Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
File:                     _PLPcoTXoDRugvN4rYMPV8OWG20.mft (raw, json)
Hash identifier:          Bn4/4RuteDnipPk/lqsqmCq2h/XwWnRAnCPoPZe+6og=
Subject key identifier:   9C:98:BD:70:E4:66:87:A8:8F:1B:19:05:FD:93:FB:2C:DF:6C:D7:1A
Authority key identifier: FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D
Certificate issuer:       /CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
Certificate serial:       019D2A050ECE853E86E419586CCB00E313A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
Manifest number:          0B94
Signing time:             Thu 26 Mar 2026 12:01:07 +0000
Manifest this update:     Thu 26 Mar 2026 12:01:07 +0000
Manifest next update:     Fri 27 Mar 2026 12:01:07 +0000
Files and hashes:         1: S4BCPQhwpW0HcDkrQNegsGcCJLk.roa (hash: wpSj/pUY7w33xs3O0kJ9oHU/1uUgHVCcfo4sgGPqhGg=)
                          2: _PLPcoTXoDRugvN4rYMPV8OWG20.crl (hash: LyMMpmOZnXMZuEpRbt+RQ4RCJCxEBXYBoA1Iv/APM4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:05:0e:ce:85:3e:86:e4:19:58:6c:cb:00:e3:13:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
        Validity
            Not Before: Mar 26 12:01:07 2026 GMT
            Not After : Mar 27 12:01:07 2026 GMT
        Subject: CN=9c98bd70e46687a88f1b1905fd93fb2cdf6cd71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e4:64:6e:e9:ec:e6:4a:7c:69:b3:22:09:28:
                    08:13:ef:15:34:dc:60:63:02:6d:2d:48:7f:fc:8f:
                    b1:b6:43:3d:97:a7:f0:15:7b:47:dd:66:1a:7e:ec:
                    15:b9:5b:7c:4c:86:b8:cf:3a:b7:74:a7:1d:6c:fb:
                    c6:9c:7b:8d:54:33:0a:24:9e:91:2e:18:8a:1e:83:
                    8f:9c:88:11:1b:5b:7e:17:e9:72:71:36:81:4a:b6:
                    13:fb:58:6e:10:fa:91:61:88:a2:64:db:59:ce:b4:
                    02:63:7c:c8:22:de:31:1d:17:aa:08:70:73:21:2e:
                    7d:b6:9b:be:b9:88:b3:bf:97:a6:b9:9b:90:56:4f:
                    34:1c:1f:df:55:9b:f4:bd:4a:1c:a0:36:58:ca:10:
                    e6:a8:8f:54:c5:86:98:56:e0:86:b1:7a:6b:79:15:
                    77:36:42:2d:60:30:db:6a:d4:8b:e4:65:5d:f7:ac:
                    2a:c5:2e:8c:3f:c4:86:9a:8c:f5:b8:6f:4e:bc:84:
                    a9:08:35:3a:f2:69:ce:46:c5:96:74:f5:43:14:05:
                    0c:81:68:d3:e6:5f:ec:ee:ee:42:6e:ee:cf:35:2d:
                    ec:58:c7:e5:e3:a2:c7:08:bf:f4:ff:bc:24:9b:8b:
                    a0:ac:87:10:00:2e:53:3b:17:29:f0:5d:77:3b:bd:
                    f9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:98:BD:70:E4:66:87:A8:8F:1B:19:05:FD:93:FB:2C:DF:6C:D7:1A
            X509v3 Authority Key Identifier:
                keyid:FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:3d:d8:b1:e0:55:bb:f6:40:bc:38:57:45:a2:a5:ef:c4:f3:
         b4:68:05:8f:0c:66:7d:c2:bb:8c:84:26:18:9b:43:41:5f:c8:
         fe:9f:fd:ca:76:1e:89:bb:5d:55:bd:5e:6c:49:3c:ac:50:7e:
         87:11:be:f5:8d:87:79:ab:1c:82:9c:87:49:58:69:a6:0f:2e:
         02:a1:97:30:81:5c:43:22:5e:7e:c3:83:b7:cc:25:7f:a8:1e:
         7b:49:03:47:0c:d6:c2:81:ec:ae:c0:e8:ed:0b:a9:a0:8c:48:
         6a:28:ee:14:6a:8a:64:12:9b:af:0d:82:23:8a:03:5a:b6:f8:
         fe:79:f4:4e:b8:a7:8e:9c:59:bc:ae:5d:07:d1:58:80:b2:0d:
         94:7a:3c:ad:60:46:3c:4b:f1:aa:1f:94:37:4e:17:99:b6:c1:
         eb:c6:e3:e0:21:b4:7a:36:a3:21:82:19:b5:0d:48:3c:1b:03:
         59:26:ad:72:3c:e3:9e:a2:0c:c9:da:78:a9:fd:9b:99:d4:09:
         af:13:52:f3:77:46:66:d5:95:91:a8:eb:4a:2d:10:c0:87:5b:
         b7:11:9a:0b:10:21:f4:64:0d:1b:1a:5e:ec:91:49:d7:db:4a:
         e4:e7:83:e7:f5:ec:00:09:b1:32:78:fe:e0:88:7a:25:9e:35:
         a1:e7:02:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:51:59 2026 by rpki-client