Manifest

$ rpki-client -vvf rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft
File:                     576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft (raw, json)
Hash identifier:          hwAlVJs+n3UKuaQMkNMbKP7XwyS2875N0BRXNKdxlOs=
Subject key identifier:   90:BC:5C:60:80:50:AE:59:AA:15:0F:53:41:F2:E0:90:70:59:B0:EE
Authority key identifier: 57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9
Certificate issuer:       /CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9
Certificate serial:       660C3C0DC1EF73921A5BC480B4158449B639954E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer
Subject info access:      rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft
Manifest number:          0130
Signing time:             Sat 14 Mar 2026 04:38:48 +0000
Manifest this update:     Sat 14 Mar 2026 04:33:48 +0000
Manifest next update:     Sun 15 Mar 2026 17:31:48 +0000
Files and hashes:         1: 576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl (hash: u8paoOEixS4lDefoDXM+VrT0vTEDob8QBnG3wVwNqbg=)
                          2: 326131343a373538333a663830303a3a2f34382d3438203d3e20323032363733.roa (hash: IkICwXXmYIH53Eafwhe+5p63oc0eGBQuzy6z5GFeHKE=)
Validation:               OK
Signature path:           rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl
                          rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 08:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0c:3c:0d:c1:ef:73:92:1a:5b:c4:80:b4:15:84:49:b6:39:95:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9
        Validity
            Not Before: Mar 14 04:33:48 2026 GMT
            Not After : Mar 15 17:31:48 2026 GMT
        Subject: CN=90BC5C608050AE59AA150F5341F2E0907059B0EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:74:0c:42:1f:c4:84:8f:cc:58:b1:b1:22:6e:
                    b4:19:3a:02:08:77:60:89:81:ea:2b:b6:31:7a:dc:
                    08:f3:3f:b8:c2:b0:c4:25:50:a7:c6:e9:72:5c:31:
                    05:7e:27:50:ab:2c:96:d4:a9:90:f5:86:34:f5:32:
                    93:69:42:83:fb:fd:b4:4c:cb:d3:91:91:00:fc:ec:
                    b0:cd:f4:2f:f4:e1:4c:6e:6f:55:b5:d0:48:f2:c3:
                    8d:57:b2:6d:01:89:61:18:df:76:ff:ca:c8:f0:27:
                    4a:2a:4d:07:1c:f8:dd:8d:58:bd:a3:46:fa:b9:b5:
                    32:95:0a:c3:5e:82:5e:5f:02:c7:39:a0:0b:1f:6e:
                    66:c7:d5:5f:ff:dd:8c:37:78:73:c2:49:51:75:99:
                    93:1c:71:77:7a:03:81:5c:18:7f:ff:60:11:48:2f:
                    fe:66:eb:49:89:7d:62:bc:a9:ea:0c:0a:d3:ef:b5:
                    f6:b1:8c:8e:e4:2e:59:d6:73:94:41:f0:48:a9:c5:
                    30:d9:2f:c6:cc:fd:f0:e0:e9:93:4b:8a:49:79:5c:
                    84:2f:58:d1:7c:67:9f:c6:fb:c0:13:dc:ce:9d:13:
                    bb:74:bb:8e:67:8b:ca:95:49:c7:47:ea:03:6c:10:
                    79:da:2e:78:3d:dd:8b:23:db:14:75:35:69:23:69:
                    f4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BC:5C:60:80:50:AE:59:AA:15:0F:53:41:F2:E0:90:70:59:B0:EE
            X509v3 Authority Key Identifier:
                keyid:57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:73:d7:a6:e1:69:72:7b:21:66:ad:a5:5a:3e:6e:5f:d6:8d:
         a2:b5:6f:a0:9f:cd:d0:ea:92:e4:d4:89:7c:47:69:bb:88:29:
         f8:b5:10:78:76:17:ce:8e:99:04:89:d5:91:d9:64:dc:ef:c8:
         07:f7:a4:ad:fd:0d:45:ce:0d:ae:ce:c3:b8:84:92:30:b8:4f:
         c7:4b:2b:56:34:1c:b1:50:cf:ac:e2:54:40:33:21:2c:5f:60:
         3f:78:2d:32:bf:aa:b8:71:9d:92:60:4a:b6:ce:f3:2e:6d:80:
         e0:7c:25:dc:b5:e6:01:26:c3:34:07:07:44:e5:ce:df:b7:c0:
         75:04:48:8b:1f:1f:85:3a:84:a7:9c:b3:7d:e2:96:4d:3f:12:
         a3:b4:84:57:0a:81:b8:24:1a:cf:bb:6c:66:0d:f5:0b:1a:84:
         ac:8a:88:ef:30:ed:5c:ff:fb:f5:6a:76:5c:c4:2d:c6:94:84:
         59:85:e5:89:3f:49:75:ae:28:1b:5c:49:99:f2:08:a8:2c:d7:
         4d:d4:aa:d1:c4:c7:0d:cf:c6:6c:a1:77:41:e4:4b:79:6f:82:
         c0:f9:40:ac:a8:ba:c7:43:c6:5d:2f:05:72:2f:75:cb:21:53:
         a0:97:11:62:6d:88:b3:3c:e5:27:87:f4:79:de:bf:21:98:e7:
         c4:e9:aa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 14:48:29 2026 by rpki-client