Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
File:                     pl24nou2YPIetcSvO5rdUtV-uJ8.mft (raw, json)
Hash identifier:          alVUqfcB9VfPTU3FRI4rMcVID28sPzYr2VqoNfQQ378=
Subject key identifier:   2F:B7:9E:0C:C6:ED:81:DF:FB:0F:E9:6B:A1:64:CA:FF:0D:D7:7C:99
Authority key identifier: A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
Certificate issuer:       /CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Certificate serial:       019D9850328785FC9FDDE4CC25B074E56589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
Manifest number:          062A
Signing time:             Thu 16 Apr 2026 22:01:25 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:25 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:25 +0000
Files and hashes:         1: NnDti1qolMnRdu6TKLIWSO85A8k.roa (hash: rZbXVayKsphGvgxDa2Rkpb2xF4uS1h5k4Mw2d6eGCNs=)
                          2: pl24nou2YPIetcSvO5rdUtV-uJ8.crl (hash: ag5b8H1PoOmClNdzOIYkwjE1AYpo2zLb2fF54/ftpgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:32:87:85:fc:9f:dd:e4:cc:25:b0:74:e5:65:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
        Validity
            Not Before: Apr 16 22:01:25 2026 GMT
            Not After : Apr 17 22:01:25 2026 GMT
        Subject: CN=2fb79e0cc6ed81dffb0fe96ba164caff0dd77c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1e:e4:31:36:2e:fa:27:57:29:8a:28:fb:02:
                    c2:29:b6:54:48:8c:de:e4:56:3c:f2:2a:46:48:04:
                    cf:06:b2:ce:40:d1:df:db:90:c7:bc:2d:24:1a:db:
                    dc:3b:4d:9a:3b:c0:72:9e:48:9c:25:f5:2b:77:f4:
                    a2:73:9a:b3:3e:0b:de:f6:d3:87:e1:7d:b1:50:ab:
                    79:00:71:dc:ee:8e:d3:be:05:03:a6:9d:71:5f:64:
                    a5:b6:f9:c6:62:3f:6d:00:96:80:90:fc:88:7d:1a:
                    b6:93:60:0d:27:2e:e9:3c:88:02:aa:0d:74:19:e0:
                    73:b2:de:2c:08:04:c1:16:12:93:f4:cf:f2:c8:ec:
                    2f:82:86:a7:6f:1d:5b:ee:7e:89:53:65:f3:f3:b6:
                    2a:13:54:b9:6f:b4:31:89:60:68:6f:d8:c5:71:71:
                    4b:d2:37:5c:4d:33:fc:d3:26:77:9b:41:e0:0e:70:
                    74:4b:fe:4e:ac:ea:c1:d0:a4:74:ba:6e:53:86:7b:
                    60:3f:cf:c5:8c:9c:7a:09:fe:d9:76:7b:49:69:58:
                    99:ae:c1:d6:dd:73:79:2a:21:0c:2d:37:c2:a6:8b:
                    66:2a:73:a9:21:54:dc:c3:e4:df:4c:31:e9:c3:d9:
                    32:f5:2a:4f:42:00:53:fa:a3:6d:83:ed:21:d3:a1:
                    7c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B7:9E:0C:C6:ED:81:DF:FB:0F:E9:6B:A1:64:CA:FF:0D:D7:7C:99
            X509v3 Authority Key Identifier:
                keyid:A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:37:21:62:22:5e:4c:7b:f7:1a:e8:47:81:fa:5e:6e:3e:32:
         ac:1a:c5:a3:f2:04:42:c3:11:33:30:d9:7b:f1:25:d4:d4:40:
         f4:da:02:2e:d3:f6:2f:58:9b:ea:3c:24:95:22:25:c0:24:c4:
         29:de:6d:b6:e0:84:61:1d:96:f8:e8:59:87:42:e6:b7:d6:fc:
         5c:4e:ba:be:06:d2:0c:d7:59:b7:75:d8:d4:f0:8f:28:9a:22:
         5e:62:54:aa:98:14:e0:9a:75:79:3e:ef:0b:f3:e0:68:d7:c5:
         5c:3a:bd:a2:13:44:29:11:61:38:5a:3c:33:4c:a4:2a:d2:85:
         b3:f0:95:6c:52:40:1d:c3:09:ff:d9:02:90:aa:92:17:6f:b5:
         0b:92:65:bd:e9:3e:c3:a2:8c:ad:10:0e:52:15:76:cd:a1:fe:
         57:9c:27:25:ab:8e:4f:f9:71:f1:8d:3b:a9:c4:e3:6c:20:a5:
         c6:ff:07:09:c7:dc:ee:b9:9d:ae:f9:22:bf:8b:74:f4:96:77:
         6a:b3:56:d9:d2:04:93:6c:e1:b1:90:19:19:37:a6:a3:32:08:
         57:4b:d2:3d:dd:00:48:df:7d:57:77:b0:02:80:16:0c:61:3a:
         d5:97:51:17:bd:50:ea:e3:57:5d:86:7b:c7:ff:a9:db:d2:da:
         cd:db:00:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:06:46 2026 by rpki-client