Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
File:                     plBG2F7PIB--9R6L6hxO0z-Vsmg.mft (raw, json)
Hash identifier:          R9sJSx5u0pGOCJCt3agg6q4t4Uw3AD4/Zgj/KJ/3wZA=
Subject key identifier:   53:19:F8:44:E7:F5:FC:40:84:62:43:96:68:61:DC:98:64:3E:66:AB
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Certificate issuer:       /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial:       01A06D94CB220685FF5293B9C7A17E65949D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
Manifest number:          1A44
Signing time:             Fri 04 Sep 2026 18:01:02 +0000
Manifest this update:     Fri 04 Sep 2026 18:01:02 +0000
Manifest next update:     Sat 05 Sep 2026 18:01:02 +0000
Files and hashes:         1: 6TK55uf4E7Q4i5YH-VAZAMARA00.roa (hash: 3regBELSIWwrIEhCUAfpYTo6zV2ol5bwAAaJIBdpeUs=)
                          2: 9twuQnOJskBwmGMFoupLSFf36QU.roa (hash: RCDNAXL5qdPSc9rP9ORi3f5ylPM5vMAj2oc0ZzFFmFU=)
                          3: DijJx3m0K8IF-fNdq8vdHLvoRm0.roa (hash: 4C2y0rnH3pQ1yAQ2l/hvovIIpf4rpQHX/FcG3Oj/At8=)
                          4: I9QD5q-NiIfxJo1lRmq5OKOHN_Q.roa (hash: Qi/hyzakZZcN60BC7q1PWSyKEfO3DZwisLoDVX9bMS8=)
                          5: N7Z-KVIhy-3YXcEigFtIjfBgqyU.roa (hash: ua7m4lDdZT/nE5B7uMpIhoHMPNREsYJy7Na3JVYy+ho=)
                          6: VFqJkoKX_P2e5DUSDfyccrd5zpE.roa (hash: 76YyLGgvp5IErRkUR0VKzNy6NFnsufvCYMry5U68Xw8=)
                          7: plBG2F7PIB--9R6L6hxO0z-Vsmg.crl (hash: 030knlbvYWGTvAkkVQstEeVE+XEa4Lktnb4DarqnFZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 18:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:94:cb:22:06:85:ff:52:93:b9:c7:a1:7e:65:94:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
        Validity
            Not Before: Sep  4 18:01:02 2026 GMT
            Not After : Sep  5 18:01:02 2026 GMT
        Subject: CN=5319f844e7f5fc40846243966861dc98643e66ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:06:43:8a:49:fd:f8:b5:97:53:23:c8:66:a0:
                    c9:ab:98:09:17:c1:ed:b5:04:2b:39:71:c6:f7:bb:
                    63:59:4c:2d:ef:fb:7c:d8:74:87:a6:c1:b2:e1:da:
                    79:2c:1e:1c:10:79:40:bc:f8:31:71:37:1b:fb:41:
                    80:f6:14:64:59:c0:ff:76:61:19:1a:ea:d7:ce:36:
                    7d:34:0a:74:7e:17:7c:a6:b5:bb:71:34:de:29:ec:
                    db:bc:82:5a:ec:04:73:a1:6a:04:52:b6:42:1f:67:
                    fb:95:77:27:31:e5:29:f2:4f:ac:c6:08:51:8a:2e:
                    85:e5:55:a1:cb:a2:7b:77:b0:b9:c9:63:df:2b:85:
                    7b:74:23:fe:a4:65:60:69:28:33:ef:93:2e:dd:6a:
                    c7:c7:38:9a:41:43:39:51:7b:08:5b:c9:d2:d0:f8:
                    32:0b:61:8e:ed:55:45:52:ef:3d:70:76:46:e3:c4:
                    7a:60:81:a3:bb:d0:0b:26:87:70:81:05:9b:57:c9:
                    b0:b8:da:f0:57:63:8b:03:97:d8:f7:20:c5:24:db:
