Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
File:                     pl24nou2YPIetcSvO5rdUtV-uJ8.mft (raw, json)
Hash identifier:          iUYjCLsMJH0Evx4qLTZKO7VXnTpoR6/5QIzBNUVadh8=
Subject key identifier:   07:2E:F4:7A:B4:51:F0:18:F1:BA:51:C6:82:06:0F:83:93:D5:93:58
Authority key identifier: A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
Certificate issuer:       /CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Certificate serial:       019CAAC6A26EA98DE3ED00234DDAB5A43152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
Manifest number:          05AF
Signing time:             Sun 01 Mar 2026 19:01:10 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:10 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:10 +0000
Files and hashes:         1: NnDti1qolMnRdu6TKLIWSO85A8k.roa (hash: rZbXVayKsphGvgxDa2Rkpb2xF4uS1h5k4Mw2d6eGCNs=)
                          2: pl24nou2YPIetcSvO5rdUtV-uJ8.crl (hash: BS7YcqCwPCdKs5YruAN8tnn+59TmkGU1gvvr5NpjE44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:a2:6e:a9:8d:e3:ed:00:23:4d:da:b5:a4:31:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
        Validity
            Not Before: Mar  1 19:01:10 2026 GMT
            Not After : Mar  2 19:01:10 2026 GMT
        Subject: CN=072ef47ab451f018f1ba51c682060f8393d59358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ac:e4:7e:03:80:e9:ed:55:48:5d:82:e0:ef:
                    75:d4:fa:6f:f6:3a:d7:53:e8:42:ce:67:08:c0:53:
                    b3:ba:3b:cf:eb:31:1c:bc:7e:17:e2:5d:39:0a:ad:
                    b9:70:86:74:f8:9f:13:b8:f8:5d:6c:55:85:0e:56:
                    f7:76:74:bc:d7:1e:11:56:c7:63:f8:fd:eb:f3:85:
                    f6:74:b2:3a:0c:6c:51:c1:f5:8d:3c:d9:56:52:61:
                    70:34:18:ab:db:d6:89:f8:45:ec:74:38:f5:d8:c1:
                    7b:08:ac:2d:cf:47:23:81:01:e8:a3:bf:ac:7e:32:
                    2f:96:18:f2:be:a0:56:2e:24:66:83:26:26:61:bd:
                    4a:2b:c0:01:7b:06:b3:69:ca:ed:c9:67:26:fe:2d:
                    33:5a:df:be:ac:ea:ad:ce:52:e3:7f:df:6d:74:fe:
                    1d:9b:5d:33:dd:a3:12:b1:65:00:f0:c8:b7:1b:98:
                    9f:5b:b4:2c:dc:b7:ea:90:8b:52:0f:ea:01:74:08:
                    56:31:13:44:a9:c8:d6:fd:87:ed:0a:e1:06:a7:81:
                    29:03:6a:03:ce:0f:5c:5b:03:17:0d:ff:27:d2:ae:
                    ce:43:04:f6:0b:e0:87:19:7e:ed:0d:cd:1e:fa:7b:
                    2c:23:d8:96:e7:70:1a:7c:77:55:66:27:7c:09:94:
                    80:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2E:F4:7A:B4:51:F0:18:F1:BA:51:C6:82:06:0F:83:93:D5:93:58
            X509v3 Authority Key Identifier:
                keyid:A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a3:70:9c:d9:e4:39:da:4e:7d:8b:fc:ff:20:db:c4:28:af:
         1d:18:59:aa:89:23:37:47:87:0d:56:79:1d:4c:8a:9a:a0:03:
         e1:13:2e:bd:83:f8:1e:1e:fe:b9:a2:27:8a:1c:14:f6:71:13:
         52:ea:a1:1c:fc:ba:18:29:f6:d0:ed:c3:49:7c:0b:bb:6f:94:
         6b:aa:02:a1:6b:16:0f:8b:66:86:23:35:07:ed:4f:0a:f7:dd:
         0f:87:97:67:4d:7d:2c:ef:e1:e6:6e:60:2e:9a:51:ef:b5:4a:
         fc:03:07:60:bd:8f:06:61:1e:4b:64:d3:62:9a:a5:08:9e:60:
         fc:80:60:76:22:31:76:f1:bb:d3:c0:41:06:47:66:a1:a9:68:
         3b:62:d3:e0:22:d8:19:0f:89:a5:e8:0c:05:be:25:8b:47:28:
         e8:3a:1b:b6:21:9d:29:12:22:02:18:d2:39:b6:87:2e:4c:eb:
         95:18:67:18:7b:0e:00:02:48:90:90:2b:e1:f4:a1:2a:2c:0a:
         0f:9c:f3:11:44:6d:d6:f5:91:a8:de:dd:60:87:9d:3b:37:3d:
         ed:4d:79:23:cf:81:e5:48:6d:45:10:5f:a5:55:9a:c1:ca:03:
         ac:48:8c:db:9e:95:11:87:4c:9c:fd:c9:21:9f:14:aa:04:2e:
         5d:df:5e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:23 2026 by rpki-client