Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/03db8e-d00c-4005-a88e-60f550f61d64/1/PluwZCHU7nZU_UO77wgZSWdAONQ.mft
File:                     PluwZCHU7nZU_UO77wgZSWdAONQ.mft (raw, json)
Hash identifier:          +sxomOCiTaRGV5jy+b7tA1S2PFDWV+b+bCXdndX9EL4=
Subject key identifier:   80:74:75:38:37:BA:D7:24:DC:7E:CE:3F:24:85:39:B0:E4:5B:C6:9D
Authority key identifier: 3E:5B:B0:64:21:D4:EE:76:54:FD:43:BB:EF:08:19:49:67:40:38:D4
Certificate issuer:       /CN=3e5bb06421d4ee7654fd43bbef081949674038d4
Certificate serial:       01A122E5FC8B70E9D22627EA22D9FF725782
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PluwZCHU7nZU_UO77wgZSWdAONQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/03db8e-d00c-4005-a88e-60f550f61d64/1/PluwZCHU7nZU_UO77wgZSWdAONQ.mft
Manifest number:          0234
Signing time:             Fri 09 Oct 2026 23:01:00 +0000
Manifest this update:     Fri 09 Oct 2026 23:01:00 +0000
Manifest next update:     Sat 10 Oct 2026 23:01:00 +0000
Files and hashes:         1: PluwZCHU7nZU_UO77wgZSWdAONQ.crl (hash: MtsEA5rmegzbH3zip3ndgpcleVfOFwzb1HVh+2ocHGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/03db8e-d00c-4005-a88e-60f550f61d64/1/PluwZCHU7nZU_UO77wgZSWdAONQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/03db8e-d00c-4005-a88e-60f550f61d64/1/PluwZCHU7nZU_UO77wgZSWdAONQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PluwZCHU7nZU_UO77wgZSWdAONQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 17:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:22:e5:fc:8b:70:e9:d2:26:27:ea:22:d9:ff:72:57:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e5bb06421d4ee7654fd43bbef081949674038d4
        Validity
            Not Before: Oct  9 23:01:00 2026 GMT
            Not After : Oct 10 23:01:00 2026 GMT
        Subject: CN=8074753837bad724dc7ece3f248539b0e45bc69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ab:4a:44:ea:16:e0:b4:cf:7c:55:5c:63:c8:
                    78:7c:98:74:1a:43:62:d7:44:67:7c:36:1f:87:2c:
                    01:17:4b:67:21:90:e6:fb:29:c7:ba:64:4c:79:59:
                    0b:03:39:55:3a:fa:7a:6e:34:0b:92:f1:9c:35:e9:
                    ad:e5:ae:23:49:a0:40:61:07:81:30:0d:f0:ed:52:
                    15:54:ce:f4:64:0d:20:1b:5a:19:4a:aa:a7:0c:71:
                    0f:38:79:94:9d:97:24:58:42:ab:0b:ba:6d:5a:6b:
                    44:1f:87:74:61:70:33:80:a7:d4:ca:42:ee:2e:04:
                    81:c0:7e:ec:6d:61:dc:f0:66:a2:74:f9:5f:4c:d3:
                    e2:a6:f7:ba:f2:8e:63:00:20:ce:a8:8e:20:6d:9a:
                    12:c3:91:c5:f6:b5:1f:4c:e8:ad:fa:44:87:24:58:
                    ef:f3:f3:ce:cb:b0:9c:05:f7:9c:87:7d:92:b0:5c:
                    c7:ab:d7:4d:c2:fe:93:89:2f:85:e2:be:79:a4:23:
                    1d:f6:08:f3:36:24:76:92:61:d7:eb:a6:e6:5b:6b:
                    4d:7e:f3:bd:15:0c:4a:ab:97:21:fe:ed:89:65:28:
                    3f:f9:7c:69:38:04:69:5c:3f:b3:cc:a7:43:06:a9:
                    3a:4e:9c:72:03:9d:6b:94:54:27:2c:9c:3f:66:3e:
                    cf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:74:75:38:37:BA:D7:24:DC:7E:CE:3F:24:85:39:B0:E4:5B:C6:9D