                    bd:e0:07:d5:99:08:db:c8:aa:74:02:42:2b:2d:a8:
                    40:2b:8e:85:7d:8f:f4:f4:8e:f8:be:ef:4b:39:25:
                    4b:2a:4d:7e:32:7b:d3:b1:6a:06:a1:94:44:3f:96:
                    90:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:19:F8:44:E7:F5:FC:40:84:62:43:96:68:61:DC:98:64:3E:66:AB
            X509v3 Authority Key Identifier:
                keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d7:e7:8b:47:64:11:77:a1:e4:cc:2a:69:1c:66:a4:52:da:
         8f:f4:64:44:96:9f:f8:6a:06:9c:22:8c:78:5a:ce:48:c7:e9:
         b2:de:15:06:26:6c:ae:ea:7d:e7:b5:08:23:52:cd:b7:c7:80:
         31:d1:46:3e:e0:89:38:bb:6d:5e:d8:5b:a1:3d:7f:48:cf:11:
         e9:11:af:60:7e:44:07:9a:0d:da:d1:98:cb:a5:52:51:36:56:
         5e:1e:d9:3d:f0:e9:e5:d9:73:a1:7e:ab:ed:6e:33:bd:0c:23:
         42:bd:fc:e8:46:50:eb:3b:3c:5d:35:a3:4a:a0:4b:33:8b:54:
         c9:00:ec:45:a3:86:bf:d7:8f:59:1b:13:de:48:52:19:2f:f6:
         bb:ec:84:93:c6:41:15:80:4c:9a:e2:72:ca:be:05:f7:2c:88:
         ff:57:8a:2f:55:d5:81:64:99:4e:14:9c:6d:8a:a8:04:a8:ba:
         e8:16:1d:9b:38:60:15:0a:74:81:1c:ec:8b:af:19:ab:08:d8:
         58:f0:b1:41:09:c5:2d:a7:68:71:b0:f2:5d:3a:46:6c:04:ec:
         b1:67:57:60:27:c1:01:2d:54:95:ab:4f:b3:ee:7f:43:c8:43:
         55:e9:62:3c:c1:6f:c4:76:2b:27:e8:b1:a6:36:21:a6:9f:c3:
         21:e3:44:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtlMsiBoX/UpO5x6F+ZZSdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NTA0NmQ4NWVjZjIwMWZiZWY1MWU4YmVhMWM0ZWQzM2Y5
NWIyNjgwHhcNMjYwOTA0MTgwMTAyWhcNMjYwOTA1MTgwMTAyWjAzMTEwLwYDVQQD
Eyg1MzE5Zjg0NGU3ZjVmYzQwODQ2MjQzOTY2ODYxZGM5ODY0M2U2NmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywZDikn9+LWXUyPIZqDJq5gJF8Ht
tQQrOXHG97tjWUwt7/t82HSHpsGy4dp5LB4cEHlAvPgxcTcb+0GA9hRkWcD/dmEZ
GurXzjZ9NAp0fhd8prW7cTTeKezbvIJa7ARzoWoEUrZCH2f7lXcnMeUp8k+sxghR
ii6F5VWhy6J7d7C5yWPfK4V7dCP+pGVgaSgz75Mu3WrHxziaQUM5UXsIW8nS0Pgy
C2GO7VVFUu89cHZG48R6YIGju9ALJodwgQWbV8mwuNrwV2OLA5fY9yDFJNu94AfV
mQjbyKp0AkIrLahAK46FfY/09I74vu9LOSVLKk1+MnvTsWoGoZREP5aQXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMZ+ETn9fxAhGJDlmhh3JhkPmarMB8GA1UdIwQY
MBaAFKZQRthezyAfvvUei+ocTtM/lbJoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUt
YmNjZDMyYWY5N2ZlLzEvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUtYmNjZDMyYWY5N2Zl
LzEvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNfni0dk
EXeh5MwqaRxmpFLaj/RkRJaf+GoGnCKMeFrOSMfpst4VBiZsrup957UII1LNt8eA
MdFGPuCJOLttXthboT1/SM8R6RGvYH5EB5oN2tGYy6VSUTZWXh7ZPfDp5dlzoX6r
7W4zvQwjQr386EZQ6zs8XTWjSqBLM4tUyQDsRaOGv9ePWRsT3khSGS/2u+yEk8ZB
FYBMmuJyyr4F9yyI/1eKL1XVgWSZThScbYqoBKi66BYdmzhgFQp0gRzsi68ZqwjY
WPCxQQnFLadocbDyXTpGbATssWdXYCfBAS1UlatPs+5/Q8hDVeliPMFvxHYrJ+ix
pjYhpp/DIeNEzQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:39:12 2026 by rpki-client