Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
File:                     PlDR3TG8dEm6zBhksBr5lMVH79M.mft (raw, json)
Hash identifier:          RerlZw6cl/FJX1sIL5+wlS9u+U4fZXCMVxYcgfY5SSM=
Subject key identifier:   4D:A8:01:9A:CA:A4:86:DA:E0:6E:A5:E3:B3:65:11:5F:EE:60:75:E1
Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
Certificate issuer:       /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Certificate serial:       019CAC104CAA9B5BF35DC1C170DCDF03922D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
Manifest number:          1845
Signing time:             Mon 02 Mar 2026 01:01:15 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:15 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:15 +0000
Files and hashes:         1: 0k4uhWX2tXs6kn4QDDQyW9bCkYc.roa (hash: 6Eugvm0/9Fesv15b1kgGMNxIPO6CcT7Ckl1hTPHgrgM=)
                          2: PlDR3TG8dEm6zBhksBr5lMVH79M.crl (hash: Q0kCBM7D3E6Jt0/NN9gDLOkOaTe+cXWVWE69xHi5Mg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:4c:aa:9b:5b:f3:5d:c1:c1:70:dc:df:03:92:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
        Validity
            Not Before: Mar  2 01:01:15 2026 GMT
            Not After : Mar  3 01:01:15 2026 GMT
        Subject: CN=4da8019acaa486dae06ea5e3b365115fee6075e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:bb:1b:ed:98:a8:1d:dc:31:7c:65:08:ff:
                    82:ee:10:b3:51:69:15:81:23:a4:d9:35:30:57:99:
                    cc:55:90:e2:12:06:1d:b7:35:80:79:b4:17:1b:f9:
                    84:c1:bd:32:c9:dd:f3:68:99:93:ca:6d:1f:a5:10:
                    0b:f9:ab:c6:66:b1:35:f5:ff:37:2c:56:cf:91:de:
                    8c:ee:c7:75:23:6d:51:a5:fc:89:30:68:0d:37:8b:
                    1a:1b:3a:16:3d:38:53:36:f0:c1:c0:57:dd:c1:11:
                    9f:bc:3c:1e:f2:e1:7c:b3:fe:5a:b9:86:d4:dd:fb:
                    b6:12:58:f8:c9:35:f5:9e:f0:be:f1:d8:d6:aa:5e:
                    af:15:6b:de:ba:bc:6e:b2:c2:77:e0:34:be:4e:b4:
                    9e:12:f8:75:b7:6e:ff:d5:59:56:09:30:7a:8c:15:
                    5a:64:9f:8d:d7:9e:bc:a8:58:10:98:a6:fd:ad:e4:
                    97:37:13:72:bc:fc:08:16:79:ec:13:d7:9c:3e:be:
                    f7:8a:87:74:9c:ac:6b:2c:c3:9b:9f:2f:13:b0:4a:
                    d8:c6:28:45:c9:68:8f:ed:e3:4d:bb:f3:91:a6:36:
                    06:59:e6:21:a0:d9:46:0c:2e:f4:47:2c:f8:6a:f2:
                    83:fc:9c:68:e1:8f:ad:fa:e0:60:16:14:e1:29:24:
                    e7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A8:01:9A:CA:A4:86:DA:E0:6E:A5:E3:B3:65:11:5F:EE:60:75:E1
            X509v3 Authority Key Identifier:
                keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e5:2e:14:64:9c:7a:49:d5:d7:47:76:6b:99:90:ee:0a:68:
         c6:07:e2:aa:d9:34:09:73:fc:91:ff:06:8f:7d:75:b6:e5:08:
         a8:6b:63:ab:2d:6a:7f:e0:c9:45:b2:68:08:60:57:64:d0:58:
         48:ce:b7:d5:67:2e:1c:03:db:67:ca:bd:1c:8a:5e:6e:d6:e6:
         f4:8d:ad:ce:85:52:66:fa:eb:2d:f5:8a:40:7e:dd:6d:83:45:
         5b:ad:77:98:c5:d1:b7:10:00:3e:6e:2c:ab:b1:10:b1:67:d0:
         af:fa:29:b7:29:6b:40:f6:62:1d:fd:f2:26:14:c8:a6:ff:9d:
         5a:4e:12:9e:87:32:03:e9:a7:f7:bc:eb:16:c3:76:6a:63:86:
         78:4d:df:c1:71:b2:8d:8f:ed:bf:d6:5a:34:e7:69:25:51:e2:
         03:5b:97:b4:5f:4c:f9:57:5a:f2:15:73:a3:82:aa:cd:b0:2b:
         fe:e6:43:13:7f:42:23:f5:1b:97:df:a7:6a:43:b9:40:4e:f2:
         a7:c8:03:70:d6:17:68:e5:ee:5f:99:47:08:a5:e9:99:7a:43:
         8e:c9:3f:a5:39:96:61:21:e4:cb:43:52:97:dc:f1:aa:fc:95:
         c3:ae:fe:be:c0:35:16:7a:d8:39:17:ec:e2:87:a6:50:e0:8b:
         cc:40:95:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:09 2026 by rpki-client