$ rpki-client -vvf rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft File: 576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft (raw, json) Hash identifier: 0Jdmy0q88CCC06q6ExYDgJub7o3+Aqz979WHkGIG064= Subject key identifier: 3B:F7:7D:9A:72:D1:4C:3F:11:17:FB:30:8D:3A:DA:56:FC:CD:7F:DD Authority key identifier: 57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9 Certificate issuer: /CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9 Certificate serial: 0F7A684E5B1CB6391C51089CA6CF8F755E229918 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer Subject info access: rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft Manifest number: 011A Signing time: Sun 01 Mar 2026 18:33:48 +0000 Manifest this update: Sun 01 Mar 2026 18:28:48 +0000 Manifest next update: Tue 03 Mar 2026 08:39:48 +0000 Files and hashes: 1: 326131343a373538333a663830303a3a2f34382d3438203d3e20323032363733.roa (hash: IkICwXXmYIH53Eafwhe+5p63oc0eGBQuzy6z5GFeHKE=) 2: 326131343a373538333a663830313a3a2f34382d3438203d3e203233343730.roa (hash: JQi1MKcddIN5XBB9K3LXLSYpjxGEowzisfQm4qYnGqA=) 3: 576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl (hash: B8TXeIqKb2QHpw+yB9HWvZOZkSrXjDH5PX7wLxMNxM8=) Validation: OK Signature path: rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:7a:68:4e:5b:1c:b6:39:1c:51:08:9c:a6:cf:8f:75:5e:22:99:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9 Validity Not Before: Mar 1 18:28:48 2026 GMT Not After : Mar 3 08:39:48 2026 GMT Subject: CN=3BF77D9A72D14C3F1117FB308D3ADA56FCCD7FDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2d:87:b4:ab:36:b3:dc:ea:cb:d0:50:0d:58: 5b:5d:83:27:e8:07:70:1d:08:77:40:15:d3:a8:75: 76:e0:29:e2:bc:2a:47:79:7e:7c:70:0e:3d:a4:18: 2c:91:51:20:56:a9:fd:1e:80:a1:98:49:87:c7:4d: c4:e1:48:33:df:93:c9:ef:97:ae:9c:c0:04:a6:e9: 83:d7:cf:2d:eb:23:d5:a1:9b:40:7b:20:2d:5c:88: 48:59:7c:f8:de:0c:0a:1e:7a:1e:ae:a8:16:82:e5: 4a:27:2f:a7:c7:f3:91:5e:8b:7e:41:04:ee:10:f7: d1:09:7e:f6:ae:d4:cc:a7:43:54:48:56:1d:72:db: 93:61:b5:db:48:cf:ae:7b:81:9c:9a:44:34:0f:8d: 9c:72:4f:9e:1f:39:f8:fa:4a:71:bf:82:5c:a2:a7: 5f:11:8d:39:ab:ab:b1:2b:92:1e:ed:3a:c8:5c:a7: 34:c9:74:87:64:ab:2d:b5:be:c0:fa:1d:c8:e6:0d: fd:8b:53:71:f8:b6:c1:c8:5e:03:49:09:7d:89:de: 54:4d:82:12:31:f1:21:40:bb:ca:aa:47:cc:af:27: 45:52:3e:27:ac:42:0b:8c:9a:1f:31:0b:a0:82:86: 5e:32:7a:1b:9e:4d:de:60:bc:23:3b:0f:cc:4f:9d: d3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F7:7D:9A:72:D1:4C:3F:11:17:FB:30:8D:3A:DA:56:FC:CD:7F:DD X509v3 Authority Key Identifier: keyid:57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer Subject Information Access: Signed Object - URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b0:50:64:09:65:b5:60:7c:03:b1:45:ca:54:00:dc:4f:c3: 95:78:f9:11:49:12:72:a2:1d:e9:0c:f8:93:09:d4:68:f0:63: 7e:8d:23:06:44:e3:29:ea:0e:c5:9c:ab:cf:8a:17:7e:cf:ff: a3:b8:9e:58:e9:5f:61:0a:6a:37:96:af:93:12:4d:3f:9b:59: fd:47:41:f6:93:60:52:7b:dd:36:45:03:31:49:00:20:5b:60: bb:c8:df:ae:54:c8:e4:92:1b:04:0c:38:7d:a0:e9:99:fd:9b: 14:f0:57:7f:31:2f:a6:c9:65:88:ef:4e:47:93:d7:57:50:a5: e2:c4:32:15:52:1f:e1:c9:87:f3:5c:75:35:30:e4:1b:88:d4: 50:4a:04:96:ff:2b:a4:c7:64:c9:62:fd:b3:21:22:e6:22:67: 97:c1:d8:9c:1b:f3:d4:b7:bd:d7:b6:1b:e3:b8:7c:87:bc:5b: 9d:7a:23:fa:93:c7:ba:1b:87:b9:a6:39:ca:ad:d8:7c:7c:ad: be:8b:40:b1:59:4c:ac:4d:dd:1e:b8:05:1a:8e:16:eb:2b:7d: c6:b3:0d:99:cf:89:e1:77:45:52:73:1f:63:1e:37:82:b6:3a: b9:a5:30:de:be:2f:30:69:a1:6e:19:ad:b4:c3:3f:f0:9c:c2: 87:85:c5:63 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUD3poTlsctjkcUQicps+PdV4imRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc2QjFEMzBDN0Q2MTJGRTgyRDJFMkM1QTc4RUQ0MTY1 NDgwRjNEOTAeFw0yNjAzMDExODI4NDhaFw0yNjAzMDMwODM5NDhaMDMxMTAvBgNV BAMTKDNCRjc3RDlBNzJEMTRDM0YxMTE3RkIzMDhEM0FEQTU2RkNDRDdGREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZLYe0qzaz3OrL0FANWFtdgyfo B3AdCHdAFdOodXbgKeK8Kkd5fnxwDj2kGCyRUSBWqf0egKGYSYfHTcThSDPfk8nv l66cwASm6YPXzy3rI9Whm0B7IC1ciEhZfPjeDAoeeh6uqBaC5UonL6fH85Fei35B BO4Q99EJfvau1MynQ1RIVh1y25NhtdtIz657gZyaRDQPjZxyT54fOfj6SnG/glyi p18RjTmrq7Erkh7tOshcpzTJdIdkqy21vsD6HcjmDf2LU3H4tsHIXgNJCX2J3lRN ghIx8SFAu8qqR8yvJ0VSPiesQguMmh8xC6CChl4yehueTd5gvCM7D8xPndM7AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUO/d9mnLRTD8RF/swjTraVvzNf90wHwYDVR0j BBgwFoAUV2sdMMfWEv6C0uLFp47UFlSA89kwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcmtpLnBsYXNtYW5vZGVzLmNvbS9yZXBvL3Bs YXNtYS1jYXN2LzEvNTc2QjFEMzBDN0Q2MTJGRTgyRDJFMkM1QTc4RUQ0MTY1NDgw RjNEOS5jcmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1h M2ZlLTQyOTktYjA3OS0zMDllZDk3ZjM4MjQvMC81NzZCMUQzMEM3RDYxMkZFODJE MkUyQzVBNzhFRDQxNjU0ODBGM0Q5LmNlcjB3BggrBgEFBQcBCwRrMGkwZwYIKwYB BQUHMAuGW3JzeW5jOi8vcmtpLnBsYXNtYW5vZGVzLmNvbS9yZXBvL3BsYXNtYS1j YXN2LzEvNTc2QjFEMzBDN0Q2MTJGRTgyRDJFMkM1QTc4RUQ0MTY1NDgwRjNEOS5t ZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw BgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcN AQELBQADggEBAGSwUGQJZbVgfAOxRcpUANxPw5V4+RFJEnKiHekM+JMJ1GjwY36N IwZE4ynqDsWcq8+KF37P/6O4nljpX2EKajeWr5MSTT+bWf1HQfaTYFJ73TZFAzFJ ACBbYLvI365UyOSSGwQMOH2g6Zn9mxTwV38xL6bJZYjvTkeT11dQpeLEMhVSH+HJ h/NcdTUw5BuI1FBKBJb/K6THZMli/bMhIuYiZ5fB2Jwb89S3vde2G+O4fIe8W516 I/qTx7obh7mmOcqt2Hx8rb6LQLFZTKxN3R64BRqOFusrfcazDZnPieF3RVJzH2Me N4K2OrmlMN6+LzBpoW4ZrbTDP/CcwoeFxWM= -----END CERTIFICATE-----Generated at Mon Mar 2 02:50:50 2026 by rpki-client