Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
File:                     plBG2F7PIB--9R6L6hxO0z-Vsmg.mft (raw, json)
Hash identifier:          sPXk4ZE4J7UOAaeezWo6z3pPuxeSO9ErKsDJVwcQgYg=
Subject key identifier:   A0:35:7C:5D:3A:09:B4:AB:E8:FD:CD:B4:5D:F9:48:56:4C:84:D3:0C
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Certificate issuer:       /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial:       019E491FE58F01F587ADF56A59E3283FAD85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
Manifest number:          1928
Signing time:             Thu 21 May 2026 06:01:27 +0000
Manifest this update:     Thu 21 May 2026 06:01:27 +0000
Manifest next update:     Fri 22 May 2026 06:01:27 +0000
Files and hashes:         1: 6TK55uf4E7Q4i5YH-VAZAMARA00.roa (hash: 3regBELSIWwrIEhCUAfpYTo6zV2ol5bwAAaJIBdpeUs=)
                          2: 9twuQnOJskBwmGMFoupLSFf36QU.roa (hash: RCDNAXL5qdPSc9rP9ORi3f5ylPM5vMAj2oc0ZzFFmFU=)
                          3: DijJx3m0K8IF-fNdq8vdHLvoRm0.roa (hash: 4C2y0rnH3pQ1yAQ2l/hvovIIpf4rpQHX/FcG3Oj/At8=)
                          4: I9QD5q-NiIfxJo1lRmq5OKOHN_Q.roa (hash: Qi/hyzakZZcN60BC7q1PWSyKEfO3DZwisLoDVX9bMS8=)
                          5: N7Z-KVIhy-3YXcEigFtIjfBgqyU.roa (hash: ua7m4lDdZT/nE5B7uMpIhoHMPNREsYJy7Na3JVYy+ho=)
                          6: VFqJkoKX_P2e5DUSDfyccrd5zpE.roa (hash: 76YyLGgvp5IErRkUR0VKzNy6NFnsufvCYMry5U68Xw8=)
                          7: plBG2F7PIB--9R6L6hxO0z-Vsmg.crl (hash: 46e63gwhlH80rbQaNKGRsFrVPfm+KyiZ6IlTPzjH8QU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 May 2026 06:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:49:1f:e5:8f:01:f5:87:ad:f5:6a:59:e3:28:3f:ad:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
        Validity
            Not Before: May 21 06:01:27 2026 GMT
            Not After : May 22 06:01:27 2026 GMT
        Subject: CN=a0357c5d3a09b4abe8fdcdb45df948564c84d30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:aa:0a:bc:ca:da:14:35:4c:dd:e9:de:1e:
                    0e:24:58:b8:1f:fe:a1:ba:3c:31:af:34:a5:99:83:
                    ea:53:d8:35:5c:99:6f:75:8e:b9:06:0f:43:7b:4c:
                    2c:82:42:97:47:8c:3c:26:6b:8a:b9:af:18:71:ac:
                    2a:ce:8a:42:4d:45:5b:8f:63:83:e5:06:6c:27:04:
                    76:ff:22:2c:94:42:ee:38:5d:c1:d1:d5:2a:c7:2e:
                    bf:f3:29:f6:c3:5f:93:bc:fc:94:cf:3a:53:71:82:
                    3d:49:0e:d9:d2:ba:df:e6:49:9f:74:4d:e0:06:b7:
                    ee:3e:73:8a:6d:15:50:d3:3b:30:e0:bc:a9:90:58:
                    83:c0:42:5b:b3:59:d9:44:2b:48:23:b8:85:c1:59:
                    bb:9d:c1:83:0c:67:58:7c:ed:80:c0:6c:d7:f8:f3:
                    99:dd:85:8c:c6:44:67:52:95:31:83:ef:5e:2b:71:
                    08:22:9d:02:36:59:6c:c6:1a:97:2b:7d:cc:ab:da:
                    38:27:77:32:01:eb:58:41:77:50:90:0a:08:0f:88:
                    e6:a3:ae:44:6f:26:23:b0:c7:bc:84:e1:30:7a:45:
                    59:c8:ca:66:4f:54:bf:d8:62:a6:4d:73:bf:ec:0f:
                    45:7c:ab:be:1d:88:b9:95:8c:b7:95:e4:7a:02:cb:
                    30:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:35:7C:5D:3A:09:B4:AB:E8:FD:CD:B4:5D:F9:48:56:4C:84:D3:0C
            X509v3 Authority Key Identifier:
                keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:50:c6:c1:79:7f:f8:cb:41:9d:05:4a:df:37:60:3c:04:ad:
         55:e6:b0:a1:d2:85:77:8f:e8:6d:a4:38:d3:23:87:f8:75:67:
         fa:fe:87:20:d9:39:37:f4:c9:b4:c7:e6:32:be:78:ea:a0:2a:
         2a:1a:8c:e6:fc:c5:18:b0:1d:fd:72:42:42:69:36:67:7f:ef:
         5b:d0:ff:64:f6:20:bc:34:18:fc:19:10:1b:86:ac:82:1c:34:
         53:c7:c5:49:e5:32:6e:71:c2:31:84:f0:b0:2c:ec:d9:8a:b8:
         fb:00:7e:72:26:ca:db:a9:8a:9d:ea:48:29:ae:19:4b:2c:5c:
         12:1b:7b:f1:b3:b7:a0:b6:9f:3f:94:98:4b:a0:07:8e:15:6e:
         da:c9:d0:1a:fd:9f:5c:8a:a7:24:d6:14:1a:12:2e:c7:4a:ce:
         e4:f7:99:65:06:57:bf:5b:3b:c4:e8:39:e6:62:47:fa:d6:60:
         0e:88:7f:83:2b:1b:76:8d:f1:55:da:01:3c:95:a2:1a:95:24:
         a7:65:ea:f9:55:33:6c:87:f7:7e:b2:d8:2c:91:91:35:60:91:
         e7:cb:c9:33:19:53:5b:34:e3:1d:78:82:92:a3:d7:89:29:1a:
         38:bb:a0:9c:51:83:83:8c:8d:98:79:c4:94:c9:bd:52:2e:d3:
         27:d4:95:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:43:58 2026 by rpki-client