Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
File:                     plBG2F7PIB--9R6L6hxO0z-Vsmg.mft (raw, json)
Hash identifier:          8cYkDip29gRzrLhG3YYZk3ulKc2CosK0R/y9H/Sdb7U=
Subject key identifier:   05:47:DC:A5:30:0C:1F:9C:E9:C4:4C:A8:CB:38:C4:59:F0:81:25:2E
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Certificate issuer:       /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial:       019EC0DBA7206ABA8FFB7466BCE2AE8B9BB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
Manifest number:          1966
Signing time:             Sat 13 Jun 2026 12:01:21 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:21 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:21 +0000
Files and hashes:         1: 6TK55uf4E7Q4i5YH-VAZAMARA00.roa (hash: 3regBELSIWwrIEhCUAfpYTo6zV2ol5bwAAaJIBdpeUs=)
                          2: 9twuQnOJskBwmGMFoupLSFf36QU.roa (hash: RCDNAXL5qdPSc9rP9ORi3f5ylPM5vMAj2oc0ZzFFmFU=)
                          3: DijJx3m0K8IF-fNdq8vdHLvoRm0.roa (hash: 4C2y0rnH3pQ1yAQ2l/hvovIIpf4rpQHX/FcG3Oj/At8=)
                          4: I9QD5q-NiIfxJo1lRmq5OKOHN_Q.roa (hash: Qi/hyzakZZcN60BC7q1PWSyKEfO3DZwisLoDVX9bMS8=)
                          5: N7Z-KVIhy-3YXcEigFtIjfBgqyU.roa (hash: ua7m4lDdZT/nE5B7uMpIhoHMPNREsYJy7Na3JVYy+ho=)
                          6: VFqJkoKX_P2e5DUSDfyccrd5zpE.roa (hash: 76YyLGgvp5IErRkUR0VKzNy6NFnsufvCYMry5U68Xw8=)
                          7: plBG2F7PIB--9R6L6hxO0z-Vsmg.crl (hash: 0BkW6DeHiUHmTdraXlR2j2QGidF7DMa9ibE3+4HXEvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:a7:20:6a:ba:8f:fb:74:66:bc:e2:ae:8b:9b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
        Validity
            Not Before: Jun 13 12:01:21 2026 GMT
            Not After : Jun 14 12:01:21 2026 GMT
        Subject: CN=0547dca5300c1f9ce9c44ca8cb38c459f081252e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:49:e7:82:45:f0:1e:e8:96:7b:bd:a7:ac:ae:
                    aa:18:d0:f3:de:bd:65:c6:f5:49:d0:56:27:eb:18:
                    32:1a:f2:d5:9a:5c:95:4e:5a:f0:f8:03:93:79:0e:
                    52:af:e4:57:5d:48:31:fa:74:b1:45:a5:7b:48:2c:
                    44:45:f1:66:22:5e:e9:6c:95:a2:36:3d:3b:f3:0d:
                    44:cb:af:33:d8:c0:82:60:a6:0a:22:ee:0c:61:2d:
                    ab:be:f9:68:52:8b:c2:dc:ea:66:b0:94:f4:90:c9:
                    f5:0f:33:e8:63:8e:7e:32:65:17:e7:70:f6:0d:8f:
                    db:4b:94:66:e6:34:4c:7d:b0:aa:72:7e:e0:5a:bb:
                    ee:66:2c:c8:d2:77:88:83:ab:e8:c1:05:ea:b5:43:
                    bf:51:b0:ad:06:0d:42:40:1a:f6:ef:d5:69:07:90:
                    9e:a4:57:f5:17:ae:b0:22:87:0d:16:6f:ac:16:1b:
                    da:c1:de:92:e0:22:24:97:d0:a9:83:3e:bd:d2:cd:
                    53:46:d7:b3:df:53:42:90:54:99:25:34:d3:20:ff:
                    e3:d6:e0:56:ba:9c:ca:d1:00:bb:85:ce:60:b6:60:
                    15:53:23:9a:ce:bb:b4:cc:b9:af:c3:e2:3d:6b:56:
                    ca:ae:10:06:c3:28:5e:d9:86:52:52:a0:80:be:0a:
                    b3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:47:DC:A5:30:0C:1F:9C:E9:C4:4C:A8:CB:38:C4:59:F0:81:25:2E
            X509v3 Authority Key Identifier:
                keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ee:94:02:24:43:a8:b7:ab:cb:df:57:ec:74:ac:94:68:c1:
         1c:04:52:4c:ba:90:20:18:5f:aa:a1:92:36:8d:34:82:e4:38:
         a6:cd:75:c9:97:d3:6f:51:94:15:a8:75:ca:85:ae:f6:70:b2:
         79:a2:6c:9c:2b:91:8f:37:31:43:01:cb:4e:a4:f5:03:26:93:
         a3:f7:76:88:e8:f4:a6:f8:ba:b0:be:b8:41:86:9b:0f:99:e1:
         d4:a5:af:b8:7c:26:4f:5f:e3:8e:0f:73:29:d4:de:39:b1:ab:
         39:b2:00:00:9c:7e:6f:4a:f9:dd:2b:1e:4f:9d:60:74:b1:6a:
         e9:1b:b0:d6:91:1f:b1:b0:c6:c1:bb:9c:3d:f2:f1:7b:97:9d:
         bb:0f:5d:4d:1d:4b:5d:01:72:f6:fd:29:ab:74:18:d3:30:eb:
         67:f4:f4:73:c8:63:4a:f2:b8:1d:73:73:6a:b4:24:a2:45:fb:
         b7:09:b5:03:da:15:92:3e:b3:f7:32:a7:c3:01:d1:ab:33:cc:
         cb:c0:e6:a5:04:ef:0a:32:0c:fb:ce:16:b5:d4:58:91:e8:f2:
         34:c8:51:35:74:0e:59:a5:25:c2:31:fb:f2:6b:39:11:ff:de:
         e5:e7:6a:ca:2a:65:1c:71:e5:b3:d9:10:6d:06:4a:78:48:fb:
         da:e2:89:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:59:08 2026 by rpki-client