Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft
File:                     P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft (raw, json)
Hash identifier:          RnEsoxny1LBoSNQdZkACdzcKCJqdHwz8C1q++5Go2Xg=
Subject key identifier:   3D:A3:E7:A8:15:8F:47:5B:DA:22:31:A1:A5:B7:CF:6C:D6:2C:5C:C4
Authority key identifier: 3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4
Certificate issuer:       /CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4
Certificate serial:       019CADC77EC2359A4A015BD781B7EE9668E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft
Manifest number:          1709
Signing time:             Mon 02 Mar 2026 09:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 09:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 09:00:58 +0000
Files and hashes:         1: P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl (hash: /hVxZrnIczCDmdmeBGvddRdMCttbqu+dxyd7pQ4WZC8=)
                          2: fkccfi7U2J0VPclLxq1z-10Vueg.roa (hash: 0x4LuqEdaNq3L3rQXr3MKnKIAXFaI3RqdUjnhTRxMC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:7e:c2:35:9a:4a:01:5b:d7:81:b7:ee:96:68:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4
        Validity
            Not Before: Mar  2 09:00:58 2026 GMT
            Not After : Mar  3 09:00:58 2026 GMT
        Subject: CN=3da3e7a8158f475bda2231a1a5b7cf6cd62c5cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fe:be:bb:2c:73:1c:12:39:df:3f:39:6a:99:
                    cb:6a:c4:b4:90:a5:11:47:53:a8:3d:a3:a9:ea:9e:
                    12:be:b8:5b:61:00:09:cb:ef:a7:a3:5d:3b:9c:18:
                    cf:4e:8d:e8:eb:f2:d1:3d:00:55:6d:e4:1c:7f:5d:
                    33:07:66:73:98:9b:5b:72:52:62:e7:03:3a:49:5d:
                    58:e7:57:bc:b2:40:c2:40:75:fd:cf:74:55:5c:c0:
                    4e:03:08:31:c3:6f:b5:45:41:85:8f:58:be:a8:ba:
                    c7:16:23:60:0f:25:e7:b8:2a:ed:4c:0f:bf:19:ff:
                    70:f1:57:46:ab:01:0f:e6:a6:70:26:30:69:77:a8:
                    9b:5f:ce:35:cc:22:e9:c3:83:0a:95:42:16:51:e8:
                    e2:4b:3d:81:b0:a7:d8:b4:98:b6:85:f4:8a:c8:92:
                    a4:a9:1d:32:e2:0d:8d:98:d7:45:76:1f:1b:06:59:
                    4c:47:68:59:0f:07:0c:11:dc:e3:dd:8f:92:15:85:
                    23:ea:ed:f7:c0:55:e1:d2:ae:29:f7:c2:6c:29:65:
                    4c:8e:4f:37:f0:2f:90:9c:ad:c9:c1:18:36:da:29:
                    46:25:4a:5a:93:c0:ec:f7:d5:31:2a:8e:4b:ec:a5:
                    05:b2:cb:46:04:1a:1d:84:79:e5:93:17:33:ee:84:
                    60:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A3:E7:A8:15:8F:47:5B:DA:22:31:A1:A5:B7:CF:6C:D6:2C:5C:C4
            X509v3 Authority Key Identifier:
                keyid:3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:3c:5c:40:1b:ae:0e:e8:97:fe:33:62:e0:a2:30:6d:72:c8:
         f7:76:c2:c5:da:23:c0:ac:58:51:cb:1c:46:9d:d5:87:0b:9c:
         b6:7c:32:a1:61:27:3d:ad:b1:bd:a7:78:41:