Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
File:                     PplTRJPLqcidveJi-HoVh6Sqmd8.mft (raw, json)
Hash identifier:          w/xne0XwIyVPsn9X4BQ1gmXvy5gkCk/wO3ymdyXzFsk=
Subject key identifier:   44:88:EA:95:9F:0D:B6:DE:A2:64:19:B4:D4:95:1E:84:AE:B8:68:5E
Authority key identifier: 3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF
Certificate issuer:       /CN=3e99534493cba9c89dbde262f87a1587a4aa99df
Certificate serial:       01A08B9F807C90A7BC4838A472E76616F12A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
Manifest number:          047B
Signing time:             Thu 10 Sep 2026 14:01:21 +0000
Manifest this update:     Thu 10 Sep 2026 14:01:21 +0000
Manifest next update:     Fri 11 Sep 2026 14:01:21 +0000
Files and hashes:         1: PplTRJPLqcidveJi-HoVh6Sqmd8.crl (hash: 8mnnm2uKNKoNm1kdQbrSWruqJoDTmD2UF+MmFZ8n2Is=)
                          2: cnEEhfNi0eqLNKuxpPzXptnWI8k.roa (hash: m9SOT0Ao58g7AMmX42Mi3/tMd3Z2BD9HxWvbKa+j8ZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9f:80:7c:90:a7:bc:48:38:a4:72:e7:66:16:f1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e99534493cba9c89dbde262f87a1587a4aa99df
        Validity
            Not Before: Sep 10 14:01:21 2026 GMT
            Not After : Sep 11 14:01:21 2026 GMT
        Subject: CN=4488ea959f0db6dea26419b4d4951e84aeb8685e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cd:b4:ab:55:a0:c4:cf:f9:fb:d9:22:c0:75:
                    21:39:51:0a:2a:40:62:d7:b2:c4:08:11:d8:50:f9:
                    19:ee:ea:f0:52:58:4f:4e:6a:97:65:11:ce:77:fd:
                    55:b2:83:b2:7f:67:4f:c4:9b:eb:6b:88:e4:8d:35:
                    d2:d5:4d:bb:67:74:cb:3f:8d:39:bb:68:52:11:e1:
                    9f:98:2e:3c:f5:02:48:4a:ae:eb:cd:47:10:2b:74:
                    e7:62:69:ff:56:3b:1d:7d:02:36:63:a9:28:96:a5:
                    85:d8:d7:7e:c1:1b:07:3a:17:08:d2:70:17:18:2e:
                    d7:e8:38:8d:5b:93:9b:e3:0c:d4:57:33:99:04:76:
                    d4:13:ab:a1:10:4d:a4:f0:ad:6c:38:a7:8b:80:a4:
                    e2:24:fe:ee:48:2d:56:44:50:55:c7:12:b8:ae:3b:
                    15:98:52:c5:36:40:ca:e4:1e:66:3d:b4:b2:9c:a2:
                    8d:52:62:bf:29:00:d6:6f:aa:86:55:14:d3:7e:4d:
                    2b:5f:f2:42:01:8b:d3:5f:0c:21:68:c4:64:dc:4b:
                    3f:58:e3:dd:64:cb:77:f0:cc:d3:7f:24:e4:b7:25:
                    ab:49:50:a7:57:0e:3f:9b:60:82:48:e9:9e:0c:5d:
                    05:b4:a8:90:47:96:54:e9:a6:2d:4d:a1:29:c7:54:
                    85:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:88:EA:95:9F:0D:B6:DE:A2:64:19:B4:D4:95:1E:84:AE:B8:68:5E
            X509v3 Authority Key Identifier:
                keyid:3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:56:b8:64:d0:a7:e6:a4:c4:a8:90:ac:40:31:b4:40:ee:75:
         6e:c0:f3:34:56:6a:0c:c6:38:b0:bd:3d:0f:46:47:ab:22:cc:
         f7:c5:61:c2:d8:d3:cd:fd:d7:9e:5f:e6:d4:db:d6:4d:43:0f:
         f9:17:63:61:68:db:2f:3f:7a:7e:72:fa:73:bb:71:68:bb:d3:
         16:49:d7:27:42:82:90:65:ae:6d:6f:78:bd:42:25:56:2b:d7:
         17:77:67:98:85:51:7a:e6:8c:a8:1a:cf:03:7f:ec:f7:7e:30:
         5d:82:e7:4a:92:2f:25:a8:dc:aa:fd:0b:44:5a:ec:64:fb:08:
         43:a4:56:32:13:18:7c:46:9b:01:21:8c:e6:78:d1:ac:dc:ba:
         c1:5a:26:c0:22:89:a1:35:93:11:3c:d6:4c:2d:6f:22:94:c5:
         b4:c5:3f:4e:74:63:36:45:39:2d:5f:ad:8f:0d:b6:e3:65:01:
         c6:1e:91:bc:4e:ff:44:1b:2e:c2:80:db:9c:47:b3:05:d4:ee:
         39:7b:d6:6d:07:1e:a8:aa:20:bb:12:d3:f5:91:55:70:6d:1c:
         df:11:2c:b6:4e:1b:ca:8d:71:26:e4:aa:bb:c3:2c:58:7d:60:
         9f:f6:48:e8:1a:55:1b:f2:ce:a4:d0:16:49:e7:0f:6f:56:6e:
         02:99:4f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:31:36 2026 by rpki-client