Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
File:                     PtW83-CttrlBURh__axK6PMRpvE.mft (raw, json)
Hash identifier:          GP3t6Ea6q6FSw8DJHAkqdIJzE313BM5pyBA9E8q5nmM=
Subject key identifier:   45:E0:E8:D1:94:6B:18:39:36:34:8A:58:66:4F:52:A3:2F:25:4D:0A
Authority key identifier: 3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1
Certificate issuer:       /CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
Certificate serial:       0197B7EAC4828E3A9371D98AD09C135B53F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
Manifest number:          154A
Signing time:             Sat 28 Jun 2025 19:01:45 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:45 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:45 +0000
Files and hashes:         1: Hg8kBZfVcKLuM_k8GGnGJeVAvdc.roa (hash: ziqa3QYWLFKgPT8ZERs4WMz6NaXL6vju070csDXblpM=)
                          2: PtW83-CttrlBURh__axK6PMRpvE.crl (hash: HsK60T1cneQnkePeOkhbtoPbqDvG3okQgllau1KJ2oI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:c4:82:8e:3a:93:71:d9:8a:d0:9c:13:5b:53:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
        Validity
            Not Before: Jun 28 19:01:45 2025 GMT
            Not After : Jun 29 19:01:45 2025 GMT
        Subject: CN=45e0e8d1946b183936348a58664f52a32f254d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:43:07:83:95:c1:36:5a:41:9d:19:da:22:e1:
                    c6:5a:cc:e7:be:34:11:c7:c6:6d:5c:1a:9c:65:29:
                    63:88:f3:fd:07:84:87:82:72:61:a9:d1:a9:44:ae:
                    e9:bb:57:6b:b6:54:82:d8:72:d0:82:66:7c:88:de:
                    1b:14:8b:bf:52:56:36:07:f4:3d:d7:56:f7:f0:fc:
                    a1:89:d7:5f:ef:ea:2d:ae:10:15:8f:69:d1:92:d7:
                    23:7f:9c:bb:21:62:2c:73:67:a7:97:e3:3c:2d:e2:
                    42:b3:e3:5d:a7:df:b4:fe:8a:89:f2:32:ac:f2:4f:
                    18:9e:af:91:7b:5c:24:42:6b:fd:b3:62:06:53:f1:
                    c1:f3:b8:fc:4b:98:37:b4:10:57:cf:cd:4b:c7:c2:
                    0b:3f:67:a3:22:57:d4:e2:3e:f2:aa:fc:37:79:88:
                    99:6e:90:a3:03:65:01:a9:60:36:2d:c2:f7:63:51:
                    d5:e9:2e:98:28:ae:c1:54:cc:40:00:cf:a1:1b:b2:
                    59:54:c3:ba:9f:56:cf:7b:09:db:8d:58:40:1e:b0:
                    ab:cb:72:a1:a8:6a:bd:df:56:9f:ba:0c:fb:da:e3:
                    bb:0d:0f:0f:bd:f7:18:88:5a:5b:9e:95:a4:4c:93:
                    fa:03:69:5f:67:b6:16:d0:3b:19:fc:e1:5b:2a:c9:
                    4f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E0:E8:D1:94:6B:18:39:36:34:8A:58:66:4F:52:A3:2F:25:4D:0A
            X509v3 Authority Key Identifier:
