Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
File:                     plBG2F7PIB--9R6L6hxO0z-Vsmg.mft (raw, json)
Hash identifier:          y21T1CmX8ltHbW+1fusChW3PVvyh3Q32GB9JJ3vZzcQ=
Subject key identifier:   9A:D6:70:C1:75:63:AC:1A:D9:09:4B:9E:65:24:26:DF:5F:AF:EB:6A
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Certificate issuer:       /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial:       01A0DD971DF528FA26309628AB83EC369472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
Manifest number:          1A7E
Signing time:             Sat 26 Sep 2026 12:01:03 +0000
Manifest this update:     Sat 26 Sep 2026 12:01:03 +0000
Manifest next update:     Sun 27 Sep 2026 12:01:03 +0000
Files and hashes:         1: 6TK55uf4E7Q4i5YH-VAZAMARA00.roa (hash: 3regBELSIWwrIEhCUAfpYTo6zV2ol5bwAAaJIBdpeUs=)
                          2: 9twuQnOJskBwmGMFoupLSFf36QU.roa (hash: RCDNAXL5qdPSc9rP9ORi3f5ylPM5vMAj2oc0ZzFFmFU=)
                          3: DijJx3m0K8IF-fNdq8vdHLvoRm0.roa (hash: 4C2y0rnH3pQ1yAQ2l/hvovIIpf4rpQHX/FcG3Oj/At8=)
                          4: I9QD5q-NiIfxJo1lRmq5OKOHN_Q.roa (hash: Qi/hyzakZZcN60BC7q1PWSyKEfO3DZwisLoDVX9bMS8=)
                          5: N7Z-KVIhy-3YXcEigFtIjfBgqyU.roa (hash: ua7m4lDdZT/nE5B7uMpIhoHMPNREsYJy7Na3JVYy+ho=)
                          6: VFqJkoKX_P2e5DUSDfyccrd5zpE.roa (hash: 76YyLGgvp5IErRkUR0VKzNy6NFnsufvCYMry5U68Xw8=)
                          7: plBG2F7PIB--9R6L6hxO0z-Vsmg.crl (hash: msATcota1TPNQwQAhIRmqPsww7J3m0wis20TbDv7OhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:97:1d:f5:28:fa:26:30:96:28:ab:83:ec:36:94:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
        Validity
            Not Before: Sep 26 12:01:03 2026 GMT
            Not After : Sep 27 12:01:03 2026 GMT
        Subject: CN=9ad670c17563ac1ad9094b9e652426df5fafeb6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:6b:8b:53:51:78:60:7a:27:8c:6a:83:f5:
                    06:ac:84:38:d3:bf:01:0d:94:d3:01:96:14:14:0f:
                    2f:63:61:55:fc:4a:88:12:e5:f9:6c:d0:f6:c5:9b:
                    a3:d8:be:4d:67:cd:a8:18:57:39:d6:32:64:de:33:
                    48:68:13:32:8a:be:d2:e9:14:35:14:73:46:53:65:
                    60:e7:ba:41:ba:40:f9:f1:77:5f:84:29:0a:20:2e:
                    1d:c1:ea:1a:3d:56:b4:ea:76:8e:d4:50:49:1c:8f:
                    d7:07:d4:6e:db:59:76:47:f8:90:05:71:bf:66:3b:
                    34:49:01:68:26:ce:6d:fb:1d:9c:50:a7:ae:a1:44:
                    87:e3:16:2e:a8:d2:3e:16:4d:9f:d3:a5:8f:a0:da:
                    9b:b9:6a:a6:ee:55:3d:eb:c6:bb:ef:6f:c9:8a:28:
                    5d:a7:fd:15:29:40:16:da:e6:9c:6f:d9:4e:30:a7:
                    f3:07:49:8c:f4:fc:13:8a:bb:29:79:38:d4:82:f7:
                    ee:79:3d:a6:fb:50:69:63:d1:78:9b:85:65:b3:70:
                    68:e3:9f:92:b0:c6:f6:9b:0a:b0:8c:89:8a:66:98:
                    f6:ac:84:4f:d5:ea:52:d8:c7:1c:45:de:f1:00:a3:
                    67:ac:aa:f1:44:84:5b:7c:c4:09:02:c8:1b:fe:89:
                    3d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D6:70:C1:75:63:AC:1A:D9:09:4B:9E:65:24:26:DF:5F:AF:EB:6A
            X509v3 Authority Key Identifier:
                keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:75:62:a7:85:c5:43:0b:9e:0a:38:a5:10:2c:16:c9:a9:e5:
         53:c8:4f:c0:9d:68:a2:2b:d0:17:1d:a8:22:d1:c8:fd:60:a2:
         7e:c1:a9:0c:03:08:58:82:cd:fc:37:a4:5e:64:bf:cd:c5:65:
         eb:0c:e0:ff:a6:00:b9:25:9e:c0:93:3c:a5:f1:16:06:08:da:
         1c:ae:67:fb:0c:ea:e2:a1:9e:1b:aa:c1:c1:db:db:5f:bd:8b:
         1c:09:75:ce:25:ab:3b:f4:f7:ba:97:83:17:1c:ce:58:77:be:
         e2:66:04:53:8a:9e:9a:e2:92:eb:99:50:43:e7:92:ba:d6:87:
         9b:84:91:86:3c:e3:0a:89:de:a4:ad:0e:07:ff:b1:fd:f2:1b:
         80:73:d0:fa:68:bd:5a:d9:b4:0e:44:c4:cb:64:ab:df:0c:3d:
         2f:f5:f4:b6:26:b3:f3:e5:0c:8c:fb:bb:70:51:14:77:94:88:
         69:6d:4b:7a:65:50:e2:05:fc:80:9c:e7:0a:bc:2f:26:37:0c:
         3d:95:f2:6b:fc:4a:d5:80:aa:5f:32:8f:0e:24:b2:2a:45:2e:
         c3:31:57:63:6a:e9:0d:26:c0:62:2e:0d:60:1f:73:17:88:4a:
         15:f9:1f:d3:2b:09:93:e1:21:36:01:8a:8b:7b:1f:9f:c2:39:
         f5:0d:83:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:28:49 2026 by rpki-client