            X509v3 Authority Key Identifier:
                keyid:3E:5B:B0:64:21:D4:EE:76:54:FD:43:BB:EF:08:19:49:67:40:38:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PluwZCHU7nZU_UO77wgZSWdAONQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03db8e-d00c-4005-a88e-60f550f61d64/1/PluwZCHU7nZU_UO77wgZSWdAONQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03db8e-d00c-4005-a88e-60f550f61d64/1/PluwZCHU7nZU_UO77wgZSWdAONQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d8:bf:4c:6b:91:a8:94:3f:c0:0a:ef:aa:61:47:dc:de:f9:
         d3:27:8f:23:e7:66:a1:85:18:f4:b2:5b:90:a2:c7:92:15:13:
         b3:ab:32:02:f0:9b:e2:a8:3c:2b:9a:c0:f3:c0:68:2a:fd:5f:
         02:d0:e2:c9:07:7e:ba:01:6b:03:40:8d:fd:d9:54:9c:02:2c:
         f4:19:ce:c1:6a:95:6a:47:01:d7:7b:c5:c8:ee:51:b6:50:b4:
         49:ec:28:8d:cd:00:ef:dd:73:f4:fe:a0:b9:1d:d7:0c:37:a8:
         a1:0f:89:f6:fb:ee:1f:85:21:cc:c2:10:cf:9d:d1:91:1c:44:
         4f:03:65:ee:83:36:36:60:c3:a5:16:c2:78:4f:d9:cd:1b:61:
         f7:8e:61:8a:1b:f7:a6:69:58:60:2f:f0:39:66:01:17:b9:1e:
         a5:66:a6:db:77:2d:62:d6:3b:f1:10:f2:38:9a:7d:bc:ca:6c:
         35:57:06:8d:a7:05:41:a6:57:c6:ea:e8:40:33:b9:95:41:0a:
         c2:3c:d0:37:49:67:67:64:dc:9e:38:54:4f:0c:fc:3d:33:f2:
         fb:8e:b4:50:a6:9f:64:ac:dd:07:78:47:42:87:01:65:44:44:
         18:62:ba:d8:f0:3c:66:03:be:62:60:13:ff:3f:b8:b8:01:90:
         ee:1e:63:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEi5fyLcOnSJifqItn/cleCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNWJiMDY0MjFkNGVlNzY1NGZkNDNiYmVmMDgxOTQ5Njc0
MDM4ZDQwHhcNMjYxMDA5MjMwMTAwWhcNMjYxMDEwMjMwMTAwWjAzMTEwLwYDVQQD
Eyg4MDc0NzUzODM3YmFkNzI0ZGM3ZWNlM2YyNDg1MzliMGU0NWJjNjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsatKROoW4LTPfFVcY8h4fJh0GkNi
10RnfDYfhywBF0tnIZDm+ynHumRMeVkLAzlVOvp6bjQLkvGcNemt5a4jSaBAYQeB
MA3w7VIVVM70ZA0gG1oZSqqnDHEPOHmUnZckWEKrC7ptWmtEH4d0YXAzgKfUykLu
LgSBwH7sbWHc8GaidPlfTNPipve68o5jACDOqI4gbZoSw5HF9rUfTOit+kSHJFjv
8/POy7CcBfech32SsFzHq9dNwv6TiS+F4r55pCMd9gjzNiR2kmHX66bmW2tNfvO9
FQxKq5ch/u2JZSg/+XxpOARpXD+zzKdDBqk6TpxyA51rlFQnLJw/Zj7PGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIB0dTg3utck3H7OPySFObDkW8adMB8GA1UdIwQY
MBaAFD5bsGQh1O52VP1Du+8IGUlnQDjUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGx1d1pDSFU3blpVX1VPNzd3Z1pTV2RBT05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wM2RiOGUtZDAwYy00MDA1LWE4OGUt
NjBmNTUwZjYxZDY0LzEvUGx1d1pDSFU3blpVX1VPNzd3Z1pTV2RBT05RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wM2RiOGUtZDAwYy00MDA1LWE4OGUtNjBmNTUwZjYxZDY0
LzEvUGx1d1pDSFU3blpVX1VPNzd3Z1pTV2RBT05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdi/TGuR
qJQ/wArvqmFH3N750yePI+dmoYUY9LJbkKLHkhUTs6syAvCb4qg8K5rA88BoKv1f
AtDiyQd+ugFrA0CN/dlUnAIs9BnOwWqVakcB13vFyO5RtlC0Sewojc0A791z9P6g
uR3XDDeooQ+J9vvuH4UhzMIQz53RkRxETwNl7oM2NmDDpRbCeE/ZzRth945hihv3
pmlYYC/wOWYBF7kepWam23ctYtY78RDyOJp9vMpsNVcGjacFQaZXxuroQDO5lUEK
wjzQN0lnZ2TcnjhUTwz8PTPy+460UKafZKzdB3hHQocBZUREGGK62PA8ZgO+YmAT
/z+4uAGQ7h5jxw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 02:54:31 2026 by rpki-client