Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
File:                     pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft (raw, json)
Hash identifier:          pUDZKJbQ4A69CvIFF577Viaqxtrq6AUZqNuMGakhcbc=
Subject key identifier:   EC:10:C2:D7:A2:48:BB:AF:6B:7C:52:0A:E6:79:BE:68:26:B1:42:C3
Authority key identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24
Certificate issuer:       /CN=a4b707300e869467be5e5273222d90e0b618f924
Certificate serial:       019FAB6358E671DB923F8B944B57016D2DB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
Manifest number:          03C9
Signing time:             Wed 29 Jul 2026 01:00:42 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:42 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:42 +0000
Files and hashes:         1: 4LcrxhWHmhkvPdpuzoR7Y2DvIRU.roa (hash: R/FNqp7EeNGMZEea43bk96Q3NZeLFAovdU6R5kUDA+c=)
                          2: _rkoOQmmtVtFnbLuubGb2FPnExg.roa (hash: CzxwuD95bHpNiF0gIsEuyjsHFs3IQ3s6b3cEWVvW62w=)
                          3: bBQddLsJpMdgE7gqchwFza_jgpU.roa (hash: FUjStVoQwXDYDeRsi+A//hBH3DZhoNYwk2uCiqnGlmA=)
                          4: pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl (hash: WIcVNO2T/mkgQc308zSvHQbModh66pNhhxv7NspyK68=)
                          5: xJLUaEqq1ZnsryMWFK1TiSGmxHs.roa (hash: CgFHk+Ek6FTFUMY85fF8eDyesBRdCZysUJ3S3cGo/uM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:58:e6:71:db:92:3f:8b:94:4b:57:01:6d:2d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b707300e869467be5e5273222d90e0b618f924
        Validity
            Not Before: Jul 29 01:00:42 2026 GMT
            Not After : Jul 30 01:00:42 2026 GMT
        Subject: CN=ec10c2d7a248bbaf6b7c520ae679be6826b142c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:f7:2c:be:fc:15:4b:88:98:3f:42:72:eb:
                    11:c0:6d:9e:8f:aa:72:3d:67:15:a5:79:89:95:47:
                    bc:db:2d:3f:5e:10:09:03:26:74:a4:e6:74:0d:e3:
                    7d:b8:32:30:20:8a:3d:48:61:f2:9f:6f:ac:89:de:
                    4b:56:68:90:b3:80:43:e3:ea:a1:43:53:d4:30:50:
                    e4:da:45:af:86:0d:b9:ba:c2:65:39:09:70:95:d4:
                    3a:a5:77:3b:61:7d:18:b3:d3:d9:be:12:cc:30:fb:
                    23:a3:9a:27:0a:d3:45:c3:9a:46:8e:ad:bc:ff:26:
                    78:93:bb:12:f8:70:ea:48:a0:88:47:77:03:24:47:
                    cc:6f:12:32:19:5e:32:73:57:86:d0:4e:44:e1:bf:
                    9a:c3:f5:9e:66:d2:bd:60:f2:86:54:d7:11:92:3a:
                    5b:78:1a:2c:46:87:3b:4f:69:52:65:fe:03:0f:1b:
                    2b:8a:74:89:77:d9:89:f5:a5:ea:18:9a:0d:62:d5:
                    38:38:08:82:37:b7:d4:03:3b:bd:81:23:4f:ac:6d:
                    c9:79:b6:08:48:a8:6f:4e:50:c8:2f:4c:35:53:d2:
