Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
File:                     pl24nou2YPIetcSvO5rdUtV-uJ8.mft (raw, json)
Hash identifier:          wF4taDC6S6gi+rjE5ypjgWiQyIZSv0rUYqm+4vJ0eeY=
Subject key identifier:   F2:88:09:30:DA:D6:4B:42:67:46:D6:0F:14:95:3A:FC:DF:5A:4E:92
Authority key identifier: A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
Certificate issuer:       /CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Certificate serial:       01A0D2DE2808944A345EB5DAA0409B469BBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
Manifest number:          07D6
Signing time:             Thu 24 Sep 2026 10:02:49 +0000
Manifest this update:     Thu 24 Sep 2026 10:02:49 +0000
Manifest next update:     Fri 25 Sep 2026 10:02:49 +0000
Files and hashes:         1: NnDti1qolMnRdu6TKLIWSO85A8k.roa (hash: rZbXVayKsphGvgxDa2Rkpb2xF4uS1h5k4Mw2d6eGCNs=)
                          2: pl24nou2YPIetcSvO5rdUtV-uJ8.crl (hash: pqJV4jaMdrgUI+598KYgMAmnh3vf2FmXW3ItLXh4798=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:de:28:08:94:4a:34:5e:b5:da:a0:40:9b:46:9b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
        Validity
            Not Before: Sep 24 10:02:49 2026 GMT
            Not After : Sep 25 10:02:49 2026 GMT
        Subject: CN=f2880930dad64b426746d60f14953afcdf5a4e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e6:dc:e9:33:4a:42:b2:86:40:fd:05:dd:5e:
                    03:2c:83:64:91:b3:b6:32:44:b8:d3:57:36:2f:4b:
                    b1:b1:b6:09:93:2b:5c:ec:35:ce:73:e4:14:34:7e:
                    e8:45:c0:ff:c7:22:b2:1e:25:11:80:85:5f:88:6d:
                    6f:db:f3:58:1e:3a:d1:6e:7a:fc:02:d5:8e:f3:0d:
                    d4:c5:f0:67:6d:4b:8f:4a:7e:a0:6e:74:9c:1f:a8:
                    6b:14:36:55:3b:e4:f5:4e:dd:bd:50:fe:f6:76:a1:
                    31:c8:45:1b:b6:31:ad:46:12:59:7a:90:5b:41:02:
                    2e:9b:01:39:38:b9:71:12:12:d3:94:5d:cd:b8:9b:
                    9b:55:6b:a6:1f:18:ca:8b:74:5f:46:70:a5:6a:a1:
                    4c:b7:0f:65:20:0b:6a:80:21:b0:a4:64:94:6d:3d:
                    8b:be:fb:8d:27:85:49:bb:c0:b2:5c:df:57:39:0c:
                    2d:ea:9f:5e:08:ed:ba:3f:e1:f5:47:18:ee:75:f8:
                    0f:fd:c5:25:48:d3:bd:df:8b:25:42:8d:6b:79:9a:
                    a9:c5:83:33:16:20:53:e3:62:ff:7a:a7:05:d1:f4:
                    37:4a:11:c5:be:a3:d5:93:8e:bd:52:4f:84:c6:10:
                    ac:de:fe:b0:9e:44:d4:dd:96:18:ae:1c:13:e3:51:
                    1a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:88:09:30:DA:D6:4B:42:67:46:D6:0F:14:95:3A:FC:DF:5A:4E:92
            X509v3 Authority Key Identifier:
