Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
File:                     pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft (raw, json)
Hash identifier:          vVzPURNSfoDbPkrkbbGmwr/qOPHYl3Syv2R+oOmjg5A=
Subject key identifier:   5C:3E:08:DE:29:6B:31:AD:96:C4:31:51:EA:6C:E6:C4:E5:13:32:3A
Authority key identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24
Certificate issuer:       /CN=a4b707300e869467be5e5273222d90e0b618f924
Certificate serial:       019F84C42249ADD84003AF4460C757A5412C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
Manifest number:          03B5
Signing time:             Tue 21 Jul 2026 13:01:14 +0000
Manifest this update:     Tue 21 Jul 2026 13:01:14 +0000
Manifest next update:     Wed 22 Jul 2026 13:01:14 +0000
Files and hashes:         1: 4LcrxhWHmhkvPdpuzoR7Y2DvIRU.roa (hash: R/FNqp7EeNGMZEea43bk96Q3NZeLFAovdU6R5kUDA+c=)
                          2: _rkoOQmmtVtFnbLuubGb2FPnExg.roa (hash: CzxwuD95bHpNiF0gIsEuyjsHFs3IQ3s6b3cEWVvW62w=)
                          3: bBQddLsJpMdgE7gqchwFza_jgpU.roa (hash: FUjStVoQwXDYDeRsi+A//hBH3DZhoNYwk2uCiqnGlmA=)
                          4: pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl (hash: AZyQLY0x1LXLkzzFZ7YcOz+icZ+XcfZfomd+fzq76YQ=)
                          5: xJLUaEqq1ZnsryMWFK1TiSGmxHs.roa (hash: CgFHk+Ek6FTFUMY85fF8eDyesBRdCZysUJ3S3cGo/uM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:c4:22:49:ad:d8:40:03:af:44:60:c7:57:a5:41:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b707300e869467be5e5273222d90e0b618f924
        Validity
            Not Before: Jul 21 13:01:14 2026 GMT
            Not After : Jul 22 13:01:14 2026 GMT
        Subject: CN=5c3e08de296b31ad96c43151ea6ce6c4e513323a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b6:b0:ae:02:cb:2d:c9:89:1c:88:28:4e:6e:
                    35:4b:11:88:e0:a6:e5:45:da:f6:9e:41:6a:c9:92:
                    af:4f:02:64:1a:b4:a6:c1:0a:b0:d6:98:66:18:4d:
                    3e:7d:a2:07:c2:08:3e:57:ba:8c:cc:cd:46:54:20:
                    2a:44:b1:41:b0:36:63:3b:0b:fc:96:08:f8:05:6e:
                    c9:92:c6:b9:9c:be:31:17:52:5b:2c:eb:f5:f6:79:
                    0d:d1:d6:5d:52:38:5b:1c:71:8f:da:87:a0:81:e5:
                    ed:5f:7d:fa:60:d3:bc:0e:33:b2:84:be:8c:94:92:
                    4d:10:b7:6c:b6:f8:e2:56:0c:22:d3:97:0c:f3:c8:
                    f0:00:82:8a:82:18:cd:e4:3d:95:e7:a3:ed:23:3d:
                    41:f1:d4:58:a7:df:22:4c:83:cb:81:04:f1:1e:00:
                    92:52:69:14:03:4b:8c:f0:c4:a1:88:15:97:d6:21:
                    6c:0e:35:a1:68:52:59:38:58:f1:ef:80:b7:0c:fb:
                    5f:a3:da:73:fd:3b:e3:60:76:33:a5:ec:7c:eb:59:
                    d5:14:87:d7:d0:9d:e8:2f:c9:4d:c2:16:05:a0:a5:
                    df:a2:08:f8:43:17:7e:06:a8:f4:b7:2f:58:c9:84:
                    2b:f7:8c:b8:e9:c7:dc:df:86:38:df:21:87:21:dc:
                    d9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3E:08:DE:29:6B:31:AD:96:C4:31:51:EA:6C:E6:C4:E5:13:32:3A
            X509v3 Authority Key Identifier:
                keyid:A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:85:9e:d2:5f:ce:a6:b6:5a:c2:87:d5:d5:62:98:91:19:9a:
         78:df:af:45:57:04:20:84:32:4b:08:c1:ae:96:f1:7b:8a:b3:
         63:ca:8e:bd:52:84:53:a9:87:e3:fd:25:8a:cf:d5:89:33:0c:
         61:f5:a4:d5:98:5d:a2:fd:cf:31:75:4f:48:07:f8:53:03:bc:
         44:ad:d9:36:3a:91:35:f3:c7:ba:37:2a:73:95:49:0a:14:f4:
         08:cf:5d:5d:66:4c:90:23:93:48:b3:b6:b3:e2:3e:e9:5f:30:
         11:45:ad:0e:31:be:0c:f3:4d:97:bb:ff:b2:e5:eb:26:7a:bc:
         ad:c7:b1:e8:dc:6c:c9:18:da:df:a0:74:71:8d:82:c7:bf:50:
         e5:0c:bd:0e:d0:64:ba:ba:c4:1f:a7:f7:23:73:cd:84:93:73:
         45:34:04:34:22:23:ed:4c:b9:d5:ca:22:f3:5a:a0:5f:66:ce:
         45:f5:58:cc:0e:f1:12:e5:8a:6d:c0:99:c1:7d:c7:a0:d7:7c:
         4b:30:c7:f3:5e:7b:e8:ef:5a:15:30:53:9b:5e:ea:d9:3a:af:
         1f:b4:89:e1:ec:91:3e:51:27:af:62:5f:07:59:73:1a:2d:5e:
         a2:60:0a:42:2d:b0:21:a7:a1:65:43:1a:ac:95:d4:24:56:e0:
         72:ca:98:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ExCJJrdhAA69EYMdXpUEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjcwNzMwMGU4Njk0NjdiZTVlNTI3MzIyMmQ5MGUwYjYx
OGY5MjQwHhcNMjYwNzIxMTMwMTE0WhcNMjYwNzIyMTMwMTE0WjAzMTEwLwYDVQQD
Eyg1YzNlMDhkZTI5NmIzMWFkOTZjNDMxNTFlYTZjZTZjNGU1MTMzMjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLawrgLLLcmJHIgoTm41SxGI4Kbl
Rdr2nkFqyZKvTwJkGrSmwQqw1phmGE0+faIHwgg+V7qMzM1GVCAqRLFBsDZjOwv8
lgj4BW7Jksa5nL4xF1JbLOv19nkN0dZdUjhbHHGP2oeggeXtX336YNO8DjOyhL6M
lJJNELdstvjiVgwi05cM88jwAIKKghjN5D2V56PtIz1B8dRYp98iTIPLgQTxHgCS
UmkUA0uM8MShiBWX1iFsDjWhaFJZOFjx74C3DPtfo9pz/TvjYHYzpex861nVFIfX
0J3oL8lNwhYFoKXfogj4Qxd+Bqj0ty9YyYQr94y46cfc34Y43yGHIdzZlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFw+CN4pazGtlsQxUeps5sTlEzI6MB8GA1UdIwQY
MBaAFKS3BzAOhpRnvl5ScyItkOC2GPkkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mYzg1MTktNjJlNC00Mjg5LTk5MTct
M2U1NWM0OWYyZDRlLzEvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9mYzg1MTktNjJlNC00Mjg5LTk5MTctM2U1NWM0OWYyZDRl
LzEvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIWe0l/O
prZawofV1WKYkRmaeN+vRVcEIIQySwjBrpbxe4qzY8qOvVKEU6mH4/0lis/ViTMM
YfWk1Zhdov3PMXVPSAf4UwO8RK3ZNjqRNfPHujcqc5VJChT0CM9dXWZMkCOTSLO2
s+I+6V8wEUWtDjG+DPNNl7v/suXrJnq8rcex6NxsyRja36B0cY2Cx79Q5Qy9DtBk
urrEH6f3I3PNhJNzRTQENCIj7Uy51coi81qgX2bORfVYzA7xEuWKbcCZwX3HoNd8
SzDH81576O9aFTBTm17q2TqvH7SJ4eyRPlEnr2JfB1lzGi1eomAKQi2wIaehZUMa
rJXUJFbgcsqYKA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:10 2026 by rpki-client