Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft
File:                     pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft (raw, json)
Hash identifier:          pn9CYf4CqT8t2sBlcuE0ojihefYfvGt7ths/R1+Z4zY=
Subject key identifier:   61:84:A0:5E:A3:A8:C7:6A:A7:67:77:B2:1A:48:F3:CC:72:A8:AE:2B
Authority key identifier: A6:5F:99:56:03:66:3A:56:94:30:CC:C6:17:28:7E:91:9D:F1:44:A0
Certificate issuer:       /CN=a65f995603663a569430ccc617287e919df144a0
Certificate serial:       019A4DE16A86231B233DB94FD6CAA937FB59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft
Manifest number:          122B
Signing time:             Tue 04 Nov 2025 08:00:09 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:09 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:09 +0000
Files and hashes:         1: bOKc5OfkNTYPFxlTts0wqCFe3RM.roa (hash: V84JFOGtu1RZTKKpVLc0/478v9UFmxFvSlNuGf0rXZ4=)
                          2: pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.crl (hash: aRc9yyYbYDbaF/hyFLjfGiNjcTg+vqGkQb+83MI/mYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e1:6a:86:23:1b:23:3d:b9:4f:d6:ca:a9:37:fb:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65f995603663a569430ccc617287e919df144a0
        Validity
            Not Before: Nov  4 08:00:09 2025 GMT
            Not After : Nov  5 08:00:09 2025 GMT
        Subject: CN=6184a05ea3a8c76aa76777b21a48f3cc72a8ae2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c7:8c:16:88:50:c5:36:9d:76:69:d6:5c:6d:
                    18:17:07:61:ac:be:7c:84:34:47:00:76:ea:0f:da:
                    ea:97:b0:e0:07:b6:91:34:4b:ac:76:4b:41:34:4d:
                    ee:15:59:62:ae:25:36:74:05:5e:d5:03:65:44:0c:
                    aa:ce:c6:a5:e4:98:25:ea:5d:9c:08:2e:46:57:42:
                    c8:ba:04:44:8d:ba:95:1e:57:38:de:c8:c6:f8:21:
                    2d:8a:ea:8b:2f:4d:de:e0:89:11:cd:c8:99:e3:00:
                    e5:cc:f7:5b:a7:fa:bb:64:98:95:a7:16:d7:9a:8c:
                    6a:0d:53:48:52:26:87:8d:92:ee:c7:6b:71:a7:f0:
                    7d:9d:86:7b:8a:29:e4:8f:be:b7:db:36:7e:13:fa:
                    03:e1:11:0a:cd:8f:eb:d0:c5:12:f2:ff:10:f0:e0:
                    f8:42:29:00:e3:cb:f9:d8:9c:2b:4e:81:4e:1b:a5:
                    cd:9d:ae:70:db:1a:0f:9b:fc:71:44:38:a4:a3:e1:
                    aa:1f:c0:36:b7:d5:de:b1:97:1e:5e:b6:c8:cf:21:
                    81:e9:eb:19:b7:a3:54:26:65:58:b5:d4:4b:98:0a:
                    5a:d1:bd:7d:50:60:ba:73:69:01:42:a0:a5:b8:28:
                    15:93:36:82:f2:6b:88:21:49:0a:0a:be:05:64:ae:
                    a5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:84:A0:5E:A3:A8:C7:6A:A7:67:77:B2:1A:48:F3:CC:72:A8:AE:2B
            X509v3 Authority Key Identifier:
                keyid:A6:5F:99:56:03:66:3A:56:94:30:CC:C6:17:28:7E:91:9D:F1:44:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:14:e2:6b:7f:58:a3:86:ff:1f:e8:92:2c:fc:fc:24:90:b9:
         ac:1a:c3:3d:5b:29:eb:3e:ab:24:28:e2:d6:75:54:c4:ce:8e:
         0b:49:34:5d:60:84:d6:02:61:6f:b8:2e:9a:b0:59:9d:1e:d0:
         7a:ba:db:e2:3e:a5:8d:18:41:63:70:0a:37:1c:a2:17:a2:3d:
         7e:c2:e9:09:f4:9a:9d:39:e5:a2:10:a5:79:75:e2:02:ea:49:
         5e:8a:0d:86:1a:5c:87:ca:e6:1c:9c:b0:99:11:d4:e8:61:c8:
         44:21:86:da:25:e9:17:7a:e4:60:b5:a3:5d:82:eb:c5:28:0b:
         12:33:94:6b:4e:50:39:7b:e5:c0:e7:eb:8c:d8:05:93:cf:a8:
         54:71:2c:2c:7d:35:d9:c0:91:2e:20:08:8e:95:01:e1:fb:09:
         92:cb:82:d7:4d:ba:c1:3f:80:44:22:f3:a3:78:d0:b0:74:1b:
         92:57:1d:14:a0:08:8b:1b:cb:3d:fc:88:68:8b:9d:eb:9c:a7:
         fb:db:e2:a7:22:ea:ad:d0:8e:71:dc:e6:d7:4d:24:8b:46:f2:
         02:ea:72:ff:8d:e5:1c:95:86:cf:08:f4:78:59:35:d7:17:36:
         1f:b7:ca:45:01:59:0c:44:ce:2e:9a:d1:21:25:20:a1:9a:0a:
         04:ee:e1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:27:32 2025 by rpki-client