                keyid:A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:23:36:71:19:13:c4:d0:22:3d:89:c4:af:c4:e4:ac:50:ca:
         33:4e:80:fb:3d:4e:76:d5:af:01:ec:27:dc:0c:df:11:67:2f:
         fc:13:55:23:88:c4:b0:00:7f:fb:71:11:ee:8d:66:b6:e7:49:
         dc:c1:9a:2f:7d:d0:96:b6:9d:6d:6d:1c:3b:d9:90:ee:df:4e:
         88:dc:20:54:6f:31:a3:52:71:7f:12:f7:ee:3d:b0:75:c8:19:
         b1:72:d1:5f:f8:f2:74:a0:c0:59:aa:17:9e:bf:b5:d4:f3:84:
         c4:65:8a:3a:de:91:f8:69:4f:f1:99:ef:5a:96:03:82:f7:27:
         37:9c:3c:d8:17:cc:81:78:e3:62:18:53:16:a9:88:40:ec:47:
         e4:2c:02:e9:44:fa:9c:c5:89:f7:4b:c5:b2:39:9c:8f:ee:bc:
         5c:47:b3:b9:c2:0b:75:4c:d0:ea:88:c3:ca:4d:1a:08:ac:a2:
         8a:f7:fb:2b:7a:9d:d7:84:db:f1:65:62:20:63:ac:1d:70:fc:
         91:fe:7e:5d:1e:e8:90:a1:8e:eb:b6:14:0b:54:37:65:10:e5:
         ad:80:04:ef:2a:92:16:65:a0:fb:64:b3:85:e8:59:66:14:d2:
         c1:c3:37:81:24:62:ee:27:02:01:32:5f:3a:06:da:0d:8b:30:
         3e:dd:85:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDS3igIlEo0XrXaoECbRpu7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NWRiODllOGJiNjYwZjIxZWI1YzRhZjNiOWFkZDUyZDU3
ZWI4OWYwHhcNMjYwOTI0MTAwMjQ5WhcNMjYwOTI1MTAwMjQ5WjAzMTEwLwYDVQQD
EyhmMjg4MDkzMGRhZDY0YjQyNjc0NmQ2MGYxNDk1M2FmY2RmNWE0ZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+bc6TNKQrKGQP0F3V4DLINkkbO2
MkS401c2L0uxsbYJkytc7DXOc+QUNH7oRcD/xyKyHiURgIVfiG1v2/NYHjrRbnr8
AtWO8w3UxfBnbUuPSn6gbnScH6hrFDZVO+T1Tt29UP72dqExyEUbtjGtRhJZepBb
QQIumwE5OLlxEhLTlF3NuJubVWumHxjKi3RfRnClaqFMtw9lIAtqgCGwpGSUbT2L
vvuNJ4VJu8CyXN9XOQwt6p9eCO26P+H1RxjudfgP/cUlSNO934slQo1reZqpxYMz
FiBT42L/eqcF0fQ3ShHFvqPVk469Uk+ExhCs3v6wnkTU3ZYYrhwT41EahQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKICTDa1ktCZ0bWDxSVOvzfWk6SMB8GA1UdIwQY
MBaAFKZduJ6LtmDyHrXErzua3VLVfrifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGwyNG5vdTJZUElldGNTdk81cmRVdFYtdUo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zYjA2YTMtY2FmNC00ZDZjLWJiN2It
YTM1NzhjOTQ0MDQwLzEvcGwyNG5vdTJZUElldGNTdk81cmRVdFYtdUo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8zYjA2YTMtY2FmNC00ZDZjLWJiN2ItYTM1NzhjOTQ0MDQw
LzEvcGwyNG5vdTJZUElldGNTdk81cmRVdFYtdUo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSM2cRkT
xNAiPYnEr8TkrFDKM06A+z1OdtWvAewn3AzfEWcv/BNVI4jEsAB/+3ER7o1mtudJ
3MGaL33QlradbW0cO9mQ7t9OiNwgVG8xo1JxfxL37j2wdcgZsXLRX/jydKDAWaoX
nr+11POExGWKOt6R+GlP8ZnvWpYDgvcnN5w82BfMgXjjYhhTFqmIQOxH5CwC6UT6
nMWJ90vFsjmcj+68XEezucILdUzQ6ojDyk0aCKyiivf7K3qd14Tb8WViIGOsHXD8
kf5+XR7okKGO67YUC1Q3ZRDlrYAE7yqSFmWg+2SzhehZZhTSwcM3gSRi7icCATJf
OgbaDYswPt2FIg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:38:03 2026 by rpki-client