Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
File:                     pl-8tOowipiwk5diXmOGY4PBbdA.mft (raw, json)
Hash identifier:          GAtzzudxzbLDX6O53QeYfYu2sqbhsSK43ccpMApak+o=
Subject key identifier:   0E:A3:01:40:1E:24:7A:18:82:53:CF:38:2F:03:64:36:32:47:4B:43
Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
Certificate issuer:       /CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Certificate serial:       01A161FB6232DE875A151F6A84522E3E0C8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
Manifest number:          1512
Signing time:             Thu 22 Oct 2026 05:00:26 +0000
Manifest this update:     Thu 22 Oct 2026 05:00:26 +0000
Manifest next update:     Fri 23 Oct 2026 05:00:26 +0000
Files and hashes:         1: Hp7ZxnJnTofRkI5yIDI7Zq99dYI.roa (hash: LDoLh+KsavvEWEveDP6iNRXft7TiHt7VWaryI9phpYQ=)
                          2: PBqE-zIZyIOusTf-1c6sCoVwSEM.roa (hash: nShoJfGyiyRQrJWocVDCV+ozlmgPmDq5LDzwSRaTSMg=)
                          3: mZ4P89ydJFhQN4rY2f4PkVz254Y.roa (hash: Skt3qNUNcOa5hy1opbsaR3i/Q2rM/WSrwZEbE9IBS/I=)
                          4: nix55ZdCy-jiAbM3kDENoOmV2r4.roa (hash: fKHyNV7ttM6SvsWUs2Vebt6bVnHYHxU06lD/LcUsbsI=)
                          5: pl-8tOowipiwk5diXmOGY4PBbdA.crl (hash: rRtLwf9wBwYNTqVBsWLRURZEqeqdQFalRyvsKVOD120=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:61:fb:62:32:de:87:5a:15:1f:6a:84:52:2e:3e:0c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0
        Validity
            Not Before: Oct 22 05:00:26 2026 GMT
            Not After : Oct 23 05:00:26 2026 GMT
        Subject: CN=0ea301401e247a188253cf382f03643632474b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:93:d5:e8:dd:98:a2:04:64:2c:2d:89:1d:e6:
                    00:0a:fc:0b:b3:e1:76:08:24:6d:22:06:82:a0:a3:
                    eb:b3:18:89:9d:f8:87:f4:95:f2:79:e5:32:b9:e1:
                    76:a6:be:f2:ce:21:2f:9e:7f:f0:83:e9:6b:6c:08:
                    38:b0:8d:5e:b3:0b:82:3d:97:a9:e2:55:eb:2c:39:
                    46:ec:4a:f8:4b:3a:ef:13:c8:d3:64:aa:8a:9d:1a:
                    d5:c5:bd:5f:18:33:3c:80:80:68:9d:f9:cc:fc:e3:
                    2d:0b:b0:14:dc:fb:03:23:82:46:d7:9f:28:6b:34:
                    5d:1e:94:dc:11:3f:67:1a:13:df:24:10:d3:60:11:
                    eb:e4:f0:76:2c:cb:73:74:ea:c0:3d:79:13:f5:92:
                    f4:e0:91:88:0a:1b:57:cc:c5:cd:a2:58:c9:b0:9c:
                    47:61:9b:cb:aa:cc:1b:3f:99:6e:20:de:ee:a3:bf:
                    b6:5b:0c:a0:0e:22:41:26:f2:10:d9:2c:15:10:7b:
                    ff:fe:a3:9d:d0:f6:06:96:06:9d:1e:4f:f4:a3:76:
                    fa:c9:ff:8c:64:8c:10:c3:cf:e8:49:3c:a5:66:4a:
                    2e:db:51:45:d2:4e:06:c6:84:e0:c5:f5:f1:94:5c:
                    98:15:45:94:33:81:bb:bc:88:14:e3:32:ae:0c:3a:
                    6a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A3:01:40:1E:24:7A:18:82:53:CF:38:2F:03:64:36:32:47:4B:43
            X509v3 Authority Key Identifier:
                keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:9f:04:43:0a:38:30:3e:e0:3f:e0:1f:26:77:b0:36:ff:3b:
         31:67:2f:2b:c3:c5:c8:4d:b8:fd:1d:a2:61:b3:7c:51:36:b6:
         c0:39:e2:e2:8b:bd:1a:79:15:cd:5b:4c:11:30:cd:ce:30:f7:
         ec:7d:4a:37:72:01:a9:eb:48:50:c5:7c:15:aa:8c:97:f9:4e:
         18:0d:41:a0:49:ce:63:6e:ec:7a:9f:06:b1:7b:2d:ff:17:25:
         07:6b:70:d6:cd:45:18:06:a4:17:da:2f:aa:ab:24:38:dc:90:
         35:35:c2:4a:72:3b:f9:63:e8:32:c3:4f:35:7a:63:b8:55:6d:
         31:19:80:ef:83:9e:64:17:c8:84:0c:b9:3c:94:7b:0d:b5:4d:
         85:a0:ad:e0:11:d1:10:86:eb:65:6a:c5:97:dc:bc:3c:2e:ed:
         e6:c5:d7:61:60:c0:97:87:cc:06:93:c5:7e:74:62:a7:35:e2:
         a2:40:ee:f9:20:f2:95:9b:86:d8:aa:8b:9e:72:93:a0:87:97:
         61:09:34:ed:fa:e3:ec:9b:71:e2:01:eb:12:1d:f0:15:48:c7:
         20:9b:11:6c:48:61:6c:cb:b8:ee:a1:df:21:61:f8:0f:44:0e:
         bf:a8:15:b0:5d:01:ef:05:8c:7f:c0:66:a7:9c:df:81:c6:19:
         fe:07:28:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:54:54 2026 by rpki-client