Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
File:                     plBG2F7PIB--9R6L6hxO0z-Vsmg.mft (raw, json)
Hash identifier:          Lk19mw4GmJlX3oHZNAdsFF0KYi8QumM3Etfc1UjCFz8=
Subject key identifier:   28:71:85:F1:8E:4B:AB:E0:40:22:8A:A6:6D:C0:F5:23:21:39:FF:02
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Certificate issuer:       /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial:       01974666ADB9611EDA02A33B4D4A65EF22F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
Manifest number:          1585
Signing time:             Fri 06 Jun 2025 18:00:23 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:23 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:23 +0000
Files and hashes:         1: 2kqVVML4J6p32S1IZ9ese8rrNA8.roa (hash: Z5t0NXFzD5/SVB5g4VKI0FOYHuxiI1pejsxk/eO8RUY=)
                          2: FxcmiLw90HwD6v-zIS8fyho2YJk.roa (hash: dVrudewN+D6RoriyTNX+xlGTNvGmJTbMWvHDD/OWxyw=)
                          3: OEu5ipvpOLx1mjS_wILLKGz31L8.roa (hash: Q2sxz01wDrr3ZAHG0Y04l4+NHZqPRdGf0GS6aM12Hm0=)
                          4: plBG2F7PIB--9R6L6hxO0z-Vsmg.crl (hash: PPSEOuj3sFBnrHmAK4oA5k/jykTwTSEnHaM3wLn/nrc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 18:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:66:ad:b9:61:1e:da:02:a3:3b:4d:4a:65:ef:22:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
        Validity
            Not Before: Jun  6 18:00:23 2025 GMT
            Not After : Jun  7 18:00:23 2025 GMT
        Subject: CN=287185f18e4babe040228aa66dc0f5232139ff02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:e6:e2:92:92:c8:e5:05:9e:39:ae:d0:bb:
                    d6:d1:8c:34:b5:98:f1:0e:c5:d4:42:55:be:4f:de:
                    34:39:69:f3:7c:8a:2d:8c:65:69:23:b9:9e:4d:24:
                    a7:07:79:ee:79:d7:f3:cd:d9:5a:96:f8:41:a9:08:
                    94:8a:03:32:88:c0:30:cb:92:82:f4:0d:11:53:d8:
                    9f:9f:c6:17:9d:f9:e8:f2:f2:cc:8a:df:ac:5f:4f:
                    47:41:82:ac:37:cb:80:3e:c0:d4:52:a2:dd:97:ee:
                    9b:90:33:f2:ca:f9:fd:34:68:fd:75:dc:14:6c:6c:
                    b8:ac:e7:78:87:94:db:71:ef:ca:dc:27:9b:e4:9e:
                    23:f3:67:26:10:25:57:e2:70:8f:ab:70:29:2b:b3:
                    67:e9:ac:0f:90:eb:cc:a6:fd:13:2c:fd:36:32:1e:
                    0b:f0:4a:dd:3c:ce:08:1c:78:1c:80:27:49:e9:99:
                    e4:65:81:9c:2f:93:95:07:17:19:66:78:86:9f:c5:
                    79:7d:bf:2b:69:4f:94:75:7b:00:ca:95:be:19:1c:
                    3b:48:dd:62:71:0b:18:ff:c4:bb:ee:06:b4:9b:fc:
                    0d:16:1c:f0:6b:f8:05:60:43:ff:cb:ab:d6:4a:1d:
