Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File:                     pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier:          VCafEl1C47LKjUoPyWTWCg/JPLsUoiaY/qP8koAIiZ4=
Subject key identifier:   FE:FB:38:6B:D9:B6:16:C7:05:AF:1B:FF:29:70:69:73:12:F8:0E:65
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer:       /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial:       019EC0DACAC88753E00B49DF800A65B93638
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number:          0AC4
Signing time:             Sat 13 Jun 2026 12:00:24 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:24 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:24 +0000
Files and hashes:         1: HiYbhZWhCJJeXZ2C1QF9HZFYuTg.roa (hash: J5Ar7UkCjCgNu5FTWi596RRrK/CIdvUtNz5mbXSomXk=)
                          2: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: nOCSbUqs248ABQ4petE4yH0EGpTo96VTlfwPGESnAcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:ca:c8:87:53:e0:0b:49:df:80:0a:65:b9:36:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
        Validity
            Not Before: Jun 13 12:00:24 2026 GMT
            Not After : Jun 14 12:00:24 2026 GMT
        Subject: CN=fefb386bd9b616c705af1bff2970697312f80e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c4:91:a7:bc:db:a1:d9:84:02:52:57:40:b4:
                    5b:e7:f2:90:30:04:d2:b8:4f:1f:04:c2:b3:d6:06:
                    ad:ae:92:be:83:84:c7:f9:3f:7a:6c:e5:6c:88:b4:
                    aa:04:3b:bd:ff:8c:cf:a0:fb:76:23:b0:30:08:d0:
                    a1:e4:e4:61:2a:6b:e9:0a:e8:e5:0e:30:81:59:15:
                    c7:13:16:81:e7:63:2b:f7:f3:a4:3d:9b:73:3b:a8:
                    6c:a4:5d:c9:78:89:84:01:de:dd:2b:ca:b5:37:80:
                    49:9b:af:5d:62:75:32:0a:fa:49:0d:5b:cf:ff:9b:
                    ce:18:69:92:47:24:1d:1e:6e:96:53:80:cf:ed:8a:
                    72:6c:ae:09:6a:3f:87:36:ba:2c:e5:a0:0a:22:09:
                    f9:83:a8:ef:96:4d:cb:4f:29:e9:e0:df:34:61:93:
                    4a:45:cd:be:47:51:de:15:58:73:27:9e:ac:0b:05:
                    8b:0a:92:d4:7e:a3:7d:53:26:06:38:ff:af:bb:2f:
                    81:b4:dc:c6:9a:ea:7a:46:e2:26:04:e4:c7:26:44:
                    02:9d:30:13:a2:13:92:87:6b:97:ec:66:f0:83:74:
                    36:11:14:da:47:88:8d:40:59:a7:96:fc:ef:ba:fd:
                    86:39:30:5e:ec:66:43:de:64:e9:83:0b:c2:09:11:
                    49:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FB:38:6B:D9:B6:16:C7:05:AF:1B:FF:29:70:69:73:12:F8:0E:65
            X509v3 Authority Key Identifier:
                keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:2f:aa:32:22:3c:c5:d6:30:1f:d8:59:f9:3f:13:0d:51:f3:
         bd:5c:3d:72:15:40:a5:58:61:7c:f5:6f:d0:f2:f5:75:af:ce:
         85:b4:3d:bf:a7:76:e6:5d:cd:8d:45:56:c3:07:95:7e:db:a2:
         6f:0a:76:26:55:4d:8a:a0:70:4a:42:3b:c4:41:cf:1d:81:ea:
         98:5a:f0:e1:eb:81:81:f6:c5:1a:d0:34:c3:59:e5:c3:26:f4:
         42:78:a9:60:4f:67:bd:65:dc:b2:62:1d:3d:cd:f5:a3:b0:82:
         91:4c:0a:2b:4a:6c:e1:e5:61:b9:6c:06:67:ce:b6:6c:e3:34:
         8b:50:b5:39:d0:eb:a6:d9:87:15:27:5e:1d:e9:27:25:3b:55:
         89:02:84:24:89:0a:93:5b:e0:21:1c:9b:5a:05:c0:ba:d7:7d:
         51:9b:fa:b2:80:00:c5:4e:63:8e:cc:4b:50:e4:9f:9e:85:cb:
         9b:86:05:83:0a:ee:f8:93:61:76:e4:bd:46:ef:71:a3:6d:01:
         4a:c9:3f:01:bd:4e:16:6e:75:f7:ef:9c:1f:82:e5:a3:7e:2a:
         41:9f:59:02:95:83:04:56:0a:a5:ce:86:ef:54:ce:c3:66:47:
         0e:e8:b0:49:ce:c1:aa:d2:9b:eb:b8:8f:90:99:70:59:aa:35:
         6b:93:7f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:30:48 2026 by rpki-client