Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
File:                     plBG2F7PIB--9R6L6hxO0z-Vsmg.mft (raw, json)
Hash identifier:          nBr/6EEWgGgch8JpA7eDlYIZUBdQvg4M2KXb1S0QXJY=
Subject key identifier:   F4:E3:FE:EB:AA:C0:DA:FB:0B:FD:6F:4F:EB:09:27:DF:C9:CE:EF:22
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Certificate issuer:       /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial:       019E1EA2EC16FBDDA52D7703360E92AA5897
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
Manifest number:          1912
Signing time:             Wed 13 May 2026 00:00:54 +0000
Manifest this update:     Wed 13 May 2026 00:00:54 +0000
Manifest next update:     Thu 14 May 2026 00:00:54 +0000
Files and hashes:         1: 6TK55uf4E7Q4i5YH-VAZAMARA00.roa (hash: 3regBELSIWwrIEhCUAfpYTo6zV2ol5bwAAaJIBdpeUs=)
                          2: 9twuQnOJskBwmGMFoupLSFf36QU.roa (hash: RCDNAXL5qdPSc9rP9ORi3f5ylPM5vMAj2oc0ZzFFmFU=)
                          3: DijJx3m0K8IF-fNdq8vdHLvoRm0.roa (hash: 4C2y0rnH3pQ1yAQ2l/hvovIIpf4rpQHX/FcG3Oj/At8=)
                          4: I9QD5q-NiIfxJo1lRmq5OKOHN_Q.roa (hash: Qi/hyzakZZcN60BC7q1PWSyKEfO3DZwisLoDVX9bMS8=)
                          5: N7Z-KVIhy-3YXcEigFtIjfBgqyU.roa (hash: ua7m4lDdZT/nE5B7uMpIhoHMPNREsYJy7Na3JVYy+ho=)
                          6: VFqJkoKX_P2e5DUSDfyccrd5zpE.roa (hash: 76YyLGgvp5IErRkUR0VKzNy6NFnsufvCYMry5U68Xw8=)
                          7: plBG2F7PIB--9R6L6hxO0z-Vsmg.crl (hash: AoGMpP73vMUrO2TVeby/HJS0wmRsDVNz9rwyVazqba4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:ec:16:fb:dd:a5:2d:77:03:36:0e:92:aa:58:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
        Validity
            Not Before: May 13 00:00:54 2026 GMT
            Not After : May 14 00:00:54 2026 GMT
        Subject: CN=f4e3feebaac0dafb0bfd6f4feb0927dfc9ceef22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6e:68:9c:d2:46:a8:08:f5:f6:4e:89:56:dc:
                    55:e0:fe:c6:52:1a:cf:0b:3b:04:e1:ae:75:0d:f0:
                    42:72:52:2f:87:7c:fa:de:8d:a7:55:9a:c2:08:a8:
                    64:f8:cf:80:dc:1e:b2:25:e2:3d:90:c9:a8:9f:96:
                    ae:6d:2e:91:62:c9:a5:1a:f9:29:5e:12:02:cd:4e:
                    9e:ae:7b:ed:3d:df:12:cc:59:be:18:6c:c2:22:e4:
                    2f:d0:e8:a7:b2:21:30:88:40:d8:c2:c9:b1:0e:bb:
                    ab:de:3a:7c:01:06:7f:f0:97:57:bb:ba:64:31:64:
                    d6:dc:e5:ae:5d:b9:af:c5:23:ef:0d:80:5d:ca:92:
                    1d:fc:87:bd:7d:f2:46:87:01:00:8f:90:20:12:e9:
                    68:6a:13:62:4c:1e:58:29:0b:2b:ba:98:82:d6:a0:
                    7c:da:16:c6:2e:d0:d7:fe:67:fc:01:c1:21:19:60:
                    b8:e8:fd:06:4b:ba:25:8d:09:38:06:46:60:65:47:
                    1c:ef:50:2d:79:ef:94:3f:98:99:14:71:31:42:aa:
                    75:83:e9:13:9d:ea:99:50:a6:1f:39:68:7c:ec:c3:
                    68:06:18:5d:f3:5b:fa:48:6e:d5:1a:45:81:29:52:
                    71:fc:14:a8:fb:02:2e:42:0f:d6:6f:55:21:62:bb:
                    8e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E3:FE:EB:AA:C0:DA:FB:0B:FD:6F:4F:EB:09:27:DF:C9:CE:EF:22
            X509v3 Authority Key Identifier:
                keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:97:dc:35:d2:60:aa:4e:f6:04:69:d1:be:f0:db:af:1f:ca:
         32:6d:c6:25:ab:6d:7d:36:04:97:95:e3:60:38:d9:0c:b5:e9:
         70:5e:0b:7b:0d:b9:a8:be:12:46:5b:10:6e:7f:13:70:70:88:
         14:f4:4c:e3:e5:d5:2a:f0:01:8f:34:a1:de:6f:df:cf:c0:53:
         0f:45:64:26:9c:18:2b:c0:c6:9e:36:be:85:f8:75:b7:10:25:
         ba:1c:70:26:d2:e2:7d:44:1c:ae:a1:bc:38:3c:72:b6:87:96:
         b5:b8:b6:28:fa:35:ec:a4:0d:8c:76:6e:5f:67:cb:e0:d5:fb:
         56:c6:d0:7b:e1:58:75:78:fc:09:22:fa:ed:7d:fd:9b:81:c8:
         37:e6:a2:d8:c1:69:a9:d4:a3:af:54:5f:60:f3:11:c8:d6:71:
         96:83:ab:79:9d:b6:59:2b:fd:c9:dc:d2:0a:ed:67:1c:ae:06:
         b3:60:e0:7d:d3:76:80:44:59:d0:4e:01:de:a3:07:8e:bc:71:
         b4:6f:ed:60:e8:81:30:1c:a5:32:93:2b:93:94:34:d1:f3:b1:
         c4:7f:c7:aa:5a:da:ae:a6:d4:01:08:49:66:2c:48:38:8e:83:
         b2:27:95:51:3a:02:53:d3:b6:2c:cf:ff:f6:f0:af:5f:b0:d5:
         00:c9:b7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:46 2026 by rpki-client