                    70:30:cd:ff:bf:5a:87:e7:da:7f:65:35:dd:20:06:
                    6d:8e:f5:35:10:c3:f1:2c:c1:ab:d9:33:87:eb:de:
                    15:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:10:C2:D7:A2:48:BB:AF:6B:7C:52:0A:E6:79:BE:68:26:B1:42:C3
            X509v3 Authority Key Identifier:
                keyid:A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a4:23:af:71:e1:ed:8b:a4:a1:b2:14:27:42:d4:a2:aa:63:
         9c:35:49:14:3f:f3:06:a6:dd:ee:aa:9b:ed:6a:ac:e6:2a:cb:
         34:cc:95:96:d7:70:26:70:ca:4c:e4:bc:fb:5a:24:d4:72:51:
         21:6e:da:1c:4c:b8:0a:69:86:b5:b1:fd:b1:f7:65:cf:3e:3c:
         e7:85:68:54:27:40:a1:74:e0:fe:ea:c1:e9:d2:27:bf:6b:55:
         fb:56:c8:02:35:8d:2f:65:c2:14:d2:92:cf:60:86:c2:85:03:
         25:9f:47:20:d6:a3:b8:2f:c8:91:ed:6d:83:20:81:1f:fe:69:
         b1:0a:9e:80:fe:2c:58:d6:0a:bb:b3:d6:3a:38:34:51:db:63:
         39:6a:73:b3:1f:84:ad:9d:e9:7c:e1:3b:aa:a5:27:c1:69:27:
         c4:5f:e0:b1:2b:a9:4e:c4:fc:90:a7:8d:79:33:21:70:f6:e5:
         5c:2d:a2:9b:c8:2c:29:ba:45:34:1e:29:4e:e9:d6:54:c4:72:
         d6:1a:ed:cb:e7:59:6b:35:1a:96:f9:16:a3:d7:4a:5b:c3:b6:
         8c:eb:25:26:af:30:9f:4d:b8:1e:61:35:d4:53:a4:aa:10:95:
         7b:91:f4:9b:17:52:8f:8c:d8:70:49:bb:34:e0:a9:66:1b:45:
         0a:03:84:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY1jmcduSP4uUS1cBbS2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjcwNzMwMGU4Njk0NjdiZTVlNTI3MzIyMmQ5MGUwYjYx
OGY5MjQwHhcNMjYwNzI5MDEwMDQyWhcNMjYwNzMwMDEwMDQyWjAzMTEwLwYDVQQD
EyhlYzEwYzJkN2EyNDhiYmFmNmI3YzUyMGFlNjc5YmU2ODI2YjE0MmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU/3LL78FUuImD9CcusRwG2ej6py
PWcVpXmJlUe82y0/XhAJAyZ0pOZ0DeN9uDIwIIo9SGHyn2+sid5LVmiQs4BD4+qh
Q1PUMFDk2kWvhg25usJlOQlwldQ6pXc7YX0Ys9PZvhLMMPsjo5onCtNFw5pGjq28
/yZ4k7sS+HDqSKCIR3cDJEfMbxIyGV4yc1eG0E5E4b+aw/WeZtK9YPKGVNcRkjpb
eBosRoc7T2lSZf4DDxsrinSJd9mJ9aXqGJoNYtU4OAiCN7fUAzu9gSNPrG3JebYI
SKhvTlDIL0w1U9JwMM3/v1qH59p/ZTXdIAZtjvU1EMPxLMGr2TOH694V/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwQwteiSLuva3xSCuZ5vmgmsULDMB8GA1UdIwQY
MBaAFKS3BzAOhpRnvl5ScyItkOC2GPkkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mYzg1MTktNjJlNC00Mjg5LTk5MTct
M2U1NWM0OWYyZDRlLzEvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9mYzg1MTktNjJlNC00Mjg5LTk5MTctM2U1NWM0OWYyZDRl
LzEvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKQjr3Hh
7YukobIUJ0LUoqpjnDVJFD/zBqbd7qqb7Wqs5irLNMyVltdwJnDKTOS8+1ok1HJR
IW7aHEy4CmmGtbH9sfdlzz4854VoVCdAoXTg/urB6dInv2tV+1bIAjWNL2XCFNKS
z2CGwoUDJZ9HINajuC/Ike1tgyCBH/5psQqegP4sWNYKu7PWOjg0UdtjOWpzsx+E
rZ3pfOE7qqUnwWknxF/gsSupTsT8kKeNeTMhcPblXC2im8gsKbpFNB4pTunWVMRy
1hrty+dZazUalvkWo9dKW8O2jOslJq8wn024HmE11FOkqhCVe5H0mxdSj4zYcEm7
NOCpZhtFCgOE6A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:21:38 2026 by rpki-client