                    cc:8c:e2:cf:a4:50:d2:e6:17:ca:8a:7c:85:2f:e9:
                    17:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:71:85:F1:8E:4B:AB:E0:40:22:8A:A6:6D:C0:F5:23:21:39:FF:02
            X509v3 Authority Key Identifier:
                keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:21:f3:62:bf:da:16:df:25:0b:d8:24:3f:a1:72:b4:80:2a:
         e0:02:71:41:88:64:2d:d0:ec:f7:59:55:f1:20:1b:85:bc:53:
         24:3a:cc:a4:c0:3e:30:d5:0f:51:5b:68:04:da:60:d1:fd:0f:
         e6:a7:0c:81:fd:04:5b:4f:bd:3c:b8:46:5e:06:e2:96:e0:bc:
         b6:da:51:45:27:95:83:4f:1c:02:0e:c1:03:a8:04:e7:9b:5d:
         ae:50:45:4d:94:ee:87:00:e5:c5:1a:ce:75:a8:88:2c:e5:8a:
         c7:ea:74:b5:12:e5:57:44:4a:54:45:75:48:39:2b:ae:6d:a2:
         0d:6b:13:35:66:4e:55:de:c9:8f:4a:4e:47:68:44:b8:76:5f:
         29:4e:78:f0:c5:c3:4f:d8:e8:a5:6c:16:ce:c5:13:a5:ea:d7:
         d5:9f:df:75:10:05:3c:73:4a:b9:4d:b5:f9:40:d5:02:9d:08:
         4b:9c:fd:ec:79:01:49:f9:16:1b:0a:3f:b3:9f:40:19:0c:4f:
         13:11:a5:2d:77:3f:7a:ac:9c:a0:e9:33:80:73:3b:2e:0d:e2:
         91:c7:d3:6d:58:51:d6:cb:29:fc:e6:72:ef:b5:7b:29:16:86:
         55:e1:08:58:13:f4:16:aa:dc:e5:e8:f2:5f:b5:93:49:67:02:
         d0:06:e1:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGZq25YR7aAqM7TUpl7yL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NTA0NmQ4NWVjZjIwMWZiZWY1MWU4YmVhMWM0ZWQzM2Y5
NWIyNjgwHhcNMjUwNjA2MTgwMDIzWhcNMjUwNjA3MTgwMDIzWjAzMTEwLwYDVQQD
EygyODcxODVmMThlNGJhYmUwNDAyMjhhYTY2ZGMwZjUyMzIxMzlmZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+Dm4pKSyOUFnjmu0LvW0Yw0tZjx
DsXUQlW+T940OWnzfIotjGVpI7meTSSnB3nuedfzzdlalvhBqQiUigMyiMAwy5KC
9A0RU9ifn8YXnfno8vLMit+sX09HQYKsN8uAPsDUUqLdl+6bkDPyyvn9NGj9ddwU
bGy4rOd4h5Tbce/K3Ceb5J4j82cmECVX4nCPq3ApK7Nn6awPkOvMpv0TLP02Mh4L
8ErdPM4IHHgcgCdJ6ZnkZYGcL5OVBxcZZniGn8V5fb8raU+UdXsAypW+GRw7SN1i
cQsY/8S77ga0m/wNFhzwa/gFYEP/y6vWSh3MjOLPpFDS5hfKinyFL+kXSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChxhfGOS6vgQCKKpm3A9SMhOf8CMB8GA1UdIwQY
MBaAFKZQRthezyAfvvUei+ocTtM/lbJoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUt
YmNjZDMyYWY5N2ZlLzEvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUtYmNjZDMyYWY5N2Zl
LzEvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCHzYr/a
Ft8lC9gkP6FytIAq4AJxQYhkLdDs91lV8SAbhbxTJDrMpMA+MNUPUVtoBNpg0f0P
5qcMgf0EW0+9PLhGXgbiluC8ttpRRSeVg08cAg7BA6gE55tdrlBFTZTuhwDlxRrO
daiILOWKx+p0tRLlV0RKVEV1SDkrrm2iDWsTNWZOVd7Jj0pOR2hEuHZfKU548MXD
T9jopWwWzsUTperX1Z/fdRAFPHNKuU21+UDVAp0IS5z97HkBSfkWGwo/s59AGQxP
ExGlLXc/eqycoOkzgHM7Lg3ikcfTbVhR1ssp/OZy77V7KRaGVeEIWBP0Fqrc5ejy
X7WTSWcC0AbheQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:33 2025 by rpki-client