Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
File:                     plBG2F7PIB--9R6L6hxO0z-Vsmg.mft (raw, json)
Hash identifier:          KqKBVmrtwATuPTGiJPzFWHmiWEokPCmzNoqfmPI6Q1I=
Subject key identifier:   33:DC:0B:51:8A:6C:EB:A9:3B:4D:37:53:82:A5:8B:C7:85:A1:3F:E9
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Certificate issuer:       /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial:       019D38D3336E842C9AD5301846644A80781D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
Manifest number:          189B
Signing time:             Sun 29 Mar 2026 09:00:58 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:58 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:58 +0000
Files and hashes:         1: 6TK55uf4E7Q4i5YH-VAZAMARA00.roa (hash: 3regBELSIWwrIEhCUAfpYTo6zV2ol5bwAAaJIBdpeUs=)
                          2: 9twuQnOJskBwmGMFoupLSFf36QU.roa (hash: RCDNAXL5qdPSc9rP9ORi3f5ylPM5vMAj2oc0ZzFFmFU=)
                          3: DijJx3m0K8IF-fNdq8vdHLvoRm0.roa (hash: 4C2y0rnH3pQ1yAQ2l/hvovIIpf4rpQHX/FcG3Oj/At8=)
                          4: I9QD5q-NiIfxJo1lRmq5OKOHN_Q.roa (hash: Qi/hyzakZZcN60BC7q1PWSyKEfO3DZwisLoDVX9bMS8=)
                          5: N7Z-KVIhy-3YXcEigFtIjfBgqyU.roa (hash: ua7m4lDdZT/nE5B7uMpIhoHMPNREsYJy7Na3JVYy+ho=)
                          6: VFqJkoKX_P2e5DUSDfyccrd5zpE.roa (hash: 76YyLGgvp5IErRkUR0VKzNy6NFnsufvCYMry5U68Xw8=)
                          7: plBG2F7PIB--9R6L6hxO0z-Vsmg.crl (hash: fad7weaU00Ci3PNJsobcdWFB6w/F12ol122glXuvaTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:33:6e:84:2c:9a:d5:30:18:46:64:4a:80:78:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
        Validity
            Not Before: Mar 29 09:00:58 2026 GMT
            Not After : Mar 30 09:00:58 2026 GMT
        Subject: CN=33dc0b518a6ceba93b4d375382a58bc785a13fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:50:92:ce:ed:41:b8:7c:0c:71:fb:ae:89:a2:
                    0c:51:fa:0d:26:57:9e:d0:7f:44:9f:38:6a:3a:82:
                    dd:5c:1c:6d:4c:5e:34:4d:6a:80:4e:fa:bd:f5:2b:
                    5d:76:27:56:e5:01:c1:fc:79:ac:e0:54:e7:d8:a4:
                    64:17:bc:f3:76:45:77:93:d3:85:ef:5d:50:d3:2e:
                    75:2c:4e:0b:94:00:71:67:6f:0e:ac:ca:dc:4e:b4:
                    26:6c:e2:9f:96:b2:a5:1b:a9:ad:d4:e9:b9:20:b1:
                    9e:7b:e9:aa:c2:88:f5:91:f2:a5:dd:39:7d:5e:47:
                    ca:96:53:6f:8d:e8:79:0e:cd:3d:74:d1:57:80:d8:
                    3f:49:de:45:1d:a0:b1:c1:8e:5a:c7:45:8e:c1:1c:
                    a0:78:82:0c:99:6e:9d:cc:83:25:69:d3:04:9b:a6:
                    d0:36:17:f2:2c:2a:b9:c6:f2:7f:cb:51:83:07:96:
                    32:8e:18:aa:a9:c9:f4:5c:4f:be:39:7d:ec:99:95:
                    76:f9:23:59:10:f3:9c:95:bd:2c:e0:19:95:7e:e6:
                    86:75:4d:e2:63:da:f8:59:ae:a2:e0:4b:70:6a:69:
                    33:7c:a6:57:60:b9:35:07:5b:06:24:f1:ec:ed:32:
                    db:39:3b:e7:a0:86:4c:c5:92:d0:28:22:73:d8:74:
                    44:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DC:0B:51:8A:6C:EB:A9:3B:4D:37:53:82:A5:8B:C7:85:A1:3F:E9
            X509v3 Authority Key Identifier:
                keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:aa:c4:3c:f3:48:10:14:b0:c9:d3:dc:ac:00:72:84:b6:e7:
         9f:ea:d8:bd:83:ee:f8:a7:ec:c1:b7:67:a7:22:d9:a8:05:a0:
         ac:7e:6b:e2:1f:50:9c:c4:76:00:57:12:12:d0:d1:b8:f4:2f:
         12:c3:fa:d0:5e:c8:93:22:73:6e:17:9b:df:83:81:f4:2c:04:
         a5:d3:e1:8b:77:e6:49:7a:4b:9f:0d:c8:17:00:f0:f0:11:d6:
         4b:05:81:da:80:81:85:9e:51:14:ff:39:88:1e:36:5f:64:0f:
         f9:ab:31:23:54:2a:d6:02:85:f2:0c:ce:9b:79:a8:4c:d2:f1:
         ed:20:98:7d:9f:e2:2d:89:32:10:39:69:24:7e:3e:df:7c:4a:
         35:d1:84:70:14:93:c2:96:af:7b:26:24:56:42:ce:03:ac:2d:
         49:4d:89:14:52:e2:34:3f:de:3d:93:31:4a:88:af:f6:a0:b3:
         92:a9:3b:81:31:63:65:84:07:be:20:ea:7a:2f:b9:7a:ac:5b:
         92:46:2d:6d:d5:bc:a4:0a:e2:28:39:62:d8:f1:0d:02:e0:51:
         95:db:1d:8a:07:f3:ea:ff:3e:83:b4:fb:8e:a2:91:d8:08:5a:
         d0:1f:4c:1e:e3:4b:5e:a3:35:f3:fb:7b:cb:eb:5c:27:e2:05:
         fe:0d:9d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:43 2026 by rpki-client