$ rpki-client -vvf rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft File: 576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft (raw, json) Hash identifier: hdFzmWKhV09qpHYYdeMIOTOJtDVPeSYHbebqT6eQWJo= Subject key identifier: C3:36:92:91:B9:DF:5C:75:11:D7:DE:E5:EF:12:13:A4:9A:1E:83:CF Authority key identifier: 57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9 Certificate issuer: /CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9 Certificate serial: 2EC78D7ED59932C494731372835B6837B0ED5CF7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer Subject info access: rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft Manifest number: 0144 Signing time: Wed 25 Mar 2026 14:03:52 +0000 Manifest this update: Wed 25 Mar 2026 13:58:52 +0000 Manifest next update: Fri 27 Mar 2026 02:32:52 +0000 Files and hashes: 1: 576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl (hash: 5X9rY3aZV2Ajmad3PcoVqV/je81v48tYdPgGEX37CO8=) 2: 326131343a373538333a663830303a3a2f34382d3438203d3e20323032363733.roa (hash: IkICwXXmYIH53Eafwhe+5p63oc0eGBQuzy6z5GFeHKE=) 3: 326131343a373538333a663830303a3a2f34382d3438203d3e20323135303531.roa (hash: SlJjSBQvikYv0UsxtqAyz4KRSmnNoq7BerD9HLOKbKU=) 4: 326131343a373538333a663830313a3a2f34382d3438203d3e203233343730.roa (hash: 3RgjJp+VEISluQwTvwIfx0JgoYjsyXaBdAssJHT2F7g=) Validation: OK Signature path: rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c7:8d:7e:d5:99:32:c4:94:73:13:72:83:5b:68:37:b0:ed:5c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9 Validity Not Before: Mar 25 13:58:52 2026 GMT Not After : Mar 27 02:32:52 2026 GMT Subject: CN=C3369291B9DF5C7511D7DEE5EF1213A49A1E83CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ad:de:20:27:b3:7a:09:ff:b9:0b:53:f5:81: 36:27:67:42:0e:ba:bc:0e:10:ca:dd:18:da:64:1b: ef:e3:db:1a:ed:cb:74:8d:9b:bf:c1:17:37:d6:55: 40:81:60:1e:22:7e:6a:04:fd:1c:92:de:79:2b:f4: 97:75:95:44:5a:26:32:14:b6:cb:ec:c9:b5:34:51: f1:25:59:39:05:5a:5d:35:3a:82:d5:92:f6:dc:9d: 22:c5:5b:ab:df:e6:c2:c9:c8:49:d2:05:f5:e3:1e: 97:fe:c2:7e:34:45:09:ea:de:53:86:af:49:d1:d8: d0:44:a8:86:4b:d7:e8:07:b7:06:27:8d:76:82:ba: 3e:fb:19:c9:2e:a7:7c:9f:1c:ce:d9:84:7c:d5:02: c5:af:a9:a9:a7:4c:ec:3b:4f:95:03:80:a0:05:84: 59:29:2e:e6:9d:1e:b3:5f:ed:66:f2:46:f2:c4:02: c7:ee:b2:92:d4:de:93:3b:1b:ae:a1:3a:d9:2d:6d: 25:66:24:81:0a:54:83:e3:5c:ff:21:af:74:d9:7d: 98:ee:e2:36:9d:eb:6d:c2:1f:04:9d:88:37:c6:99: cb:b8:f5:85:0f:72:a0:f9:9a:6f:87:9c:38:9c:5f: 33:0a:6d:0a:6f:46:cf:70:22:35:b8:76:ba:ed:ba: 1b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:36:92:91:B9:DF:5C:75:11:D7:DE:E5:EF:12:13:A4:9A:1E:83:CF X509v3 Authority Key Identifier: keyid:57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer Subject Information