Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft
File:                     pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft (raw, json)
Hash identifier:          tH6Vp+Ara7yt9AVxKHyT20h/lEtpcnFAzA4ZdahWWHs=
Subject key identifier:   30:DF:EF:6D:37:4F:EE:9E:6B:93:95:1A:50:B4:93:2C:5E:8C:08:0A
Authority key identifier: A6:5F:99:56:03:66:3A:56:94:30:CC:C6:17:28:7E:91:9D:F1:44:A0
Certificate issuer:       /CN=a65f995603663a569430ccc617287e919df144a0
Certificate serial:       019D281675D380185C895B409B6E293A96D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft
Manifest number:          13A6
Signing time:             Thu 26 Mar 2026 03:00:53 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:53 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:53 +0000
Files and hashes:         1: abItNd0sq-4DEd22eQm74Y9rdRE.roa (hash: 5+BQiEWHO+5vi6bSPzol7YpnZ/xGCGXNwrOi+2aEcqM=)
                          2: pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.crl (hash: N1nTz6Ngsd4weqncwifrjJYg1cbqt/xWRl4Uv+L1THA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:75:d3:80:18:5c:89:5b:40:9b:6e:29:3a:96:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65f995603663a569430ccc617287e919df144a0
        Validity
            Not Before: Mar 26 03:00:53 2026 GMT
            Not After : Mar 27 03:00:53 2026 GMT
        Subject: CN=30dfef6d374fee9e6b93951a50b4932c5e8c080a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b2:c6:8c:45:0c:80:fc:ab:76:ec:cb:31:3c:
                    84:2b:4a:51:83:b1:dd:eb:38:ba:a4:b8:02:99:f6:
                    e0:9e:46:d5:2a:64:b2:49:6b:64:d2:8f:f2:dc:52:
                    38:2d:31:c2:2d:d3:0f:a9:1b:9d:0d:38:42:43:96:
                    2a:e1:2e:10:bf:0d:f0:30:0b:12:4a:d3:36:84:6a:
                    66:a0:17:78:d4:25:06:63:f4:ae:c4:f7:b9:e4:69:
                    ae:7c:96:57:97:18:df:e8:ba:93:96:e5:d8:e2:3f:
                    02:33:c9:35:b3:af:c6:5f:00:7d:93:d8:75:f6:8f:
                    50:57:38:fc:0e:13:0a:5c:f6:27:47:25:d1:57:87:
                    2d:6e:6f:ab:01:46:b9:fb:2a:26:55:d4:e6:93:42:
                    26:a1:7e:8e:bf:74:82:41:89:8d:fa:d3:52:ae:f7:
                    e7:46:97:fe:ed:1d:ef:d2:4d:45:c6:f8:3f:aa:0e:
                    2e:d3:53:f2:ee:8e:f0:fc:54:a8:4a:7c:0d:b9:c7:
                    7c:1d:10:48:74:32:d7:04:da:e9:72:53:d1:c2:98:
                    f5:32:88:1e:45:71:57:25:eb:e3:63:3c:e5:42:10:
                    70:a0:74:6e:d5:94:8c:e2:a2:f9:93:89:8b:9c:d6:
                    b4:56:f5:9d:7a:e8:e5:f0:83:9a:21:45:18:d2:19:
                    75:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DF:EF:6D:37:4F:EE:9E:6B:93:95:1A:50:B4:93:2C:5E:8C:08:0A
            X509v3 Authority Key Identifier:
                keyid:A6:5F:99:56:03:66:3A:56:94:30:CC:C6:17:28:7E:91:9D:F1:44:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:06:28:45:e8:ee:3f:d3:d9:61:33:32:83:6f:4b:65:28:72:
         24:e3:d7:58:33:56:c8:70:7d:cb:84:fc:fd:6f:0a:a2:88:f5:
         51:26:63:c1:5b:5f:92:47:3c:a3:ad:96:4b:06:e1:bd:cc:f8:
         d8:f8:4b:af:69:f3:b7:a2:4a:73:d5:19:3c:1e:4f:f7:52:4b:
         f5:5d:9f:c0:7c:db:49:1f:dc:c5:6e:04:78:af:82:cd:73:0d:
         51:26:f5:46:c6:af:59:22:7c:32:e5:87:54:39:9c:78:3d:5e:
         b5:83:9e:6c:4c:0a:ab:17:27:9a:87:1d:fa:8e:a8:ab:34:a4:
         fe:89:8b:f5:60:b8:c7:9e:c7:bc:30:97:6c:96:2b:c5:be:d7:
         ca:61:51:fe:15:f1:ff:36:95:8b:1e:53:06:2f:39:a5:7b:7d:
         ba:2a:91:65:73:88:7d:bb:9e:24:f9:64:a3:3d:17:22:c8:d7:
         d4:a5:9c:ea:44:a4:c9:e2:00:c1:0c:a1:56:56:2c:6c:d9:5e:
         27:d2:8d:72:c0:77:ee:cd:72:00:a1:4e:0d:c3:82:93:ea:16:
         bd:ed:fb:71:ea:c7:64:5e:e0:9f:5e:9c:cf:2d:c3:23:8a:29:
         89:60:10:c6:06:1f:5e:29:70:2e:bb:7a:48:df:a0:73:80:a0:
         7f:23:6e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:26:50 2026 by rpki-client