Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File:                     PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier:          R46QaATWLqDcbEHHKF6c7G6wFn+VP5hNKrrxMgWebNc=
Subject key identifier:   D3:BC:45:63:57:89:47:66:B4:A1:76:91:16:60:7A:9D:E2:77:DD:A1
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer:       /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial:       01A0D4CB6297C35AC5FCA0D1A59A7BD9317C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number:          09BA
Signing time:             Thu 24 Sep 2026 19:01:33 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:33 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:33 +0000
Files and hashes:         1: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: rYwiN2V5Ajh8NeROU0k5m8biVBuSekkcfl46y/uR5Dc=)
                          2: YKcDKEWIMlg76GTNhpBhJgfgseg.asa (hash: QXQfDgm1NSd802AZFlLWGYSREWy9tsWnBFqvrA0d4ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:62:97:c3:5a:c5:fc:a0:d1:a5:9a:7b:d9:31:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
        Validity
            Not Before: Sep 24 19:01:33 2026 GMT
            Not After : Sep 25 19:01:33 2026 GMT
        Subject: CN=d3bc456357894766b4a1769116607a9de277dda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c0:fb:12:72:c3:62:66:fd:46:1d:fb:6b:83:
                    04:0c:75:90:9f:54:03:ee:55:ba:ce:ed:69:f2:7f:
                    8b:e8:2f:28:7e:27:e4:41:a9:26:b3:83:1b:40:e3:
                    91:83:d6:f9:89:6b:66:39:4f:69:69:bb:cd:a8:6e:
                    2d:0a:90:eb:b9:2f:26:34:64:7a:24:83:8e:c1:31:
                    a7:01:a9:a3:6b:73:2c:b5:f0:ee:40:7e:f6:13:26:
                    67:25:74:e1:3f:73:6b:ae:35:cf:3f:a4:18:cc:c4:
                    e7:49:4b:49:af:a5:c4:f3:9b:ee:c5:1b:5a:f6:d2:
                    9b:50:cb:26:90:40:25:27:26:bc:e1:d0:e5:19:a2:
                    9e:a9:7f:74:03:16:84:c9:a3:f4:4a:d3:c2:db:4b:
                    4e:26:b7:93:af:7d:29:24:f2:6c:d6:d7:11:87:00:
                    48:9c:f8:69:16:af:a8:a2:89:d9:bf:1e:5b:af:2f:
                    dd:f3:c1:fd:e0:d3:09:d2:a3:26:70:2e:df:55:aa:
                    cd:43:75:97:e8:06:10:42:06:f0:e2:bf:b5:b6:ff:
                    1f:f6:49:fa:45:a2:a4:35:63:ec:6f:af:e9:42:b4:
                    7b:6c:66:db:2d:d8:d8:03:42:41:54:42:49:24:c7:
                    c5:01:75:74:28:f8:93:97:f4:30:4f:87:d5:61:27:
                    99:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BC:45:63:57:89:47:66:B4:A1:76:91:16:60:7A:9D:E2:77:DD:A1
            X509v3 Authority Key Identifier:
                keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f4:76:d1:5d:8f:07:43:a5:90:5d:f9:93:0d:c0:db:a6:5e:
         36:1f:05:07:5f:b3:bc:9e:1f:df:8e:15:35:e3:d2:d0:58:0b:
         c3:64:82:c4:87:fa:9e:dc:91:8e:df:63:1b:b1:f7:46:5f:a9:
         b7:26:3a:d1:41:07:2c:a6:e6:cf:05:cc:10:08:b6:1c:dd:8f:
         98:3c:45:80:cc:bf:ec:ba:69:8c:4b:49:c1:dd:32:c7:1f:b7:
         53:da:fb:ff:ca:7c:04:a8:4c:66:ae:32:e4:09:c7:a7:ab:51:
         09:c2:b0:8e:c1:06:ed:4d:09:f5:bd:7a:10:a9:80:e3:66:0d:
         a9:1f:cb:7f:e2:c1:06:e4:2d:03:85:af:33:7a:ee:2b:67:53:
         5d:89:6c:16:50:c2:d1:0b:dd:a8:2d:93:bd:94:87:8e:a7:ac:
         5c:ff:32:1f:2a:ee:04:9a:c8:db:d8:27:80:54:60:1f:32:38:
         ee:74:43:cd:6e:b2:77:9b:93:81:a7:b0:8a:f9:7b:e1:8a:c9:
         ec:61:15:9c:dd:e9:35:9f:ae:a5:68:cf:a8:f4:0b:47:98:1e:
         59:5d:8b:47:ae:31:c3:ed:db:58:68:4f:8b:bf:a0:5d:90:15:
         51:2e:2b:d4:40:47:09:9c:51:8d:60:d2:aa:05:d4:30:e4:c0:
         a7:9c:d8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:16:20 2026 by rpki-client