Access: Signed Object - URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:44:89:1b:02:11:69:dd:c9:d8:4f:a2:8e:42:46:88:44:52: c5:e9:d4:61:10:a5:55:27:3d:e7:23:eb:26:c3:4c:8c:51:ff: 61:9c:71:50:5c:fe:42:d1:0d:c5:32:2e:50:59:b3:e8:7f:5c: 3b:4d:62:eb:fb:f9:9f:45:96:b7:3e:de:da:01:ae:3f:31:c4: 93:8c:0e:ae:4d:9c:af:46:63:c7:bc:19:3c:2a:59:63:45:32: 00:2e:63:6e:c4:2c:b9:6d:66:b8:44:c1:ac:11:18:3d:82:41: 29:bb:5e:02:70:71:55:a7:db:f7:7e:61:3e:66:2f:83:31:cb: d6:21:6b:b1:e5:ad:47:d0:c6:86:26:fb:30:73:9c:65:0c:cd: 91:1a:b5:0c:41:93:ba:14:07:ac:fd:60:bd:d6:f7:1d:52:c1: 52:30:49:a5:25:c8:a5:b3:24:ac:7d:19:af:70:51:9b:1c:74: ac:2c:4f:ad:f3:47:0f:07:8a:2d:5d:91:2a:23:dd:e8:47:43: 17:9b:b6:25:e0:ac:d7:73:f0:39:6b:77:46:55:53:6b:5e:42: 84:77:dd:bb:9f:d3:95:3c:a6:95:50:c1:e5:f2:d8:fe:01:2a: ac:35:fb:79:03:da:f6:7a:65:b7:a0:35:cc:b2:aa:20:14:35: 2c:61:77:b2 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIULseNftWZMsSUcxNyg1toN7DtXPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc2QjFEMzBDN0Q2MTJGRTgyRDJFMkM1QTc4RUQ0MTY1 NDgwRjNEOTAeFw0yNjAzMjUxMzU4NTJaFw0yNjAzMjcwMjMyNTJaMDMxMTAvBgNV BAMTKEMzMzY5MjkxQjlERjVDNzUxMUQ3REVFNUVGMTIxM0E0OUExRTgzQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDprd4gJ7N6Cf+5C1P1gTYnZ0IO urwOEMrdGNpkG+/j2xrty3SNm7/BFzfWVUCBYB4ifmoE/RyS3nkr9Jd1lURaJjIU tsvsybU0UfElWTkFWl01OoLVkvbcnSLFW6vf5sLJyEnSBfXjHpf+wn40RQnq3lOG r0nR2NBEqIZL1+gHtwYnjXaCuj77Gckup3yfHM7ZhHzVAsWvqamnTOw7T5UDgKAF hFkpLuadHrNf7WbyRvLEAsfuspLU3pM7G66hOtktbSVmJIEKVIPjXP8hr3TZfZju 4jad623CHwSdiDfGmcu49YUPcqD5mm+HnDicXzMKbQpvRs9wIjW4drrtuhvnAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUwzaSkbnfXHUR197l7xITpJoeg88wHwYDVR0j BBgwFoAUV2sdMMfWEv6C0uLFp47UFlSA89kwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcmtpLnBsYXNtYW5vZGVzLmNvbS9yZXBvL3Bs YXNtYS1jYXN2LzEvNTc2QjFEMzBDN0Q2MTJGRTgyRDJFMkM1QTc4RUQ0MTY1NDgw RjNEOS5jcmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1h M2ZlLTQyOTktYjA3OS0zMDllZDk3ZjM4MjQvMC81NzZCMUQzMEM3RDYxMkZFODJE MkUyQzVBNzhFRDQxNjU0ODBGM0Q5LmNlcjB3BggrBgEFBQcBCwRrMGkwZwYIKwYB BQUHMAuGW3JzeW5jOi8vcmtpLnBsYXNtYW5vZGVzLmNvbS9yZXBvL3BsYXNtYS1j YXN2LzEvNTc2QjFEMzBDN0Q2MTJGRTgyRDJFMkM1QTc4RUQ0MTY1NDgwRjNEOS5t ZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw BgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcN AQELBQADggEBAElEiRsCEWndydhPoo5CRohEUsXp1GEQpVUnPecj6ybDTIxR/2Gc cVBc/kLRDcUyLlBZs+h/XDtNYuv7+Z9Flrc+3toBrj8xxJOMDq5NnK9GY8e8GTwq WWNFMgAuY27ELLltZrhEwawRGD2CQSm7XgJwcVWn2/d+YT5mL4Mxy9Yha7HlrUfQ xoYm+zBznGUMzZEatQxBk7oUB6z9YL3W9x1SwVIwSaUlyKWzJKx9Ga9wUZscdKws T63zRw8Hii1dkSoj3ehHQxebtiXgrNdz8Dlrd0ZVU2teQoR33buf05U8ppVQweXy 2P4BKqw1+3kD2vZ6ZbegNcyyqiAUNSxhd7I= -----END CERTIFICATE-----Generated at Thu Mar 26 04:22:17 2026 by rpki-client