Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
File:                     plBG2F7PIB--9R6L6hxO0z-Vsmg.mft (raw, json)
Hash identifier:          7wvSV3gVV9xpsX9Sbzwzjs+/LJM/TEHw5xAk3bm9mQo=
Subject key identifier:   5E:5B:B4:FD:B0:C0:EC:18:14:40:83:AE:D9:C7:2A:F5:97:29:D5:87
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Certificate issuer:       /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial:       019CABD95D3B0B4014AC3209238FD0266952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
Manifest number:          1852
Signing time:             Mon 02 Mar 2026 00:01:14 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:14 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:14 +0000
Files and hashes:         1: 6TK55uf4E7Q4i5YH-VAZAMARA00.roa (hash: 3regBELSIWwrIEhCUAfpYTo6zV2ol5bwAAaJIBdpeUs=)
                          2: 9twuQnOJskBwmGMFoupLSFf36QU.roa (hash: RCDNAXL5qdPSc9rP9ORi3f5ylPM5vMAj2oc0ZzFFmFU=)
                          3: DijJx3m0K8IF-fNdq8vdHLvoRm0.roa (hash: 4C2y0rnH3pQ1yAQ2l/hvovIIpf4rpQHX/FcG3Oj/At8=)
                          4: I9QD5q-NiIfxJo1lRmq5OKOHN_Q.roa (hash: Qi/hyzakZZcN60BC7q1PWSyKEfO3DZwisLoDVX9bMS8=)
                          5: N7Z-KVIhy-3YXcEigFtIjfBgqyU.roa (hash: ua7m4lDdZT/nE5B7uMpIhoHMPNREsYJy7Na3JVYy+ho=)
                          6: VFqJkoKX_P2e5DUSDfyccrd5zpE.roa (hash: 76YyLGgvp5IErRkUR0VKzNy6NFnsufvCYMry5U68Xw8=)
                          7: plBG2F7PIB--9R6L6hxO0z-Vsmg.crl (hash: khZdamDUILVSxvr2iIVo2MhcB+WMIdK4n1GUOJz2ufg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:5d:3b:0b:40:14:ac:32:09:23:8f:d0:26:69:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
        Validity
            Not Before: Mar  2 00:01:14 2026 GMT
            Not After : Mar  3 00:01:14 2026 GMT
        Subject: CN=5e5bb4fdb0c0ec18144083aed9c72af59729d587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:56:12:71:c5:2c:a0:61:82:21:c2:ee:48:38:
                    a2:c9:2b:65:f6:bf:0f:7f:5a:34:79:bf:c6:fa:21:
                    d7:8c:7b:0a:61:bd:7d:ca:6b:58:06:b8:d5:9c:65:
                    ae:7a:c3:68:98:6c:e0:5f:5a:77:1b:c3:38:e6:43:
                    6c:15:ea:bf:3a:c9:70:ff:ca:27:47:49:f3:c4:29:
                    62:bc:aa:5a:b4:5e:33:d5:cc:bd:c9:c1:c0:39:3f:
                    c0:45:f3:e7:d7:bb:67:c6:c0:98:b0:bd:cb:d8:ab:
                    50:53:c0:37:8e:6c:17:5f:4b:3a:2e:12:33:cf:fe:
                    f2:45:e5:75:2b:51:0b:e5:42:aa:9d:da:ed:97:fb:
                    e6:28:db:1f:de:d9:24:b6:42:85:e3:d0:bf:b2:53:
                    5b:1d:8a:8c:65:b1:c0:a6:8d:22:3f:62:fa:08:dc:
                    87:58:2a:74:83:17:2b:00:8a:87:40:6c:dc:f5:cc:
                    61:86:b0:8c:fc:f7:85:7c:1a:bb:b1:6a:11:54:4f:
                    fa:ca:32:f7:56:71:dc:ef:98:91:e1:d1:81:a8:ca:
                    61:11:e1:08:96:16:25:03:2a:23:18:8b:9a:72:7a:
                    fd:4d:c6:77:22:07:1f:40:e5:6c:ac:5a:a9:b4:f1:
                    33:e6:c5:c8:41:d5:b4:74:36:e6:fb:4d:fc:a6:57:
                    e8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5B:B4:FD:B0:C0:EC:18:14:40:83:AE:D9:C7:2A:F5:97:29:D5:87
            X509v3 Authority Key Identifier:
                keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:40:5c:d7:41:3c:53:96:d4:15:0d:f9:c7:6c:6c:3b:3a:d3:
         ce:13:9a:e8:5d:6f:cc:80:9a:8b:79:6e:5b:9d:10:ef:ed:26:
         64:f0:f0:7c:18:49:b1:02:cf:bd:aa:e9:8d:d6:83:76:20:3e:
         d1:48:2b:3c:c1:bd:8c:45:c9:42:25:ef:c9:9f:a9:8c:0e:78:
         a9:75:a0:dc:d6:96:c8:2e:ec:70:a8:dc:49:5e:66:42:cc:2e:
         57:1a:1e:a4:1c:be:49:81:1e:83:d0:14:d5:34:7e:a6:f0:dd:
         19:ed:7d:00:49:93:f1:ca:63:9f:b4:7d:6b:5d:53:2e:40:ea:
         97:3d:9f:e5:70:e3:85:c0:2d:24:a5:3a:b3:7b:76:34:b8:96:
         dc:7c:5f:25:ea:97:9e:49:f3:dd:98:f9:3e:3b:64:88:62:fa:
         e8:96:e7:04:f0:00:08:6f:7f:be:7c:1b:40:9e:ac:ab:61:08:
         cf:07:c8:57:51:6b:38:fc:f3:83:5e:e4:d2:73:e0:e7:5f:56:
         a2:54:0d:e4:b1:f6:3b:e1:b4:63:75:1d:59:3d:21:4f:b4:2c:
         06:30:be:11:5b:cd:a1:e7:98:63:01:f2:33:a9:87:46:83:8c:
         b0:0d:6b:7f:e5:19:04:df:33:ff:a8:62:3e:99:f2:b8:4a:54:
         7f:44:fa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:56 2026 by rpki-client