Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File:                     PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier:          VaFCtdxX3ZYsTBkVBkDqcmksmbzQDbhnoza75Ha2F/Y=
Subject key identifier:   22:5B:C9:98:B6:70:A3:9D:4D:88:CD:3F:DA:96:5F:DB:BE:CB:25:17
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer:       /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial:       019EBE7EE4887366462D04DF5F82FE413255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number:          08A4
Signing time:             Sat 13 Jun 2026 01:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:47 +0000
Files and hashes:         1: 9uk6h9xF4kxalmFUsBTJDDo8HTA.asa (hash: /5fi9Iwco73mOcHBLAiptgK6adyi9tUj9BQTP0DMmDs=)
                          2: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: iE48djdCkXYGFKVMMNEXM+2gKORFuXDpAsITb/ZmwrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:e4:88:73:66:46:2d:04:df:5f:82:fe:41:32:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
        Validity
            Not Before: Jun 13 01:00:47 2026 GMT
            Not After : Jun 14 01:00:47 2026 GMT
        Subject: CN=225bc998b670a39d4d88cd3fda965fdbbecb2517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6e:0e:39:64:31:cf:4f:eb:d1:d1:29:e4:a8:
                    08:0e:73:65:7a:57:70:a0:6c:6d:b4:67:d9:d1:64:
                    46:48:07:55:6a:da:e6:c8:63:c4:02:c2:7a:3f:80:
                    12:2c:ad:e9:c3:5f:0f:94:eb:5b:9e:7a:f4:9b:05:
                    3b:52:36:ac:98:ef:62:ac:ff:ae:9a:9c:ca:c6:c8:
                    15:f4:46:43:03:dc:5c:90:5b:93:a0:83:15:fe:ee:
                    38:27:8e:73:37:5c:78:ad:a9:6a:ee:d4:c4:e4:20:
                    08:be:d9:20:34:e2:2c:7f:20:2f:8d:ec:57:14:f7:
                    d0:2f:9c:75:6f:0b:5b:9f:6c:68:e3:fa:ed:3b:77:
                    54:81:84:37:49:f5:74:3f:e6:3c:66:f5:93:b3:ba:
                    2e:1d:61:51:55:f2:31:7c:51:6f:35:0c:fe:5d:8b:
                    1a:6c:e4:b2:e6:50:14:4c:7b:a7:36:30:1d:de:3b:
                    cd:78:83:41:c8:c5:fa:9d:ea:dd:aa:43:f6:86:a5:
                    0d:87:ad:8a:5a:aa:67:bf:18:f2:b5:df:65:5b:17:
                    94:5e:f9:38:f2:72:79:6e:10:7a:7d:2e:cf:fd:f1:
                    2d:cb:da:e0:2c:c9:d3:d3:d7:39:6a:5b:39:96:b7:
                    b2:c0:78:03:78:09:8c:ee:43:31:df:3c:f0:45:f5:
                    88:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5B:C9:98:B6:70:A3:9D:4D:88:CD:3F:DA:96:5F:DB:BE:CB:25:17
            X509v3 Authority Key Identifier:
                keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a2:45:d5:a0:55:68:e7:a2:ff:d1:dd:97:7b:e5:24:be:4c:
         36:9d:f4:89:ea:fc:f2:4f:ce:94:28:01:38:de:46:9e:25:c7:
         83:1d:86:d4:ab:c7:f9:54:ca:a9:e0:c0:47:1e:5b:0a:9a:79:
         cc:18:53:38:1e:16:9a:de:30:b4:a7:3e:f3:7a:0b:d3:59:fd:
         b4:1a:33:28:56:0c:9a:2e:64:90:08:9f:da:02:b0:f5:f2:3f:
         26:9d:e6:86:f0:5c:81:b1:32:dc:bd:ac:88:bf:04:26:1b:75:
         5f:6c:67:c5:43:52:14:ca:12:47:f3:79:37:6a:4e:a9:b2:62:
         d6:0c:b5:76:f7:dc:c8:7a:22:9f:1e:ce:6d:71:8f:a0:31:d2:
         21:38:4d:e7:74:e8:c0:3b:dd:52:89:9c:84:9a:de:37:56:d0:
         2b:8c:6a:cf:1f:6f:70:06:8a:ca:e5:fa:d9:3f:12:c7:8f:53:
         7f:fa:7a:9a:40:06:8a:09:27:af:b6:99:3a:3f:20:7c:69:3d:
         75:e1:56:3d:34:79:50:a7:b3:d6:89:40:fd:9d:a0:3a:b8:72:
         54:a4:52:ff:9d:52:4e:5d:f5:1e:6f:20:0c:78:a8:66:bc:e6:
         0e:fc:7a:88:5a:d1:23:e7:12:51:9a:43:7a:79:1e:8f:28:09:
         7b:88:f7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:30:31 2026 by rpki-client