Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
File:                     pl-8tOowipiwk5diXmOGY4PBbdA.mft (raw, json)
Hash identifier:          UJwDUxP/LpyPv9uthUL2EUNwPuOTPI7Mvypfb/XMcaM=
Subject key identifier:   9B:14:1A:D7:1A:22:7B:23:CF:2B:51:E0:C0:DE:FB:31:8F:72:48:77
Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
Certificate issuer:       /CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Certificate serial:       019D2816FBB767A1A70A6E96B8F375149FFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
Manifest number:          12E1
Signing time:             Thu 26 Mar 2026 03:01:27 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:27 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:27 +0000
Files and hashes:         1: Hp7ZxnJnTofRkI5yIDI7Zq99dYI.roa (hash: LDoLh+KsavvEWEveDP6iNRXft7TiHt7VWaryI9phpYQ=)
                          2: mZ4P89ydJFhQN4rY2f4PkVz254Y.roa (hash: Skt3qNUNcOa5hy1opbsaR3i/Q2rM/WSrwZEbE9IBS/I=)
                          3: nix55ZdCy-jiAbM3kDENoOmV2r4.roa (hash: fKHyNV7ttM6SvsWUs2Vebt6bVnHYHxU06lD/LcUsbsI=)
                          4: pl-8tOowipiwk5diXmOGY4PBbdA.crl (hash: 37WOog3uhqeORzh5gj91+u3A9q8uZZqDRo6CQdfgEtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:fb:b7:67:a1:a7:0a:6e:96:b8:f3:75:14:9f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0
        Validity
            Not Before: Mar 26 03:01:27 2026 GMT
            Not After : Mar 27 03:01:27 2026 GMT
        Subject: CN=9b141ad71a227b23cf2b51e0c0defb318f724877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ff:bf:45:ff:fe:c2:71:80:b0:88:a5:73:22:
                    3e:1a:1b:fd:b9:e1:7e:4d:97:b1:99:1d:f2:54:f3:
                    95:60:87:f6:94:70:e5:b6:ee:7a:2a:35:e3:73:e1:
                    1a:a3:63:29:ef:86:2f:47:07:b8:f1:d5:3a:21:5f:
                    1d:ad:c8:8a:df:39:04:dd:70:c0:78:4e:2d:2d:ff:
                    b2:9e:b2:e7:4a:05:24:9c:de:d6:6e:b2:33:a2:79:
                    23:b7:e1:62:46:52:55:78:11:fd:38:64:20:60:27:
                    ee:12:08:13:f3:0f:56:f1:4e:1b:f5:a4:28:2b:49:
                    48:a1:dd:18:cb:79:fd:e4:de:b5:0e:c1:0b:a9:25:
                    a3:e1:23:91:60:bf:5a:f1:f0:63:80:79:c0:4a:61:
                    12:b8:db:f2:19:2d:51:f4:e3:96:20:bb:40:a9:8c:
                    30:29:f0:9d:14:bc:04:7e:62:2d:65:b1:0b:e2:e6:
                    19:52:16:32:39:88:c3:ef:27:3f:c6:72:ee:e4:fc:
                    1b:c8:2a:79:03:3e:ae:83:67:2e:e5:e0:72:82:3f:
                    95:6c:64:6b:2a:c5:86:53:2d:f4:b8:dd:c8:44:34:
                    71:ba:61:21:a0:8d:ab:95:11:53:fe:f1:7a:0b:70:
