Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
File:                     plBG2F7PIB--9R6L6hxO0z-Vsmg.mft (raw, json)
Hash identifier:          gwdwXfy4Zg8l1kD8yP9aP7QblsnOkn2Xfel0eRUDQmA=
Subject key identifier:   77:52:71:9E:79:B4:E3:6C:B2:0D:AC:1E:B3:17:95:11:59:30:B2:D1
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Certificate issuer:       /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial:       019D99621326919C9E964109791CA5D48EE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
Manifest number:          18CD
Signing time:             Fri 17 Apr 2026 03:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:34 +0000
Files and hashes:         1: 6TK55uf4E7Q4i5YH-VAZAMARA00.roa (hash: 3regBELSIWwrIEhCUAfpYTo6zV2ol5bwAAaJIBdpeUs=)
                          2: 9twuQnOJskBwmGMFoupLSFf36QU.roa (hash: RCDNAXL5qdPSc9rP9ORi3f5ylPM5vMAj2oc0ZzFFmFU=)
                          3: DijJx3m0K8IF-fNdq8vdHLvoRm0.roa (hash: 4C2y0rnH3pQ1yAQ2l/hvovIIpf4rpQHX/FcG3Oj/At8=)
                          4: I9QD5q-NiIfxJo1lRmq5OKOHN_Q.roa (hash: Qi/hyzakZZcN60BC7q1PWSyKEfO3DZwisLoDVX9bMS8=)
                          5: N7Z-KVIhy-3YXcEigFtIjfBgqyU.roa (hash: ua7m4lDdZT/nE5B7uMpIhoHMPNREsYJy7Na3JVYy+ho=)
                          6: VFqJkoKX_P2e5DUSDfyccrd5zpE.roa (hash: 76YyLGgvp5IErRkUR0VKzNy6NFnsufvCYMry5U68Xw8=)
                          7: plBG2F7PIB--9R6L6hxO0z-Vsmg.crl (hash: 55fP5gf6ZCEZfwQr4VVJOkUeM02J9z+BXbHIVWQqh18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:13:26:91:9c:9e:96:41:09:79:1c:a5:d4:8e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
        Validity
            Not Before: Apr 17 03:00:34 2026 GMT
            Not After : Apr 18 03:00:34 2026 GMT
        Subject: CN=7752719e79b4e36cb20dac1eb31795115930b2d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:f2:9b:06:9f:ff:a4:61:95:3f:5f:99:5a:
                    f4:77:cb:7e:89:13:51:f8:5d:07:8e:7d:ad:97:85:
                    fc:40:72:12:24:99:42:12:3c:2f:84:2d:20:55:dd:
                    97:fb:41:4d:e4:46:4c:a8:b6:49:41:6f:96:58:81:
                    eb:64:57:02:ad:c5:85:14:32:7b:4d:38:57:fe:95:
                    f7:e9:2e:fb:1d:c4:18:d3:0f:90:0d:89:b0:ae:7e:
                    74:9b:e0:43:62:cc:1a:5c:e3:a3:26:db:4b:49:48:
                    10:c7:8a:39:c8:78:da:a0:96:31:8e:ba:f4:95:3a:
                    1b:f8:26:e7:5b:bb:53:9e:b3:6a:57:3f:94:fb:37:
                    0f:d8:38:ce:b4:a2:d0:8f:5d:3e:36:42:2d:74:b2:
                    90:74:50:86:5f:c8:a1:ca:56:9a:87:08:c4:08:be:
                    a5:f9:c3:b4:73:b2:85:34:b3:80:11:ff:d0:76:3d:
                    3c:49:d6:76:a1:af:77:5f:2f:e8:88:cd:f3:03:98:
                    7f:0a:eb:13:58:ea:f7:28:d8:de:3f:82:3b:03:1c:
                    f0:4e:7a:88:c2:72:f9:f2:1c:59:e0:f0:c1:40:ea:
