Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
File:                     pLZdoXU_tO7tuG_ah906-mnYYtA.mft (raw, json)
Hash identifier:          xJa1y+xHzYeHFp9cA+vd+jMipQAYYYfTys3Ms2T0RFY=
Subject key identifier:   BD:01:55:F2:6B:76:2F:AB:31:E4:C5:16:67:A1:EA:3E:61:A4:97:DE
Authority key identifier: A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0
Certificate issuer:       /CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
Certificate serial:       019EB87C8FD11914BCF9A90E03DC3FFDC61E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
Manifest number:          0CD0
Signing time:             Thu 11 Jun 2026 21:00:31 +0000
Manifest this update:     Thu 11 Jun 2026 21:00:31 +0000
Manifest next update:     Fri 12 Jun 2026 21:00:31 +0000
Files and hashes:         1: pLZdoXU_tO7tuG_ah906-mnYYtA.crl (hash: ASwHMf356+c8pjd+22jiqgBrjUXdVv0AaBxR8pKe13Q=)
                          2: xNLnZO1cDEAZroKMMXGqZNfuwNY.roa (hash: yJpc4aql6Gc3JoFlGTZNEOEdKkmxfLQRUHpE9hH09nI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7c:8f:d1:19:14:bc:f9:a9:0e:03:dc:3f:fd:c6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
        Validity
            Not Before: Jun 11 21:00:31 2026 GMT
            Not After : Jun 12 21:00:31 2026 GMT
        Subject: CN=bd0155f26b762fab31e4c51667a1ea3e61a497de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:99:80:61:61:92:4e:c8:70:f0:6f:4f:26:23:
                    8f:04:ff:ca:0a:20:b1:32:8f:25:df:bd:6e:1a:f8:
                    71:47:6c:68:01:63:79:5b:65:27:1d:88:3b:f7:8b:
                    11:8f:db:53:51:36:99:61:15:ae:95:2e:4c:c9:33:
                    3b:46:bf:2e:3a:6f:92:15:40:11:98:9b:8a:f7:04:
                    45:00:ac:50:62:b2:35:c1:69:5b:06:29:77:46:bb:
                    9e:ff:f4:07:21:c3:f2:b0:13:2e:c3:1d:0a:12:30:
                    83:38:11:4f:ef:53:bf:9c:a5:3d:95:77:e4:8a:90:
                    d4:9b:5a:e2:98:be:fa:8e:d1:d6:12:2f:74:14:92:
                    50:0d:44:2b:ad:c3:cf:65:2b:12:65:52:2e:05:ae:
                    dd:e9:ab:b2:37:ab:e1:a3:b9:38:55:12:82:5f:c5:
                    01:f9:7d:41:e5:a6:d7:92:17:41:ef:5c:cb:7a:a4:
                    f0:b6:d8:3c:06:be:33:ec:78:23:17:5a:15:3b:fb:
                    72:97:39:42:0b:95:12:b0:04:31:7b:eb:6e:0f:ae:
                    30:4d:f3:fb:32:a7:d9:cb:fa:eb:b0:87:b3:ad:e5:
                    09:4c:c6:c8:01:c0:38:e3:97:a4:82:f0:d9:f9:ac:
                    7c:03:92:fc:9c:d9:bb:e1:cb:c7:7a:84:52:e7:71:
                    0c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:01:55:F2:6B:76:2F:AB:31:E4:C5:16:67:A1:EA:3E:61:A4:97:DE
            X509v3 Authority Key Identifier:
                keyid:A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:9d:36:6f:cc:76:f8:ec:b3:65:b6:34:c9:d2:f5:5c:2b:22:
         09:21:0b:c7:15:ec:ff:3d:c2:a8:cb:cb:ac:d1:30:eb:9c:f8:
         16:7e:66:52:cd:03:e6:8a:b7:02:5b:55:60:0e:46:21:90:cb:
         4e:0d:ca:a0:1a:0f:7d:00:6f:a8:d3:44:25:a3:c2:3f:d1:85:
         82:a0:3d:d3:51:cc:10:ce:5c:15:4b:89:77:fa:52:ce:d9:5a:
         fb:78:dd:e1:89:77:32:4b:05:1c:49:a2:76:48:9b:45:73:a1:
         46:bd:32:96:7e:ce:f1:90:b9:07:03:68:aa:3e:8a:52:58:16:
         b4:46:42:e7:e9:2d:d3:b1:f0:b1:a1:49:31:86:f8:a7:23:e1:
         bb:49:23:9e:40:40:f8:9a:3d:4f:96:6c:a1:03:89:21:41:cd:
         2e:4b:51:70:01:89:8e:02:56:b1:4f:16:ac:9d:13:b7:df:80:
         1e:51:d6:45:55:bc:bd:dd:e6:29:ba:71:2a:db:23:75:42:e0:
         62:76:c9:d9:2a:f1:c9:36:19:c0:6a:a4:c1:39:90:0b:d5:ce:
         88:57:fd:52:34:bf:ba:b2:a9:05:9a:8e:82:27:1f:c5:89:84:
         79:bc:ff:c9:41:4a:ff:d0:4e:fd:e6:4c:aa:f0:06:75:17:40:
         5c:cb:f6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:50 2026 by rpki-client