                    5c:6f:5e:4c:14:e6:4f:13:bd:ae:ad:35:42:32:71:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:14:1A:D7:1A:22:7B:23:CF:2B:51:E0:C0:DE:FB:31:8F:72:48:77
            X509v3 Authority Key Identifier:
                keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:72:34:cc:42:ac:bf:cc:ac:7d:6e:ed:60:55:97:ab:30:99:
         d6:f5:30:4a:aa:54:96:b0:76:7b:8a:cd:fc:2a:fb:e5:0b:83:
         0e:75:cf:59:c3:c1:ea:a1:9c:b8:a4:00:bf:23:51:6d:a2:7b:
         61:6c:f5:3a:7b:8b:dd:19:15:c5:3f:de:ac:14:68:0f:fa:8d:
         37:0a:62:1d:b2:19:43:e7:f6:95:bf:16:e5:a9:92:40:2f:6b:
         2c:99:ff:ae:ca:7b:22:f5:3f:c1:22:45:95:49:ad:ff:9a:90:
         41:c5:e0:82:f9:3e:ee:40:69:84:c9:b6:87:1c:d2:45:d6:01:
         57:03:c7:2e:67:bd:68:c5:19:94:35:20:58:4c:3c:8c:67:e1:
         e3:c3:23:d8:69:56:15:bf:7c:2a:0e:32:28:7c:55:60:10:b8:
         fa:64:29:ae:19:d9:52:93:e2:c4:94:b7:e4:aa:b8:20:96:4c:
         04:85:9c:f6:9e:8c:1f:52:fd:67:8a:8d:98:11:6a:cb:f2:0a:
         cd:79:8c:99:65:d1:1a:eb:59:32:9d:88:54:85:5c:52:11:81:
         97:69:61:73:f1:e8:ba:2c:00:7a:a2:b1:5f:fc:fc:5c:72:c3:
         fd:14:9a:14:a5:20:ce:c5:8d:ef:58:7c:90:65:0b:89:e6:15:
         5d:2c:05:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFvu3Z6GnCm6WuPN1FJ/7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NWZiY2I0ZWEzMDhhOThiMDkzOTc2MjVlNjM4NjYzODNj
MTZkZDAwHhcNMjYwMzI2MDMwMTI3WhcNMjYwMzI3MDMwMTI3WjAzMTEwLwYDVQQD
Eyg5YjE0MWFkNzFhMjI3YjIzY2YyYjUxZTBjMGRlZmIzMThmNzI0ODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP+/Rf/+wnGAsIilcyI+Ghv9ueF+
TZexmR3yVPOVYIf2lHDltu56KjXjc+Eao2Mp74YvRwe48dU6IV8drciK3zkE3XDA
eE4tLf+ynrLnSgUknN7WbrIzonkjt+FiRlJVeBH9OGQgYCfuEggT8w9W8U4b9aQo
K0lIod0Yy3n95N61DsELqSWj4SORYL9a8fBjgHnASmESuNvyGS1R9OOWILtAqYww
KfCdFLwEfmItZbEL4uYZUhYyOYjD7yc/xnLu5PwbyCp5Az6ug2cu5eBygj+VbGRr
KsWGUy30uN3IRDRxumEhoI2rlRFT/vF6C3Bcb15MFOZPE72urTVCMnEKCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsUGtcaInsjzytR4MDe+zGPckh3MB8GA1UdIwQY
MBaAFKZfvLTqMIqYsJOXYl5jhmODwW3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUt
NjJkNDJmZTZmZDNjLzEvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUtNjJkNDJmZTZmZDNj
LzEvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnI0zEKs
v8ysfW7tYFWXqzCZ1vUwSqpUlrB2e4rN/Cr75QuDDnXPWcPB6qGcuKQAvyNRbaJ7
YWz1OnuL3RkVxT/erBRoD/qNNwpiHbIZQ+f2lb8W5amSQC9rLJn/rsp7IvU/wSJF
lUmt/5qQQcXggvk+7kBphMm2hxzSRdYBVwPHLme9aMUZlDUgWEw8jGfh48Mj2GlW
Fb98Kg4yKHxVYBC4+mQprhnZUpPixJS35Kq4IJZMBIWc9p6MH1L9Z4qNmBFqy/IK
zXmMmWXRGutZMp2IVIVcUhGBl2lhc/HouiwAeqKxX/z8XHLD/RSaFKUgzsWN71h8
kGULieYVXSwF4g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:59 2026 by rpki-client