Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File:                     PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier:          CYcsM0DT2a+AZEgmxZKj9LLA7fNd/OkL365uJw6wn20=
Subject key identifier:   07:3B:DC:12:16:84:51:DD:1C:E7:8B:CC:36:C5:84:55:23:79:52:6D
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer:       /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial:       019FA82C26FCF001E6C119FFD68978B6E2DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number:          091D
Signing time:             Tue 28 Jul 2026 10:01:33 +0000
Manifest this update:     Tue 28 Jul 2026 10:01:33 +0000
Manifest next update:     Wed 29 Jul 2026 10:01:33 +0000
Files and hashes:         1: 9uk6h9xF4kxalmFUsBTJDDo8HTA.asa (hash: /5fi9Iwco73mOcHBLAiptgK6adyi9tUj9BQTP0DMmDs=)
                          2: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: /Sbsl2xLH6uKsAQ4j9IvLHw7jis/ZXlYrfKEP+gGQps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2c:26:fc:f0:01:e6:c1:19:ff:d6:89:78:b6:e2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
        Validity
            Not Before: Jul 28 10:01:33 2026 GMT
            Not After : Jul 29 10:01:33 2026 GMT
        Subject: CN=073bdc12168451dd1ce78bcc36c584552379526d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ca:ab:fa:d8:08:d7:24:f2:bc:2d:b2:c8:09:
                    a2:67:13:cd:a8:1d:25:7b:97:ed:88:69:ef:db:a7:
                    ec:bd:c6:d2:51:5b:f8:87:eb:fa:1e:68:a0:5d:d5:
                    cb:8b:53:4d:7e:70:d4:8a:69:e3:b7:05:f5:e6:e5:
                    3a:19:ed:70:d2:b4:d7:ff:04:c5:bc:e4:b3:5a:5c:
                    93:23:fc:7b:40:51:d1:e3:d8:c0:4f:3b:52:f1:88:
                    f1:4a:d7:16:bd:48:77:d3:c9:33:31:9e:50:d9:ab:
                    16:70:74:a0:51:df:a5:7e:98:65:cd:4c:fb:91:f3:
                    01:dd:c1:be:3b:f9:5e:a8:c7:a4:0e:00:d4:2b:0c:
                    61:25:7c:1f:c0:b1:80:ad:1b:aa:18:8d:c7:67:56:
                    d5:2c:f4:53:88:cd:31:0e:78:07:10:7a:40:e7:fc:
                    26:35:2f:11:ce:d9:ad:50:b9:f5:45:85:e4:27:c5:
                    7f:3b:6c:4a:4a:bd:cd:e9:fe:c9:b7:47:8d:f6:38:
                    3f:5e:7c:51:57:0d:c8:d9:2b:b3:4c:c6:77:e6:0b:
                    e2:eb:6a:cd:a8:b6:4a:7d:6e:99:f8:79:dc:ce:ae:
                    a5:4c:e5:7f:c8:e4:70:f9:f0:04:f1:88:f1:85:c2:
                    79:0a:02:6c:c7:7e:6c:c2:f0:86:7e:0d:35:f7:5a:
                    ed:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3B:DC:12:16:84:51:DD:1C:E7:8B:CC:36:C5:84:55:23:79:52:6D
            X509v3 Authority Key Identifier:
                keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:31:f0:cc:27:8c:07:36:74:c2:d1:58:50:9c:a9:3a:f2:97:
         0d:79:01:c6:00:aa:93:b9:b0:bf:c9:dc:b2:ec:4a:20:1b:20:
         e7:71:92:15:ef:b5:75:6d:2a:d1:fd:05:ce:86:5b:2b:2b:95:
         3b:78:96:31:ed:4c:3d:ce:02:7d:80:dc:f8:89:dd:d5:83:21:
         ac:f8:49:54:7f:73:d1:32:1b:04:3b:2c:32:ea:4b:e7:8a:72:
         64:64:a2:e9:4c:ca:41:f1:d4:f4:cf:71:09:7b:b5:b1:b1:7b:
         13:30:03:57:4b:7b:fe:b2:42:b4:9b:a8:f5:13:66:b5:96:6f:
         e0:30:d8:3c:a4:28:50:a0:31:73:43:5f:52:7a:af:28:04:18:
         80:70:8e:05:05:d9:ee:6b:5a:14:e4:58:b4:e6:7c:82:00:3f:
         74:1d:d6:82:63:b7:3f:83:70:20:d7:96:17:a7:96:a9:63:3f:
         a2:96:c6:c0:96:58:56:e2:56:aa:af:11:b8:3a:40:11:da:2a:
         7d:6c:5e:14:0b:26:31:1d:35:73:c8:b2:58:76:1c:6b:dd:ba:
         17:14:73:7e:3c:3a:4f:eb:f8:5c:18:e3:c4:35:ef:4a:78:31:
         62:69:8b:56:6a:32:4d:d5:ab:50:c9:75:13:23:d0:ea:b1:d3:
         d5:ec:bc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:59 2026 by rpki-client