Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
File:                     pl24nou2YPIetcSvO5rdUtV-uJ8.mft (raw, json)
Hash identifier:          +J08UtWDRs4RaAN6DYK9sGpNa/EGmGG5BUtuQljVyhM=
Subject key identifier:   F0:A5:5E:DE:23:1F:38:8D:9E:4C:9F:ED:F2:F1:15:C0:D3:B1:5E:A3
Authority key identifier: A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
Certificate issuer:       /CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Certificate serial:       019CACB502913937512FE595AADDC2816E33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
Manifest number:          05B0
Signing time:             Mon 02 Mar 2026 04:01:09 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:09 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:09 +0000
Files and hashes:         1: NnDti1qolMnRdu6TKLIWSO85A8k.roa (hash: rZbXVayKsphGvgxDa2Rkpb2xF4uS1h5k4Mw2d6eGCNs=)
                          2: pl24nou2YPIetcSvO5rdUtV-uJ8.crl (hash: h2WH+TppKDcNTICwUXFbLtfy/zvR/PhtsUrtE/hNFNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:02:91:39:37:51:2f:e5:95:aa:dd:c2:81:6e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
        Validity
            Not Before: Mar  2 04:01:09 2026 GMT
            Not After : Mar  3 04:01:09 2026 GMT
        Subject: CN=f0a55ede231f388d9e4c9fedf2f115c0d3b15ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:0e:08:a3:43:54:9c:bd:62:77:13:d7:67:
                    ed:33:12:d2:5b:80:71:aa:9a:33:ff:1a:d3:3d:9e:
                    9f:4e:5c:1b:9f:b9:61:8a:b7:5d:42:86:62:2f:0e:
                    82:54:f0:cb:18:b6:36:02:8a:8a:9b:b7:2e:5d:3e:
                    c7:7b:fa:49:97:67:5b:87:ee:2b:38:72:b1:ca:94:
                    4a:1b:3c:b0:09:11:5b:ef:bf:50:29:c6:84:33:25:
                    3d:78:41:34:10:7e:c5:04:cd:38:07:10:21:98:c0:
                    ac:1d:b9:bf:0f:0a:d8:df:87:37:d5:20:db:02:e5:
                    86:63:7b:15:1a:d0:2a:e8:bd:7d:fd:2c:74:c6:bb:
                    4e:df:66:45:31:72:1f:8b:32:6f:31:76:35:e5:2e:
                    46:ae:e2:69:fc:eb:31:06:c4:40:c6:17:27:5e:bf:
                    59:ff:f7:e9:3a:b7:92:00:a8:0c:d2:1d:a4:c4:43:
                    0c:da:4e:0b:94:4c:6c:55:bc:0c:0a:83:dd:3c:c5:
                    0c:bf:23:51:1f:02:62:93:d0:98:58:5c:33:64:3d:
                    25:50:d0:f8:47:f5:f0:20:06:31:96:d2:d3:69:6e:
                    70:a0:a1:f9:05:42:b4:d1:22:90:62:5c:bd:2f:2f:
                    0b:04:a8:95:66:90:fa:a2:76:94:34:a5:cd:38:b6:
                    6a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A5:5E:DE:23:1F:38:8D:9E:4C:9F:ED:F2:F1:15:C0:D3:B1:5E:A3
            X509v3 Authority Key Identifier:
                keyid:A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5a:c8:73:c7:e3:b5:b7:f6:25:85:5d:87:ab:4c:65:1a:f5:
         cf:56:a5:97:d8:98:f5:75:27:90:b9:14:5f:f6:69:da:37:29:
         04:c3:c1:d0:4b:34:4f:00:1f:ef:27:97:5d:3c:da:99:84:e8:
         79:4b:db:43:73:30:d5:90:e6:60:ba:3c:d2:ff:ad:83:d1:c6:
         1e:56:46:aa:21:1e:b8:76:dc:76:8b:ef:25:47:7e:79:d1:b2:
         1a:b9:5d:3a:96:f0:34:77:e3:c2:d8:9e:9d:53:da:74:83:ee:
         01:72:cb:bd:2d:f6:b6:2f:6a:1b:6f:ff:cc:9a:c5:ca:05:c9:
         c4:36:42:6e:cf:79:ad:a2:1b:c8:ff:65:a6:ab:9e:82:42:b7:
         4e:96:2e:7d:1b:33:6b:ad:23:cd:8d:e6:c8:cb:92:3a:55:91:
         ff:1c:a8:c8:49:a2:d8:ff:50:9c:c4:51:49:96:12:87:41:46:
         21:50:35:08:cd:e7:67:1f:3b:29:9c:2c:19:65:71:c2:de:22:
         97:de:01:04:91:f6:ca:f3:2e:af:e1:94:41:33:a9:fd:2a:7b:
         3b:33:43:96:96:f6:87:e4:a0:03:09:b9:a4:23:bb:11:b1:5c:
         0b:90:78:c5:1a:11:50:10:33:c2:50:b1:c6:be:93:66:cf:ab:
         8a:f4:79:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:13:53 2026 by rpki-client