Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File:                     PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier:          r03W9uTnI6wserdwouM6ikUSuj9NO/Lv6Pj9v4zgvo8=
Subject key identifier:   70:1E:F4:06:36:41:7F:A2:0B:C3:C7:11:01:7F:14:40:95:62:90:35
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer:       /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial:       01A0C93427D43E2493C3C889FA1C80C7D976
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number:          09B4
Signing time:             Tue 22 Sep 2026 13:00:33 +0000
Manifest this update:     Tue 22 Sep 2026 13:00:33 +0000
Manifest next update:     Wed 23 Sep 2026 13:00:33 +0000
Files and hashes:         1: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: ASc/hMXSWXf8aJtLwH0JXkVDCusGVRVMcyBQI4bfQH8=)
                          2: YKcDKEWIMlg76GTNhpBhJgfgseg.asa (hash: QXQfDgm1NSd802AZFlLWGYSREWy9tsWnBFqvrA0d4ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:34:27:d4:3e:24:93:c3:c8:89:fa:1c:80:c7:d9:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
        Validity
            Not Before: Sep 22 13:00:33 2026 GMT
            Not After : Sep 23 13:00:33 2026 GMT
        Subject: CN=701ef40636417fa20bc3c711017f144095629035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:27:94:dc:38:a1:47:8f:27:40:48:a3:5f:20:
                    30:52:a0:d7:4d:8d:24:4c:dc:e1:57:70:a1:c1:41:
                    e5:94:47:0d:5c:2d:04:37:f4:16:f7:e9:a9:15:93:
                    76:10:bc:76:e4:2d:71:7e:05:d6:7f:0f:c7:8d:5b:
                    50:7e:b9:b2:46:6c:4a:5c:26:cd:9e:66:a1:9d:c7:
                    75:0d:95:ca:b4:0c:cf:98:72:d5:bb:f2:54:df:2c:
                    b7:96:eb:f5:9b:5d:f7:f5:55:25:90:6f:e7:18:9a:
                    99:17:dd:83:a2:c5:1c:4e:af:3f:a5:d4:10:c1:d9:
                    74:5a:92:d6:34:c7:1c:eb:89:51:e7:0c:e4:00:30:
                    cd:a7:78:15:96:7d:e0:e3:09:a5:8c:6e:66:1d:cc:
                    cf:eb:12:71:84:a8:be:eb:fc:d5:14:1c:ea:e9:0b:
                    fd:09:48:50:1d:d0:3a:71:d4:45:de:f6:e2:c8:b2:
                    50:40:3c:6f:1c:1a:d1:4f:bc:cf:74:a5:9d:6c:ba:
                    32:cf:94:09:30:4e:a5:e0:f5:a9:c8:b9:11:f0:bd:
                    2b:49:a2:62:e0:16:67:a4:b8:ea:e0:2d:44:13:7c:
                    06:8d:e4:01:82:e9:c5:49:d9:fc:e5:be:5e:01:13:
                    c1:50:b9:17:4f:95:e7:f8:f3:2a:fb:07:d7:ec:47:
                    2a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1E:F4:06:36:41:7F:A2:0B:C3:C7:11:01:7F:14:40:95:62:90:35
            X509v3 Authority Key Identifier:
                keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:53:03:af:b0:d3:89:77:8e:77:84:20:ed:e9:ca:eb:1a:7c:
         99:19:61:53:9a:40:04:fb:14:51:da:b7:54:e5:4a:72:1c:ff:
         b0:72:a0:32:65:44:f5:59:3a:cf:48:90:7d:45:4e:d7:bc:22:
         12:5b:b3:9e:01:8c:7e:4c:d3:3d:da:cc:8a:f7:ea:2e:bf:af:
         23:c8:c0:f5:da:98:1f:b2:98:9f:d0:20:8a:86:09:cf:05:0a:
         bc:e3:02:2c:68:3b:ad:0b:72:3a:6e:0f:fe:fd:26:52:1e:fc:
         18:43:4f:f6:0a:a1:d2:b2:db:94:e6:d5:b4:cf:0a:37:60:31:
         f5:5d:8d:37:f8:b0:82:d6:88:7a:b1:33:79:be:be:b0:cd:31:
         ed:f7:83:38:ac:79:57:b9:d3:23:1a:72:23:da:5f:d7:3b:bf:
         7b:87:5b:02:d9:4c:5d:ed:7b:a1:5a:6b:f6:fb:ed:34:00:76:
         a1:af:a1:b1:e9:8f:84:07:bf:c0:79:55:91:ea:42:3b:67:5c:
         6d:f3:26:a3:e1:56:f0:ce:25:ac:4c:a6:7f:a4:be:2a:01:f3:
         89:d6:11:b9:94:9f:21:ca:8c:c8:b0:75:fd:e7:30:bd:b4:72:
         77:86:52:68:dd:af:6e:9e:af:e5:f0:1f:13:b4:c9:e4:06:9a:
         b6:67:32:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:03:28 2026 by rpki-client