdHLvoRm0.roa (hash: 4C2y0rnH3pQ1yAQ2l/hvovIIpf4rpQHX/FcG3Oj/At8=)
                          4: I9QD5q-NiIfxJo1lRmq5OKOHN_Q.roa (hash: Qi/hyzakZZcN60BC7q1PWSyKEfO3DZwisLoDVX9bMS8=)
                          5: N7Z-KVIhy-3YXcEigFtIjfBgqyU.roa (hash: ua7m4lDdZT/nE5B7uMpIhoHMPNREsYJy7Na3JVYy+ho=)
                          6: VFqJkoKX_P2e5DUSDfyccrd5zpE.roa (hash: 76YyLGgvp5IErRkUR0VKzNy6NFnsufvCYMry5U68Xw8=)
                          7: plBG2F7PIB--9R6L6hxO0z-Vsmg.crl (hash: hLYDTZI3CUT+6jNA0MWsEt9iF0+I4/huvVIZI9Z/srU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:d7:78:16:22:03:c9:8e:0c:a2:04:84:cf:f6:36:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
        Validity
            Not Before: Jul 21 18:01:58 2026 GMT
            Not After : Jul 22 18:01:58 2026 GMT
        Subject: CN=9bd51e1a81aef817114a5d2ec4a8fb49cfe6e931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:1f:cd:d7:0d:b0:e3:af:13:11:49:84:af:
                    f2:2e:d5:24:dc:e3:9b:bc:64:e1:37:d5:54:08:9d:
                    64:61:fc:35:e4:6f:03:a6:e4:8c:2f:24:2b:9d:ff:
                    c8:e2:f8:bc:b9:a9:43:f1:29:d8:ef:07:ff:7f:1e:
                    8d:bc:d2:df:41:28:ae:53:a6:d6:61:ee:06:75:38:
                    b8:32:06:3d:85:4c:75:f2:8b:53:29:b7:77:2f:79:
                    32:cb:df:27:ba:3f:2f:18:34:27:d7:97:a5:de:37:
                    15:99:d1:b0:19:d4:84:fb:70:35:f7:f1:6d:13:84:
                    2d:cb:37:60:a9:e3:5d:e1:a6:ea:af:d5:ab:0c:9e:
                    b2:9e:45:46:4e:75:07:46:6e:8f:fe:9b:f1:76:e5:
                    a5:25:16:5c:25:0c:29:5c:52:a8:8b:a1:b9:34:7a:
                    fe:0e:e3:5f:76:e4:ee:78:9b:ca:3b:09:13:37:0b:
                    01:ef:83:12:9f:f2:85:36:c8:94:a6:6d:80:2f:53:
                    c3:96:61:73:c1:11:f4:5c:d0:a8:5b:fc:4f:22:71:
                    3e:75:13:df:06:62:5a:8f:50:c6:93:fe:2f:a1:dd:
                    2e:42:e8:c5:18:76:ab:9a:29:ae:af:e0:91:74:d9:
                    2d:29:8f:94:6c:46:2e:cd:35:28:8d:ff:fc:2e:49:
                    4b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D5:1E:1A:81:AE:F8:17:11:4A:5D:2E:C4:A8:FB:49:CF:E6:E9:31
            X509v3 Authority Key Identifier:
                keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ee:a3:f5:57:dd:e3:f1:06:f8:40:13:c0:b2:5a:f6:00:77:
         69:2d:ad:c4:0f:f8:db:06:5f:00:a2:7c:73:58:38:24:4b:ee:
         44:4b:f4:bd:bf:27:51:e4:8b:45:37:8d:53:1d:31:96:25:9c:
         24:66:d2:8b:d9:f6:e4:c4:7c:41:01:df:09:25:3d:3e:6c:ee:
         4d:c1:6c:a4:c3:e5:1f:af:56:12:04:97:84:de:42:04:06:12:
         47:4b:8a:6b:aa:da:1d:93:5b:69:f5:4e:3a:95:7e:a4:0b:61:
         36:a7:51:c4:96:76:50:d4:a6:27:95:31:47:96:67:54:54:fd:
         7c:bf:33:1a:fd:09:5d:91:11:97:7e:f0:9d:a8:55:73:44:51:
         2a:db:ea:ed:91:7d:60:a4:29:f4:b8:ad:58:61:95:68:84:26:
         75:01:79:d0:41:55:ec:e3:ed:8d:c3:32:86:30:9d:cb:05:62:
         f7:28:2a:2f:32:ae:8c:17:96:09:68:ac:fa:5f:9e:24:37:87:
         d4:f7:9c:66:80:24:cb:2e:38:61:90:d9:f9:aa:9e:4a:9d:e6:
         18:e0:4a:0f:14:6d:cb:db:ad:8a:ec:d8:60:cd:3d:e8:66:e0:
         09:e1:22:03:18:29:63:7d:e5:fb:00:66:c3:7b:83:17:32:e7:
         42:83:6d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:51:02 2026 by rpki-client