Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
File:                     PlDR3TG8dEm6zBhksBr5lMVH79M.mft (raw, json)
Hash identifier:          EfoierWjYA6VjX29VtgAT00cK0A/gAvOK4v7CurI8QM=
Subject key identifier:   27:0D:44:D3:5A:46:2A:05:62:6E:F5:0F:7A:A6:5B:22:D3:AF:41:B7
Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
Certificate issuer:       /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Certificate serial:       0199FB45FC23B4F377BB19E2FADEF4F080AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 07:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:31 +0000
Files and hashes:         1: PlDR3TG8dEm6zBhksBr5lMVH79M.crl (hash: xL6U4xPOGCLrtS/Q8Dj5QryqYOfOFg4NGTDTymMSHQ0=)
                          2: _Y1GXKJ5A67loqKl1i2V9S3MWKg.roa (hash: V3o7sWDlYKkS4Nqv4VMpbKGi6d6rMWmkClDxQRZCgxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:fc:23:b4:f3:77:bb:19:e2:fa:de:f4:f0:80:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
        Validity
            Not Before: Oct 19 07:01:31 2025 GMT
            Not After : Oct 20 07:01:31 2025 GMT
        Subject: CN=270d44d35a462a05626ef50f7aa65b22d3af41b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6f:15:e5:16:92:26:5a:19:18:05:0b:39:84:
                    fe:15:00:a3:00:81:33:c0:fa:79:17:e8:43:ee:82:
                    b2:f5:62:a0:a2:be:be:af:09:00:99:46:ea:23:29:
                    89:31:27:bd:71:55:8f:26:10:97:50:97:f1:4a:7b:
                    3b:46:77:82:d8:4a:ba:3c:ad:60:da:27:77:4e:0c:
                    09:2c:68:b8:86:b5:70:e6:fd:ae:e6:fb:91:a7:c6:
                    cd:11:5b:01:87:58:a2:c2:7d:71:04:28:09:7b:cf:
                    05:66:2a:a2:cc:09:d3:88:3d:01:1c:9e:62:76:31:
                    9f:d6:ee:5f:61:e4:2e:5a:45:e4:29:32:98:95:59:
                    6d:e6:26:02:a9:6f:31:e7:90:89:84:2a:2c:38:d7:
                    82:d3:9d:fd:c3:28:04:dd:17:f4:e7:1b:b6:ea:7d:
                    e5:19:54:47:a8:60:c5:8a:eb:8d:0b:cf:0b:f8:d5:
                    93:cc:f7:0a:5c:a5:e1:0c:c7:60:16:60:17:a6:90:
                    36:d3:aa:40:7b:f8:75:5f:a5:61:75:48:e6:c1:dc:
                    cc:a2:42:ef:f2:d7:db:1d:69:89:64:f7:94:96:9a:
                    a8:47:71:69:35:11:b2:aa:75:ee:17:8f:6d:29:a2:
                    d4:37:8c:67:b3:1d:ba:2a:8c:44:15:f0:19:53:f3:
                    ee:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0D:44:D3:5A:46:2A:05:62:6E:F5:0F:7A:A6:5B:22:D3:AF:41:B7
            X509v3 Authority Key Identifier:
                keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a1:27:29:b7:c9:1d:f8:d3:c5:75:5b:f0:a6:b0:98:55:1b:
         c3:e3:ac:53:a4:0b:95:2c:ea:5c:e5:3d:19:05:e3:68:3f:5d:
         23:24:8c:a7:39:c2:08:df:83:af:0c:0d:75:56:d8:6b:6a:a1:
         cb:36:2f:b2:b9:4f:fa:d2:25:15:fd:d9:a4:c0:a7:3b:6c:36:
         97:8d:61:9e:3f:f8:7c:7a:17:19:6f:2b:e1:53:06:d6:00:a1:
         4a:00:a3:c9:f6:f1:ac:84:26:5f:a1:76:ce:fa:77:e2:43:bd:
         a1:6e:6a:10:ab:24:fd:d7:60:f2:8f:22:f7:c4:9b:b8:45:8e:
         d7:d7:54:9a:ad:70:5f:dc:a7:3b:78:f6:39:4a:62:8d:9a:0d:
         35:c1:ec:21:49:24:f7:4c:83:7a:e2:0c:43:0a:00:b6:82:8c:
         67:6c:8d:43:23:ce:01:82:f6:98:0b:32:16:e4:85:76:ff:76:
         37:77:bf:72:e2:dd:ad:20:1d:47:94:3d:5e:30:f5:c1:b3:0d:
         ca:6c:75:eb:e4:cc:5c:15:d5:42:19:6c:37:6c:76:01:d0:62:
         09:4e:cf:d6:1b:df:30:83:bb:41:cc:bd:cc:89:b5:0b:6f:e2:
         0b:7a:cf:d0:86:60:e7:61:b2:f4:6a:d4:d9:cd:08:a1:f7:28:
         6c:d2:b1:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RfwjtPN3uxni+t708ICuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNTBkMWRkMzFiYzc0NDliYWNjMTg2NGIwMWFmOTk0YzU0
N2VmZDMwHhcNMjUxMDE5MDcwMTMxWhcNMjUxMDIwMDcwMTMxWjAzMTEwLwYDVQQD
EygyNzBkNDRkMzVhNDYyYTA1NjI2ZWY1MGY3YWE2NWIyMmQzYWY0MWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm8V5RaSJloZGAULOYT+FQCjAIEz
wPp5F+hD7oKy9WKgor6+rwkAmUbqIymJMSe9cVWPJhCXUJfxSns7RneC2Eq6PK1g
2id3TgwJLGi4hrVw5v2u5vuRp8bNEVsBh1iiwn1xBCgJe88FZiqizAnTiD0BHJ5i
djGf1u5fYeQuWkXkKTKYlVlt5iYCqW8x55CJhCosONeC0539wygE3Rf05xu26n3l
GVRHqGDFiuuNC88L+NWTzPcKXKXhDMdgFmAXppA206pAe/h1X6VhdUjmwdzMokLv
8tfbHWmJZPeUlpqoR3FpNRGyqnXuF49tKaLUN4xnsx26KoxEFfAZU/PuoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcNRNNaRioFYm71D3qmWyLTr0G3MB8GA1UdIwQY
MBaAFD5Q0d0xvHRJuswYZLAa+ZTFR+/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGxEUjNURzhkRW02ekJoa3NCcjVsTVZINzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC82ZWMzOWMtYTlkNC00YTEyLTgxMGEt
NGYwNjUwZGE1NDViLzEvUGxEUjNURzhkRW02ekJoa3NCcjVsTVZINzlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC82ZWMzOWMtYTlkNC00YTEyLTgxMGEtNGYwNjUwZGE1NDVi
LzEvUGxEUjNURzhkRW02ekJoa3NCcjVsTVZINzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaEnKbfJ
HfjTxXVb8KawmFUbw+OsU6QLlSzqXOU9GQXjaD9dIySMpznCCN+DrwwNdVbYa2qh
yzYvsrlP+tIlFf3ZpMCnO2w2l41hnj/4fHoXGW8r4VMG1gChSgCjyfbxrIQmX6F2
zvp34kO9oW5qEKsk/ddg8o8i98SbuEWO19dUmq1wX9ynO3j2OUpijZoNNcHsIUkk
90yDeuIMQwoAtoKMZ2yNQyPOAYL2mAsyFuSFdv92N3e/cuLdrSAdR5Q9XjD1wbMN
ymx16+TMXBXVQhlsN2x2AdBiCU7P1hvfMIO7Qcy9zIm1C2/iC3rP0IZg52Gy9GrU
2c0IofcobNKxHQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:00 2025 by rpki-client