Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File:                     pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier:          lacovs7Tb2/JmxMzGk+cZoMwwciaSxbzRs0X5mgc/Qc=
Subject key identifier:   E4:E9:97:22:EA:0D:03:E5:26:FC:B2:A8:F3:69:3E:8A:59:30:69:3E
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer:       /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial:       01A12B7B547733D0A0873612A0CE5D6DB1D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number:          164F
Signing time:             Sun 11 Oct 2026 15:01:05 +0000
Manifest this update:     Sun 11 Oct 2026 15:01:05 +0000
Manifest next update:     Mon 12 Oct 2026 15:01:05 +0000
Files and hashes:         1: 6VaHOeY6AcBLw-YDB_VDzRdCFec.roa (hash: EDZ8ZDlRf0UI+t71ebVA+hoZLE/+Ioh5PJyv02H05wY=)
                          2: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: qsUVaOjNzt1tPwsI5OkO61Uy0+NghkKLmLSe8oPThZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:7b:54:77:33:d0:a0:87:36:12:a0:ce:5d:6d:b1:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
        Validity
            Not Before: Oct 11 15:01:05 2026 GMT
            Not After : Oct 12 15:01:05 2026 GMT
        Subject: CN=e4e99722ea0d03e526fcb2a8f3693e8a5930693e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:77:1b:57:4c:ad:64:d8:c6:1a:d5:0a:24:c2:
                    f6:57:14:a0:3b:2c:32:55:27:3e:2a:bd:25:71:07:
                    16:d4:2e:80:28:e5:76:52:a2:7a:15:3c:df:65:62:
                    7d:9a:72:27:fd:54:83:2c:50:e7:23:97:33:42:37:
                    ab:6a:af:34:fd:76:12:0c:25:e2:65:cf:37:7e:07:
                    69:5e:6c:85:df:32:3b:04:30:75:1b:48:34:bf:ff:
                    29:66:f9:96:8e:61:f0:63:9c:2f:e6:61:83:01:02:
                    47:7b:44:4d:15:b6:05:db:52:49:37:e1:cf:47:8f:
                    42:83:03:6e:0d:91:c3:e4:24:5c:cb:59:69:a2:52:
                    da:76:57:37:b3:46:be:6f:53:8b:85:56:a6:10:1c:
                    d9:49:70:dd:10:1c:8b:66:00:56:77:e8:96:31:b8:
                    32:1d:07:36:ff:7d:29:46:93:e2:f7:a1:3f:82:dc:
                    c8:f3:e5:98:a5:e6:e0:70:5d:43:e8:51:70:82:3c:
                    96:ff:4e:0a:c1:d2:2b:08:5f:26:e0:23:2b:32:9c:
                    49:ee:a2:72:e9:c7:7b:a0:86:35:1f:fb:10:af:da:
                    ae:ef:9d:eb:cd:22:ab:98:a8:66:72:d3:e9:88:35:
                    1b:d7:a5:a5:c2:02:2e:61:84:9f:61:b4:20:2b:7d:
                    c6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E9:97:22:EA:0D:03:E5:26:FC:B2:A8:F3:69:3E:8A:59:30:69:3E
            X509v3 Authority Key Identifier:
                keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:60:33:d5:4e:de:76:7d:33:cf:80:a7:91:b2:96:6e:33:df:
         34:79:2d:d9:f2:2b:e1:2d:c4:5c:68:81:e3:33:29:d6:3d:09:
         f9:54:0b:af:64:14:24:bf:99:5c:88:f9:53:6b:ab:06:de:9a:
         52:d9:4f:c9:34:f8:2d:2a:0e:f8:25:29:a6:0e:c9:75:05:0c:
         79:b1:da:85:1c:f0:34:10:de:0c:b3:a2:d4:fc:42:58:bd:0d:
         d2:47:20:4d:63:cf:cd:1b:ed:57:a0:34:7c:35:34:17:f2:13:
         cb:98:a3:68:e2:76:42:a5:4c:c3:12:94:40:0f:cf:f8:43:a2:
         62:a6:a5:e4:98:12:cb:f2:53:bc:89:00:8d:1c:02:b2:5d:40:
         d8:19:52:70:3d:9e:7b:8d:a3:e9:20:74:1c:bc:62:ac:0c:85:
         8b:09:d1:36:5f:3e:5d:50:24:92:bc:a9:26:18:e0:ea:97:a8:
         3f:e3:19:2b:63:99:b7:d7:3f:43:2c:6d:51:ff:18:1e:93:0b:
         6c:82:e7:c2:05:39:22:89:ab:db:b4:38:7e:a7:55:c6:da:41:
         4f:a4:85:66:3d:79:5b:f5:15:ca:d5:23:8c:3a:19:c5:e8:19:
         05:c7:0b:45:d2:fe:7c:ee:2a:6c:bd:f0:6d:53:82:62:6a:9a:
         67:cc:03:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:24:51 2026 by rpki-client