                keyid:3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:21:56:4f:4c:2e:3a:de:4b:30:0b:38:04:80:51:4d:d7:18:
         b0:90:cf:9e:0d:d5:54:5b:5e:9c:94:27:5c:c7:12:a0:7d:15:
         8c:54:45:da:1d:a5:ca:56:58:f3:2b:55:0c:a2:73:00:89:6d:
         cf:b6:ef:19:9c:e9:9b:73:a2:33:f7:22:65:eb:89:e4:57:2b:
         88:98:e3:9e:f0:c9:a8:4e:f5:ba:12:20:7f:d0:36:13:4d:5e:
         35:18:3e:c8:bd:01:7f:91:eb:89:8a:cc:5d:b8:5e:93:70:66:
         d7:59:ed:2d:74:5b:a3:1c:03:89:b4:77:ee:10:45:59:04:51:
         18:28:42:e2:c0:ef:a0:8a:21:66:22:6d:f2:7f:04:e6:c3:97:
         4d:69:4e:3e:94:18:8d:8e:25:bc:fd:39:73:e9:d5:87:56:cd:
         55:41:de:22:5a:0b:5a:95:95:4c:d9:1f:46:71:6e:24:73:e2:
         b5:a3:2f:4b:08:84:1f:03:c3:06:ac:37:be:6b:e9:26:dd:2a:
         f8:5a:9f:c5:9d:ca:ff:e0:ed:b6:99:35:df:31:83:58:9a:09:
         46:b8:31:7c:5b:d7:ee:33:20:20:63:52:af:21:12:25:ed:d7:
         0b:a1:1c:e1:6a:62:a6:ba:b4:1c:d5:c3:29:b1:92:86:26:a6:
         e7:59:f2:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36sSCjjqTcdmK0JwTW1PwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZDViY2RmZTBhZGI2Yjk0MTUxMTg3ZmZkYWM0YWU4ZjMx
MWE2ZjEwHhcNMjUwNjI4MTkwMTQ1WhcNMjUwNjI5MTkwMTQ1WjAzMTEwLwYDVQQD
Eyg0NWUwZThkMTk0NmIxODM5MzYzNDhhNTg2NjRmNTJhMzJmMjU0ZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EMHg5XBNlpBnRnaIuHGWsznvjQR
x8ZtXBqcZSljiPP9B4SHgnJhqdGpRK7pu1drtlSC2HLQgmZ8iN4bFIu/UlY2B/Q9
11b38Pyhiddf7+otrhAVj2nRktcjf5y7IWIsc2enl+M8LeJCs+Ndp9+0/oqJ8jKs
8k8Ynq+Re1wkQmv9s2IGU/HB87j8S5g3tBBXz81Lx8ILP2ejIlfU4j7yqvw3eYiZ
bpCjA2UBqWA2LcL3Y1HV6S6YKK7BVMxAAM+hG7JZVMO6n1bPewnbjVhAHrCry3Kh
qGq931afugz72uO7DQ8PvfcYiFpbnpWkTJP6A2lfZ7YW0DsZ/OFbKslPFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXg6NGUaxg5NjSKWGZPUqMvJU0KMB8GA1UdIwQY
MBaAFD7VvN/grba5QVEYf/2sSujzEabxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHRXODMtQ3R0cmxCVVJoX19heEs2UE1ScHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xYjgyOTItODZlNy00ZmI1LWEzODct
MmFlOTBjM2ZhZTMxLzEvUHRXODMtQ3R0cmxCVVJoX19heEs2UE1ScHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8xYjgyOTItODZlNy00ZmI1LWEzODctMmFlOTBjM2ZhZTMx
LzEvUHRXODMtQ3R0cmxCVVJoX19heEs2UE1ScHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAliFWT0wu
Ot5LMAs4BIBRTdcYsJDPng3VVFtenJQnXMcSoH0VjFRF2h2lylZY8ytVDKJzAIlt
z7bvGZzpm3OiM/ciZeuJ5FcriJjjnvDJqE71uhIgf9A2E01eNRg+yL0Bf5HriYrM
Xbhek3Bm11ntLXRboxwDibR37hBFWQRRGChC4sDvoIohZiJt8n8E5sOXTWlOPpQY
jY4lvP05c+nVh1bNVUHeIloLWpWVTNkfRnFuJHPitaMvSwiEHwPDBqw3vmvpJt0q
+FqfxZ3K/+Dttpk13zGDWJoJRrgxfFvX7jMgIGNSryESJe3XC6Ec4Wpiprq0HNXD
KbGShiam51nytQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:21:57 2025 by rpki-client