Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
File:                     PtW83-CttrlBURh__axK6PMRpvE.mft (raw, json)
Hash identifier:          M0BE2dR4vbIzjE4e9lTFsMtQsfViMR8kE0b5SDfWUIU=
Subject key identifier:   ED:EC:63:40:CB:8F:7E:D5:B5:9E:E1:07:45:96:8E:C7:AD:6A:FC:CF
Authority key identifier: 3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1
Certificate issuer:       /CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
Certificate serial:       019D2A050CB636F5D2700084F36CECAE8B56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
Manifest number:          181C
Signing time:             Thu 26 Mar 2026 12:01:07 +0000
Manifest this update:     Thu 26 Mar 2026 12:01:07 +0000
Manifest next update:     Fri 27 Mar 2026 12:01:07 +0000
Files and hashes:         1: PtW83-CttrlBURh__axK6PMRpvE.crl (hash: 9QrcWjEURF8ME0g01WhKohHjqqyA0QppJ3Kp+nB4tMo=)
                          2: cUOwzS6zZJ75wp4AMkGAVEGIHAM.roa (hash: zhJ7nX2X7NThWP5yAOvlZvDnjb68FXcjF71dp2XEQHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:05:0c:b6:36:f5:d2:70:00:84:f3:6c:ec:ae:8b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
        Validity
            Not Before: Mar 26 12:01:07 2026 GMT
            Not After : Mar 27 12:01:07 2026 GMT
        Subject: CN=edec6340cb8f7ed5b59ee10745968ec7ad6afccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8e:24:6d:18:18:5a:64:9a:f8:ac:b1:e3:66:
                    b4:b6:05:7c:1c:32:1c:c9:09:62:83:39:09:c7:ed:
                    14:12:aa:82:7c:91:34:bd:1e:66:d6:10:c5:39:31:
                    5c:e0:13:47:c3:81:fb:cc:29:fb:bc:30:cf:d7:bd:
                    c9:b7:d5:cc:7e:b0:9f:e6:b6:61:62:31:54:69:4e:
                    f6:01:c6:b0:ec:7e:4c:2e:7d:1b:3e:d3:d1:2c:eb:
                    36:44:f0:72:6e:43:e3:96:6b:21:d9:90:cb:5d:37:
                    04:d7:37:b1:1a:09:c1:23:d4:73:b0:dd:9d:a5:f9:
                    4c:47:c8:fc:1a:6d:6e:f2:40:61:cb:52:b1:ac:20:
                    d7:8d:4a:d1:06:8f:f5:b1:f6:ec:b4:6b:b1:1f:19:
                    51:df:d9:3b:83:c7:ca:17:d7:22:f4:f0:e2:ff:98:
                    41:d1:20:20:fe:44:b1:6f:03:31:05:97:7e:66:d6:
                    8a:02:c8:65:ce:ae:6f:3e:c3:a6:e1:82:7b:28:ee:
                    ac:14:5b:2f:da:f5:f0:00:d9:62:42:b4:9f:be:bc:
                    73:07:7a:85:07:c2:94:11:39:2a:29:0c:0c:8f:5c:
                    53:c8:1f:f5:bf:e3:c8:f8:cc:cf:86:2c:cd:f3:02:
                    ea:be:50:89:dc:b8:e4:a5:d0:45:19:98:ca:d7:0f:
                    bc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EC:63:40:CB:8F:7E:D5:B5:9E:E1:07:45:96:8E:C7:AD:6A:FC:CF
            X509v3 Authority Key Identifier:
                keyid:3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:37:41:c6:c9:af:06:ec:65:d1:0f:e4:03:07:9d:6a:11:47:
         05:e8:2d:46:8e:40:c6:71:c3:00:06:77:e5:c8:ca:34:32:ef:
         46:b9:ba:04:1e:63:8e:24:ec:30:b0:cc:56:d1:4b:d0:e1:03:
         70:2c:58:b7:e1:f2:7c:d0:3b:41:b2:f2:a0:cc:f8:17:e2:54:
         14:c2:72:95:27:86:c3:5f:bb:5c:1d:b9:9e:fd:58:84:b4:76:
         e7:a7:1c:25:8f:d8:4f:f9:cc:ef:b5:1c:85:09:a2:6e:4b:d0:
         1e:1a:fe:77:cf:a7:a0:c1:ed:72:21:6a:c7:fa:d8:45:ff:2d:
         66:50:c1:f0:d3:fd:26:12:e2:4b:22:92:de:1f:23:f8:3d:42:
         97:eb:74:1a:be:1d:45:0b:9b:f5:9a:5d:2c:c5:b9:6f:40:d2:
         39:ad:78:78:ad:78:15:a9:c5:2e:c9:a9:69:ad:97:14:21:39:
         24:05:d8:be:28:72:3a:c5:53:88:53:6c:51:35:ed:85:5c:00:
         e0:f1:b3:f8:7a:0f:53:c4:bb:40:a9:ac:e5:4f:ce:1e:9f:22:
         61:4d:b9:be:cb:8b:9f:d9:6a:06:2b:46:af:d4:dc:95:45:f7:
         fd:88:81:08:c6:db:c7:db:25:08:50:79:38:a8:76:92:48:62:
         38:11:95:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBQy2NvXScACE82zsrotWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZDViY2RmZTBhZGI2Yjk0MTUxMTg3ZmZkYWM0YWU4ZjMx
MWE2ZjEwHhcNMjYwMzI2MTIwMTA3WhcNMjYwMzI3MTIwMTA3WjAzMTEwLwYDVQQD
EyhlZGVjNjM0MGNiOGY3ZWQ1YjU5ZWUxMDc0NTk2OGVjN2FkNmFmY2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo4kbRgYWmSa+Kyx42a0tgV8HDIc
yQligzkJx+0UEqqCfJE0vR5m1hDFOTFc4BNHw4H7zCn7vDDP173Jt9XMfrCf5rZh
YjFUaU72Acaw7H5MLn0bPtPRLOs2RPBybkPjlmsh2ZDLXTcE1zexGgnBI9RzsN2d
pflMR8j8Gm1u8kBhy1KxrCDXjUrRBo/1sfbstGuxHxlR39k7g8fKF9ci9PDi/5hB
0SAg/kSxbwMxBZd+ZtaKAshlzq5vPsOm4YJ7KO6sFFsv2vXwANliQrSfvrxzB3qF
B8KUETkqKQwMj1xTyB/1v+PI+MzPhizN8wLqvlCJ3LjkpdBFGZjK1w+8KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3sY0DLj37VtZ7hB0WWjsetavzPMB8GA1UdIwQY
MBaAFD7VvN/grba5QVEYf/2sSujzEabxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHRXODMtQ3R0cmxCVVJoX19heEs2UE1ScHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xYjgyOTItODZlNy00ZmI1LWEzODct
MmFlOTBjM2ZhZTMxLzEvUHRXODMtQ3R0cmxCVVJoX19heEs2UE1ScHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8xYjgyOTItODZlNy00ZmI1LWEzODctMmFlOTBjM2ZhZTMx
LzEvUHRXODMtQ3R0cmxCVVJoX19heEs2UE1ScHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzdBxsmv
Buxl0Q/kAwedahFHBegtRo5AxnHDAAZ35cjKNDLvRrm6BB5jjiTsMLDMVtFL0OED
cCxYt+HyfNA7QbLyoMz4F+JUFMJylSeGw1+7XB25nv1YhLR256ccJY/YT/nM77Uc
hQmibkvQHhr+d8+noMHtciFqx/rYRf8tZlDB8NP9JhLiSyKS3h8j+D1Cl+t0Gr4d
RQub9ZpdLMW5b0DSOa14eK14FanFLsmpaa2XFCE5JAXYvihyOsVTiFNsUTXthVwA
4PGz+HoPU8S7QKms5U/OHp8iYU25vsuLn9lqBitGr9TclUX3/YiBCMbbx9slCFB5
OKh2kkhiOBGV1w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:49:23 2026 by rpki-client