                    b6:47:a4:65:e7:e0:c2:ba:91:2b:f5:fe:46:1c:44:
                    55:80:6f:b5:fc:48:d9:08:f8:96:34:00:f5:51:d4:
                    2c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:52:71:9E:79:B4:E3:6C:B2:0D:AC:1E:B3:17:95:11:59:30:B2:D1
            X509v3 Authority Key Identifier:
                keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6e:dd:0b:0a:eb:90:65:c5:bd:44:36:c3:91:e6:f7:5c:a9:
         e0:cc:8e:35:a9:95:7f:e1:2a:8a:f1:85:6f:69:20:cb:c3:2e:
         79:eb:b9:8e:ce:8c:98:ad:52:86:c6:bf:89:34:28:cf:3c:d6:
         0e:5e:dd:f9:bb:5b:88:40:2a:fd:c9:f7:aa:dd:a9:1c:b9:bd:
         e3:fc:9d:8c:71:56:42:e0:2b:ca:02:d5:23:c1:87:d9:2f:4f:
         e3:e6:f3:31:ee:58:c0:66:1c:90:99:87:10:69:5f:a0:7b:30:
         e7:69:a2:bd:cb:78:9b:49:c5:5f:b6:bc:27:4e:ac:7a:12:af:
         ce:aa:ea:ab:8b:4f:99:ce:ad:8b:53:72:48:7c:88:f2:9f:66:
         c6:9a:e6:f4:92:08:a2:4c:af:48:c8:bc:59:1d:e1:a4:c9:8d:
         c9:72:4c:b3:f9:b5:bc:08:8d:68:0a:41:71:53:00:0c:0a:3f:
         b3:6b:f7:7e:d0:33:44:f5:20:b2:6f:f0:e6:5c:12:2f:29:39:
         77:d8:e8:f7:d7:cd:ac:1f:d0:20:29:95:b4:06:55:7d:07:93:
         4d:d2:13:5e:23:7e:fb:b8:d0:72:2d:5d:d5:57:54:ab:85:a7:
         9d:03:6e:52:9d:a0:a0:39:29:04:49:b0:55:ed:b3:4a:a9:56:
         fb:cc:de:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYhMmkZyelkEJeRyl1I7iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NTA0NmQ4NWVjZjIwMWZiZWY1MWU4YmVhMWM0ZWQzM2Y5
NWIyNjgwHhcNMjYwNDE3MDMwMDM0WhcNMjYwNDE4MDMwMDM0WjAzMTEwLwYDVQQD
Eyg3NzUyNzE5ZTc5YjRlMzZjYjIwZGFjMWViMzE3OTUxMTU5MzBiMmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3Hymwaf/6RhlT9fmVr0d8t+iRNR
+F0Hjn2tl4X8QHISJJlCEjwvhC0gVd2X+0FN5EZMqLZJQW+WWIHrZFcCrcWFFDJ7
TThX/pX36S77HcQY0w+QDYmwrn50m+BDYswaXOOjJttLSUgQx4o5yHjaoJYxjrr0
lTob+CbnW7tTnrNqVz+U+zcP2DjOtKLQj10+NkItdLKQdFCGX8ihylaahwjECL6l
+cO0c7KFNLOAEf/Qdj08SdZ2oa93Xy/oiM3zA5h/CusTWOr3KNjeP4I7AxzwTnqI
wnL58hxZ4PDBQOq2R6Rl5+DCupEr9f5GHERVgG+1/EjZCPiWNAD1UdQsIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdScZ55tONssg2sHrMXlRFZMLLRMB8GA1UdIwQY
MBaAFKZQRthezyAfvvUei+ocTtM/lbJoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUt
YmNjZDMyYWY5N2ZlLzEvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUtYmNjZDMyYWY5N2Zl
LzEvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB27dCwrr
kGXFvUQ2w5Hm91yp4MyONamVf+EqivGFb2kgy8Mueeu5js6MmK1Shsa/iTQozzzW
Dl7d+btbiEAq/cn3qt2pHLm94/ydjHFWQuArygLVI8GH2S9P4+bzMe5YwGYckJmH
EGlfoHsw52mivct4m0nFX7a8J06sehKvzqrqq4tPmc6ti1NySHyI8p9mxprm9JII
okyvSMi8WR3hpMmNyXJMs/m1vAiNaApBcVMADAo/s2v3ftAzRPUgsm/w5lwSLyk5
d9jo99fNrB/QICmVtAZVfQeTTdITXiN++7jQci1d1VdUq4WnnQNuUp2goDkpBEmw
Ve2zSqlW+8zepQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:03 2026 by rpki-client