Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
File:                     pl24nou2YPIetcSvO5rdUtV-uJ8.mft (raw, json)
Hash identifier:          t362PgWnaAUmnx70fWQH2zEqLr8l/9disjX3/QJc8TU=
Subject key identifier:   28:C6:08:0C:16:F6:2B:2C:B4:B6:03:81:4D:A8:6D:37:88:71:E6:43
Authority key identifier: A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
Certificate issuer:       /CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Certificate serial:       01A0F1C3BA4E9AD47698574EF9A592FFEBA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
Manifest number:          07E6
Signing time:             Wed 30 Sep 2026 10:02:11 +0000
Manifest this update:     Wed 30 Sep 2026 10:02:11 +0000
Manifest next update:     Thu 01 Oct 2026 10:02:11 +0000
Files and hashes:         1: NnDti1qolMnRdu6TKLIWSO85A8k.roa (hash: rZbXVayKsphGvgxDa2Rkpb2xF4uS1h5k4Mw2d6eGCNs=)
                          2: pl24nou2YPIetcSvO5rdUtV-uJ8.crl (hash: Rd8HSaHXkgU0juAgx07Bh8Vff9QApgu+eIUYZkclNUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 09:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:c3:ba:4e:9a:d4:76:98:57:4e:f9:a5:92:ff:eb:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
        Validity
            Not Before: Sep 30 10:02:11 2026 GMT
            Not After : Oct  1 10:02:11 2026 GMT
        Subject: CN=28c6080c16f62b2cb4b603814da86d378871e643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:95:30:50:6d:b1:f3:93:2a:87:50:90:88:
                    3b:5c:f8:f5:58:a8:14:0d:01:e5:d5:1f:e4:61:e5:
                    50:1f:b7:52:3d:4e:e8:2e:8d:03:d8:9b:fb:1b:fa:
                    ee:94:5d:15:f4:d0:0e:c4:a0:bd:d4:09:94:0a:18:
                    46:f2:6b:c8:b6:ee:24:e1:2e:74:90:68:c9:1d:d5:
                    76:d5:88:53:b7:e2:13:45:98:fa:5c:89:c5:d5:6c:
                    be:0e:e4:15:bf:a7:c7:a1:ea:61:12:75:05:81:61:
                    25:dd:15:8c:11:69:c7:57:12:8c:e4:b7:75:bd:e9:
                    e2:c8:c0:7a:44:67:78:81:9c:19:e9:b7:67:03:56:
                    3e:4f:d8:d2:54:85:cb:f1:4b:eb:ad:e7:bc:d6:e0:
                    34:1a:15:a5:21:04:53:61:d6:b8:9e:4e:13:98:0d:
                    04:96:be:79:e8:da:ea:06:27:c4:05:16:57:c4:fe:
                    5a:c2:f3:33:21:84:53:98:9e:07:74:bf:c2:83:a2:
                    5f:30:f8:61:bd:23:99:35:f4:bd:50:0d:76:bb:84:
                    78:53:9f:6e:ae:12:b1:0c:05:3e:bc:08:65:74:0a:
                    c2:a8:cf:31:61:e1:b9:a8:c3:10:df:8d:e8:62:f3:
                    b0:22:de:c3:e4:51:2e:e7:48:7c:da:1c:f2:52:8a:
                    59:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C6:08:0C:16:F6:2B:2C:B4:B6:03:81:4D:A8:6D:37:88:71:E6:43
            X509v3 Authority Key Identifier:
                keyid:A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:92:bd:0b:30:2f:dd:06:2d:25:a1:9f:2f:f5:99:1e:c7:04:
         66:c8:71:6f:5e:fd:85:dc:5d:12:9c:b8:68:94:62:0c:d8:5c:
         f9:f7:92:12:22:99:7b:c0:1c:88:61:3f:e3:fc:20:f3:dc:9e:
         c7:a3:6c:2a:1c:38:a2:9e:f7:4c:41:3d:99:dd:e4:0e:9c:ea:
         54:59:8e:18:cb:8e:10:f2:4c:bd:a3:0d:23:40:b0:81:5b:13:
         26:25:ed:d2:06:73:a6:c1:62:c8:47:77:c1:05:27:9f:9b:b9:
         a6:8d:4c:ff:17:48:6c:cb:7e:f7:48:0d:46:a1:e1:e0:e1:85:
         ad:45:1c:56:e7:06:90:d8:28:64:f8:ca:ec:1b:1c:26:9c:1c:
         8c:62:ea:79:6e:ce:85:02:d3:ef:ec:50:d0:3f:64:cb:57:e4:
         3e:38:46:48:97:cd:ef:d2:b9:5e:26:5e:34:3d:40:b4:7c:f5:
         96:96:6c:fe:cf:eb:5c:c4:38:fa:16:74:74:ec:7b:92:87:6f:
         09:c2:29:33:d5:f2:4a:70:26:12:72:55:34:cf:1c:51:e8:f7:
         c3:c6:c6:de:3c:43:ce:d9:13:a5:4e:df:c1:48:ad:d4:0f:f7:
         9f:24:ff:2a:d0:7b:e9:eb:e2:b0:99:a5:4d:f2:0e:6f:25:5a:
         19:5d:11:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:24:36 2026 by rpki-client