Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
File:                     PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json)
Hash identifier:          u5ozRs5hmhP3X8tx6mv12Qs+9Afrioj/7RxWc33Ysx8=
Subject key identifier:   A6:41:5E:AB:7D:00:81:56:7F:26:E4:CE:8E:4C:3C:ED:83:8E:40:74
Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
Certificate issuer:       /CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Certificate serial:       01A08C0D86476E71A872D83922D67270337B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
Manifest number:          06A4
Signing time:             Thu 10 Sep 2026 16:01:31 +0000
Manifest this update:     Thu 10 Sep 2026 16:01:31 +0000
Manifest next update:     Fri 11 Sep 2026 16:01:31 +0000
Files and hashes:         1: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: 5M1fZ+V5MnpVM6bx5mekNyticU7eiRtprzYBamIGOgI=)
                          2: u4cgh7Nj-_luUR3bdBkEgf5SpHQ.roa (hash: Af7PsAxhlGeBEitHo4c+wU7iGd5LHt68jODuQoQrn3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0d:86:47:6e:71:a8:72:d8:39:22:d6:72:70:33:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b
        Validity
            Not Before: Sep 10 16:01:31 2026 GMT
            Not After : Sep 11 16:01:31 2026 GMT
        Subject: CN=a6415eab7d0081567f26e4ce8e4c3ced838e4074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:88:d9:2a:aa:c4:5c:74:ba:02:df:80:43:a8:
                    6e:9a:b3:16:74:51:4c:e0:f3:40:1f:45:04:f8:0c:
                    49:4e:71:87:cd:3f:78:fe:7b:2d:5f:c7:62:cf:07:
                    40:31:b4:fb:dd:c7:84:39:50:f1:3c:d7:63:a4:5f:
                    cb:68:95:8f:13:48:b9:2f:ce:17:f9:67:50:04:65:
                    8f:62:bf:7d:3b:bc:3a:a3:df:2e:47:a6:88:d8:c5:
                    26:9b:57:f5:a5:54:00:7e:f6:84:c6:3b:f3:7a:bd:
                    ce:d1:18:c6:76:df:07:1e:f3:47:3e:15:5d:3f:6e:
                    36:96:51:4d:64:56:c2:32:e0:cb:2b:6c:69:3e:cc:
                    be:d0:a8:68:3e:b6:6c:f6:f1:6f:fd:55:58:84:0e:
                    44:ac:8e:1e:45:89:3d:34:fd:27:4c:b8:52:0a:bf:
                    2b:b7:ed:de:3c:df:a7:7e:7c:86:70:39:e1:23:ee:
                    d4:5b:76:29:62:db:14:81:a8:b1:20:1b:3f:ac:1c:
                    13:74:65:83:05:e7:1d:73:cd:06:8d:4a:ed:81:ca:
                    5a:a0:83:e8:00:70:90:86:bf:43:da:ab:c6:0a:7c:
                    df:0e:c7:7f:f4:e0:3b:58:22:e8:eb:bf:dc:c0:72:
                    78:58:cd:05:6c:2c:60:80:f4:55:48:10:c7:12:cf:
                    c6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:41:5E:AB:7D:00:81:56:7F:26:E4:CE:8E:4C:3C:ED:83:8E:40:74
            X509v3 Authority Key Identifier:
                keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:4e:4d:0c:fc:b1:ec:7b:47:14:86:3f:5c:b8:25:ec:53:f5:
         5f:ab:75:26:fd:1b:be:e5:65:63:4f:b1:ae:22:68:57:84:58:
         70:c6:1a:09:82:dd:b2:70:1f:4b:85:a6:ea:ea:84:58:33:94:
         73:3c:72:12:4f:fa:48:4d:43:82:e1:ed:21:da:35:0a:24:95:
         6f:6a:93:3f:f4:d1:cc:7d:ba:1d:cc:9f:be:f8:40:24:29:30:
         a6:3a:13:70:fc:9f:84:94:2b:6a:03:b8:84:7c:46:ae:87:01:
         56:0f:72:c6:ef:97:18:29:d5:1d:14:73:d0:31:47:0f:1a:88:
         c6:b5:89:b0:78:c0:ae:90:d7:dd:25:c5:0a:04:da:bd:f9:b7:
         45:53:8b:6d:be:01:ab:09:ad:f5:f3:dd:4a:6b:48:00:89:67:
         d5:f5:3a:8c:1a:c7:fd:5a:34:9b:75:b8:5d:0b:8f:76:b6:a7:
         16:82:ba:a6:2b:ee:42:41:82:36:73:1c:33:a3:4c:e3:be:9c:
         9b:a2:70:a6:e2:f3:60:ff:4d:8d:e1:20:f7:4d:de:51:d7:4e:
         07:71:7b:a5:26:d5:9b:ea:02:bf:5d:6b:db:6b:ce:3d:4d:07:
         95:ec:14:26:86:4a:e6:4c:44:1a:8e:38:65:24:67:2e:e1:53:
         2e:fe:a5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:34:45 2026 by rpki-client