Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
File:                     pLm08Dm8goYBw44OrUwZWrvf_mM.mft (raw, json)
Hash identifier:          wfIkIt9MvGms4/rjUiywXN/b/JuE95aqWeB1UaeF9Yk=
Subject key identifier:   76:58:E3:74:16:BA:C5:FC:4D:BC:6B:AE:B8:0D:CE:20:4D:85:25:01
Authority key identifier: A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63
Certificate issuer:       /CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
Certificate serial:       019E2023DDADAF6BFB840E1AE602ECA2E61F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
Manifest number:          0372
Signing time:             Wed 13 May 2026 07:01:21 +0000
Manifest this update:     Wed 13 May 2026 07:01:21 +0000
Manifest next update:     Thu 14 May 2026 07:01:21 +0000
Files and hashes:         1: JdkIQygmhQqcLnZC2_hEonjSX5Q.roa (hash: S2ckYV6ssSGLHtxoF3cPRRAOhiSavGP1nolNPr7KzVg=)
                          2: pLm08Dm8goYBw44OrUwZWrvf_mM.crl (hash: PZ9+TeaQvwRXQbcykYKjFqPI3ARLp6bR6ZYEHUjD+I4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:dd:ad:af:6b:fb:84:0e:1a:e6:02:ec:a2:e6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
        Validity
            Not Before: May 13 07:01:21 2026 GMT
            Not After : May 14 07:01:21 2026 GMT
        Subject: CN=7658e37416bac5fc4dbc6baeb80dce204d852501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c9:4e:5e:37:4a:50:a9:8e:6a:62:a1:6c:52:
                    11:c0:67:3f:83:dd:36:26:29:58:eb:26:5d:2b:ca:
                    56:94:36:f5:0b:e5:48:ee:39:17:1c:70:12:6f:38:
                    81:f1:8c:ef:e3:4a:81:07:cc:75:a8:ff:f8:29:56:
                    79:c4:91:6b:2c:06:65:84:8f:16:91:34:4d:f7:1a:
                    45:39:14:dd:c7:ad:8d:52:1b:22:91:3c:81:27:06:
                    11:56:6b:38:1e:d1:28:43:cf:b8:fe:fb:0d:a6:5d:
                    3a:ea:63:fe:18:b3:46:9f:d9:ff:81:69:a2:b6:74:
                    40:8e:85:9f:67:0c:48:90:d6:d6:1d:fb:04:9c:de:
                    e5:cd:cd:98:f0:90:6b:eb:25:20:5e:1e:a8:9c:90:
                    0e:85:a1:7c:bf:dd:ad:b1:cd:37:3e:b8:f0:54:4d:
                    76:be:90:62:32:a4:e0:f2:81:04:ee:06:c2:19:27:
                    0c:6f:22:19:4d:9e:e2:a1:ed:51:81:fc:09:9b:d0:
                    b5:7d:5b:c5:54:a6:0b:94:dd:8a:cd:d5:70:6c:d2:
                    d0:a0:e5:8a:73:ee:d3:04:23:e5:9f:ca:86:62:31:
                    ce:69:d7:aa:a5:4a:5b:b6:47:fb:b8:2e:2f:cf:41:
                    a5:ea:45:b3:ae:5e:99:1f:17:d0:43:93:7d:5e:98:
                    af:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:58:E3:74:16:BA:C5:FC:4D:BC:6B:AE:B8:0D:CE:20:4D:85:25:01
            X509v3 Authority Key Identifier:
                keyid:A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:60:e6:c4:d8:80:8e:35:f6:26:ab:48:bf:aa:31:a4:31:db:
         af:97:69:93:71:66:3b:a2:49:f3:bf:6b:05:b4:5b:1c:ea:61:
         de:f1:4f:e5:43:f6:e8:72:5f:02:ae:54:53:e2:10:83:b0:eb:
         75:93:bd:57:6f:f1:0c:68:8f:de:c3:26:a3:8b:16:39:1c:e6:
         8d:d8:a1:60:b9:a0:da:7c:7d:50:aa:4f:47:55:0b:b1:ad:2e:
         5f:ca:87:98:66:66:ab:70:35:f0:90:f3:ec:f1:88:34:b8:9d:
         b5:80:2b:50:17:b3:99:86:a9:4f:41:35:65:32:62:e6:27:79:
         4d:65:74:53:2b:5b:2a:59:1a:9f:64:a9:6e:8d:4c:7b:02:2c:
         6f:30:fe:62:29:46:4b:0c:2d:29:d9:a3:94:60:4c:06:76:ee:
         51:06:15:71:c9:86:3f:2a:ff:da:d3:20:bc:07:4e:a8:f0:0a:
         3f:44:21:7c:6a:cd:fa:52:b0:4a:d2:c8:cf:0e:44:92:da:28:
         12:ef:1d:cf:2c:45:79:3e:2d:08:e9:6a:e3:00:35:f4:90:1b:
         41:55:8a:8c:5f:2a:8d:8a:a8:50:47:68:22:61:55:53:9e:f1:
         d7:53:cd:6a:c4:cc:fd:73:17:d2:cb:bc:27:3b:91:11:67:13:
         8e:e2:24:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:37:09 2026 by rpki-client