Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
File:                     PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json)
Hash identifier:          YzqQ5wWxDCd/cLmtMfg/Ly7XctAsG9+1YBKFfaQ3aX8=
Subject key identifier:   7C:11:F0:9D:89:83:3C:42:AF:8D:D9:E1:A3:AA:89:6C:4E:E3:F2:14
Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
Certificate issuer:       /CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Certificate serial:       01A0E0CFE12458A32889F77FF458805C580B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
Manifest number:          0BE7
Signing time:             Sun 27 Sep 2026 03:01:54 +0000
Manifest this update:     Sun 27 Sep 2026 03:01:54 +0000
Manifest next update:     Mon 28 Sep 2026 03:01:54 +0000
Files and hashes:         1: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: pXWIALEoSihTKDuQL/Ara20tVvqIOEsfVNbzBuBZT1w=)
                          2: x5Htn4i0apxn-dIRqpj4H4063K8.roa (hash: U53VekfQqJhTiyRwDGR9cKDjHdRVk6uSQJPEe/I+ROA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 03:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:cf:e1:24:58:a3:28:89:f7:7f:f4:58:80:5c:58:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a
        Validity
            Not Before: Sep 27 03:01:54 2026 GMT
            Not After : Sep 28 03:01:54 2026 GMT
        Subject: CN=7c11f09d89833c42af8dd9e1a3aa896c4ee3f214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:48:8c:05:ab:99:92:0f:c1:5a:db:ca:20:f0:
                    f7:8f:92:73:ee:a5:a6:5f:a9:3f:da:c4:33:9a:fd:
                    75:d5:d5:07:14:2d:65:a2:7e:6c:34:51:ef:c8:aa:
                    f0:94:47:8e:22:d5:28:0e:2d:eb:1f:a0:89:75:21:
                    99:ea:9c:e2:50:49:1f:3a:4a:eb:df:9c:62:25:27:
                    b1:58:35:fb:e1:36:2b:5a:e4:38:bb:80:ae:59:aa:
                    33:a5:3e:00:4b:42:ac:4a:79:2e:64:e8:07:17:4e:
                    cb:7b:e5:d9:cc:11:38:20:96:55:18:bf:5b:ea:74:
                    a0:45:59:6e:07:2e:0c:b1:60:98:9c:05:28:4f:26:
                    0c:35:bc:3b:02:c5:3f:48:18:d5:26:32:66:d9:73:
                    fb:4b:a5:a5:ee:b9:d8:7b:61:54:d0:38:2c:26:f7:
                    e2:52:e8:9f:12:db:03:29:c2:f5:98:5e:b5:4b:a8:
                    ec:1d:e1:de:80:2b:43:e3:ee:a7:3f:8f:55:28:03:
                    7d:f4:74:84:fb:69:ea:8c:39:9d:43:24:80:66:12:
                    f4:f7:09:44:1e:42:8a:5d:17:57:20:4a:87:55:6d:
                    01:be:f2:fa:93:aa:54:9f:be:9d:d3:b9:8d:c7:42:
                    c8:02:2b:e2:47:2d:03:2d:52:17:f1:24:2f:f1:a8:
                    fd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:11:F0:9D:89:83:3C:42:AF:8D:D9:E1:A3:AA:89:6C:4E:E3:F2:14
            X509v3 Authority Key Identifier:
                keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:bf:f2:4e:7a:a1:7e:27:80:1a:89:04:b2:15:f6:0c:ee:08:
         42:78:e2:64:02:ed:ce:87:36:38:1a:88:51:18:fe:9a:2e:e5:
         3c:70:06:ca:63:de:45:ed:e3:ea:2a:a6:3d:c9:37:d4:95:85:
         c5:6a:28:eb:05:b7:25:e9:a8:75:e2:5d:52:54:cd:35:01:fc:
         6f:71:80:57:f5:a5:af:00:d9:1a:8a:fd:ab:c6:db:63:ee:dd:
         d9:67:c4:a4:0f:29:17:c2:6b:8f:ab:15:10:33:e4:df:c6:dc:
         d9:18:f9:1d:6e:32:7c:be:bb:eb:1f:0e:d7:4c:02:c4:d0:0c:
         d8:2e:db:6c:06:a2:f8:ea:ec:d2:13:27:97:db:b6:83:d1:43:
         5c:12:35:41:3c:a0:9f:8c:39:34:36:4a:0d:ab:2d:5e:68:5c:
         3d:d9:4b:f5:ec:4e:2a:27:a0:3e:f3:cc:7c:3a:52:56:44:f7:
         cf:70:f7:e6:9e:64:f9:27:78:07:6d:91:87:01:02:4b:89:0d:
         6e:65:3c:4b:69:e5:c3:f5:1f:98:69:82:ef:a1:e9:a1:86:8d:
         46:89:6e:57:fc:bb:3b:c3:2f:6d:e7:78:d5:c3:61:94:11:ad:
         e9:e9:38:77:51:33:96:fb:13:40:55:e3:4b:03:2e:f3:b0:c8:
         56:e6:1f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:01:33 2026 by rpki-client