$ rpki-client -vvf rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft File: 576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft (raw, json) Hash identifier: lGWA/bsB7IkVscoit1Rdvgk3fhg+adA/MaIrUCeS2+o= Subject key identifier: D3:D3:52:01:3F:49:AD:C1:76:B8:D9:E8:85:72:8A:11:9B:68:7A:65 Authority key identifier: 57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9 Certificate issuer: /CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9 Certificate serial: 33D7DE83F0B792B60CFED095D7A9816474533ED6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer Subject info access: rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft Manifest number: 4A Signing time: Sun 02 Nov 2025 20:29:29 +0000 Manifest this update: Sun 02 Nov 2025 20:24:29 +0000 Manifest next update: Tue 04 Nov 2025 09:40:29 +0000 Files and hashes: 1: 326131343a373538333a663830303a3a2f34382d3438203d3e203233343730.roa (hash: 0Ri2jrMFUbhMEHInPUFlKtKXVbjhL1Bc4fW5jxlgegE=) 2: 576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl (hash: fqfZ60tbq36qqQbGdlthjpaNXiywZ+f0VJ02fR8P10c=) Validation: OK Signature path: rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 03 Nov 2025 15:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d7:de:83:f0:b7:92:b6:0c:fe:d0:95:d7:a9:81:64:74:53:3e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9 Validity Not Before: Nov 2 20:24:29 2025 GMT Not After : Nov 4 09:40:29 2025 GMT Subject: CN=D3D352013F49ADC176B8D9E885728A119B687A65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:77:9a:d1:5e:56:e5:2d:dd:ad:07:f7:21:b1: d8:cf:70:53:91:21:7b:5f:30:87:1f:b6:92:ab:bc: 2a:25:55:12:58:76:3f:de:ac:fd:c1:69:73:f0:44: 68:0e:cd:d6:e8:ff:eb:04:68:03:4b:5b:a4:31:cf: dd:31:4a:e9:df:8e:f7:0d:8f:0b:7e:2b:bc:21:57: 74:13:a5:20:8c:20:3f:de:3d:4e:46:94:f4:28:b8: da:14:66:53:0c:75:91:65:4c:40:3e:bb:90:27:76: da:9d:49:ad:de:96:b1:d0:f0:a5:4b:f8:bf:85:55: 57:a9:51:a6:d7:f8:56:41:1e:58:d4:83:79:d4:b9: 93:a3:de:9a:50:df:a4:50:f9:ac:aa:5d:8b:f0:9f: 2c:48:02:50:08:1e:38:2c:df:54:bf:b6:88:b5:e7: a9:85:e8:2e:18:3e:a0:93:6a:0c:7f:7a:f6:a4:70: ac:c9:e9:ed:50:90:39:f0:de:fd:00:13:e2:aa:20: af:79:4b:f0:3b:79:04:e0:97:8e:32:93:64:a6:7b: a6:79:a8:50:27:bd:07:51:c3:86:46:4a:f3:85:ad: f7:8e:3a:7a:cb:9c:44:39:79:b1:9d:ca:ba:fe:d0: 71:60:3a:b2:6c:13:89:eb:63:76:95:2a:37:e6:d5: 89:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D3:52:01:3F:49:AD:C1:76:B8:D9:E8:85:72:8A:11:9B:68:7A:65 X509v3 Authority Key Identifier: keyid:57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer Subject Information Access: Signed Object - URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:3a:d2:10:e6:31:fd:b9:4c:9b:f2:55:21:a7:ad:d8:ab:38: e2:60:06:08:df:f0:58:a0:0d:0d:92:af:37:e7:fc:14:a7:33: de:29:dc:9d:f7:02:20:51:40:b2:a0:bf:44:54:6b:27:0a:4b: 23:cc:38:69:31:69:9a:d2:93:b7:69:9f:14:6f:31:6c:c2:db: 47:8e:be:c2:ff:c8:94:7f:71:a6:53:89:95:57:42:aa:29:65: c0:86:e4:37:66:50:de:63:ee:64:63:53:23:02:5a:39:ee:12: b2:27:4b:4f:a8:db:a9:ec:95:58:ac:67:23:ff:52:f0:d7:50: f6:5b:9e:1c:0f:6b:6c:46:64:43:7a:4e:f3:a5:a8:67:49:5b: 49:3f:0e:89:a0:c2:a8:f3:b5:51:00:1e:5a:1c:a5:dc:0a:40: 12:2b:dc:4f:10:18:f6:4c:6a:f1:4c:00:5b:c9:59:fe:90:3b: a5:a9:ad:f4:4c:8b:81:b9:44:92:33:36:a5:be:bb:de:5e:50: eb:59:22:72:74:f9:45:fa:dc:4b:e0:a0:0e:bc:1e:37:5f:0f: 16:15:83:2c:78:7f:27:d0:2e:3a:e1:96:ff:f4:f9:7c:a4:5e: da:a4:a0:98:6e:f1:a4:1e:38:18:67:58:ef:a6:3f:e9:38:67: 52:d4:5d:ea -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUM9feg/C3krYM/tCV16mBZHRTPtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc2QjFEMzBDN0Q2MTJGRTgyRDJFMkM1QTc4RUQ0MTY1 NDgwRjNEOTAeFw0yNTExMDIyMDI0MjlaFw0yNTExMDQwOTQwMjlaMDMxMTAvBgNV BAMTKEQzRDM1MjAxM0Y0OUFEQzE3NkI4RDlFODg1NzI4QTExOUI2ODdBNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKd5rRXlblLd2tB/chsdjPcFOR IXtfMIcftpKrvColVRJYdj/erP3BaXPwRGgOzdbo/+sEaANLW6Qxz90xSunfjvcN jwt+K7whV3QTpSCMID/ePU5GlPQouNoUZlMMdZFlTEA+u5AndtqdSa3elrHQ8KVL +L+FVVepUabX+FZBHljUg3nUuZOj3ppQ36RQ+ayqXYvwnyxIAlAIHjgs31S/toi1 56mF6C4YPqCTagx/evakcKzJ6e1QkDnw3v0AE+KqIK95S/A7eQTgl44yk2Sme6Z5 qFAnvQdRw4ZGSvOFrfeOOnrLnEQ5ebGdyrr+0HFgOrJsE4nrY3aVKjfm1Yl1AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU09NSAT9JrcF2uNnohXKKEZtoemUwHwYDVR0j BBgwFoAUV2sdMMfWEv6C0uLFp47UFlSA89kwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcmtpLnBsYXNtYW5vZGVzLmNvbS9yZXBvL3Bs YXNtYS1jYXN2LzEvNTc2QjFEMzBDN0Q2MTJGRTgyRDJFMkM1QTc4RUQ0MTY1NDgw RjNEOS5jcmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1h M2ZlLTQyOTktYjA3OS0zMDllZDk3ZjM4MjQvMC81NzZCMUQzMEM3RDYxMkZFODJE MkUyQzVBNzhFRDQxNjU0ODBGM0Q5LmNlcjB3BggrBgEFBQcBCwRrMGkwZwYIKwYB BQUHMAuGW3JzeW5jOi8vcmtpLnBsYXNtYW5vZGVzLmNvbS9yZXBvL3BsYXNtYS1j YXN2LzEvNTc2QjFEMzBDN0Q2MTJGRTgyRDJFMkM1QTc4RUQ0MTY1NDgwRjNEOS5t ZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw BgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcN AQELBQADggEBAKA60hDmMf25TJvyVSGnrdirOOJgBgjf8FigDQ2Srzfn/BSnM94p 3J33AiBRQLKgv0RUaycKSyPMOGkxaZrSk7dpnxRvMWzC20eOvsL/yJR/caZTiZVX QqopZcCG5DdmUN5j7mRjUyMCWjnuErInS0+o26nslVisZyP/UvDXUPZbnhwPa2xG ZEN6TvOlqGdJW0k/DomgwqjztVEAHlocpdwKQBIr3E8QGPZMavFMAFvJWf6QO6Wp rfRMi4G5RJIzNqW+u95eUOtZInJ0+UX63EvgoA68HjdfDxYVgyx4fyfQLjrhlv/0 +XykXtqkoJhu8aQeOBhnWO+mP+k4Z1LUXeo= -----END CERTIFICATE-----Generated at Mon Nov 3 00:11:36 2025 by rpki-client