Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File:                     PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier:          ZT2cush8K/MjQc24mCuqYV4j74whCYdOXDNbArfehtI=
Subject key identifier:   71:1C:17:A5:D2:D3:C6:45:DF:A5:96:7A:8A:0E:A4:29:F6:2C:99:55
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer:       /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial:       019E1D22948C441FF42B0DBC408BC95138B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number:          0850
Signing time:             Tue 12 May 2026 17:01:05 +0000
Manifest this update:     Tue 12 May 2026 17:01:05 +0000
Manifest next update:     Wed 13 May 2026 17:01:05 +0000
Files and hashes:         1: IcfmTS0CP6rB67CQkMANE7ZvrBE.asa (hash: qUGWiJdx4nnSTLe0cuj2ysRzudqP0tr7YNfjwXyCMjs=)
                          2: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: r19wzSJnsWWkk7JS32i07y9MX/nQPQHAUw41i8nnAGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:94:8c:44:1f:f4:2b:0d:bc:40:8b:c9:51:38:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
        Validity
            Not Before: May 12 17:01:05 2026 GMT
            Not After : May 13 17:01:05 2026 GMT
        Subject: CN=711c17a5d2d3c645dfa5967a8a0ea429f62c9955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:e3:1d:43:b3:cc:ac:5c:43:08:45:f6:d2:
                    ce:a8:fe:73:43:ee:dd:a7:c6:d3:e2:e7:fe:d3:07:
                    31:d4:ea:9e:11:7b:d1:b6:45:b6:7f:81:9f:39:29:
                    39:0e:aa:4e:0d:e8:6b:03:28:f8:06:61:ed:c0:6d:
                    49:80:c6:08:49:6a:44:a1:67:5b:5b:48:ed:c3:27:
                    3e:ef:20:6e:a7:30:78:2c:8e:70:0f:45:b8:dd:5a:
                    bb:66:64:34:47:53:b3:4d:aa:11:68:7e:6e:b4:42:
                    40:ce:82:28:7a:7f:ab:06:9a:cb:4b:13:22:68:36:
                    d5:75:2f:bc:e3:82:46:4d:96:56:2f:1f:a6:3e:6c:
                    f8:62:50:46:0b:c7:2d:7f:34:b1:8b:0c:77:d7:47:
                    be:4e:41:b4:34:88:66:df:c4:88:8f:fc:cc:06:27:
                    e5:9a:36:d5:5e:65:3e:10:3a:c6:52:f2:2d:10:55:
                    1e:88:8a:3d:d7:36:6d:fb:45:fc:ef:89:4b:0f:be:
                    dd:1a:ed:cf:bc:8f:e7:92:9f:7b:4d:3b:e3:db:55:
                    95:55:8d:55:f6:bf:cd:b4:7e:9e:0b:2e:61:4e:5f:
                    f1:7d:10:7a:6c:fc:b7:2d:08:94:bc:76:2b:d4:fc:
                    38:3c:46:49:49:37:03:6a:65:06:46:14:03:2c:f5:
                    20:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1C:17:A5:D2:D3:C6:45:DF:A5:96:7A:8A:0E:A4:29:F6:2C:99:55
            X509v3 Authority Key Identifier:
                keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1e:bb:9a:0f:b3:d9:73:cb:08:04:22:4c:36:04:77:b6:73:
         ac:14:91:36:9b:c1:4a:46:ac:fa:e3:e4:c8:1e:81:14:b3:3e:
         5f:f6:a9:b1:2e:f9:bb:f7:b4:dc:af:e5:d5:5b:1e:20:3f:7c:
         9a:c6:62:14:02:73:12:a0:a1:69:00:1e:40:d7:75:2d:9d:95:
         8e:40:d2:cf:21:09:96:f5:e8:7e:c1:4f:c9:51:9e:7d:0d:63:
         45:ae:20:2b:68:f4:a7:73:71:db:88:41:5d:96:82:15:3b:9f:
         69:d5:61:94:1a:ad:4d:72:53:bc:ad:b6:cf:40:9e:a9:73:32:
         ea:0a:23:8e:10:6b:45:e0:bb:6a:cf:73:44:75:b3:44:c3:25:
         13:12:46:07:22:8b:18:dd:ad:b5:97:60:ee:35:f3:4f:2f:bf:
         da:7b:6c:03:b0:61:7f:86:a1:1c:1c:4f:5f:65:1a:14:76:14:
         01:6b:ec:7f:c2:a8:a3:3e:5d:6e:b6:0d:20:0a:69:3c:49:c6:
         4a:78:7a:a1:46:dd:91:4f:31:37:47:d1:e9:4b:33:28:a6:9d:
         0d:26:e8:77:87:2d:76:c3:4a:65:1e:7c:01:f9:9a:23:49:2a:
         00:9d:14:48:0b:f9:61:88:3f:8f:03:23:b3:34:24:b7:ad:19:
         0f:a6:3b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:23:02 2026 by rpki-client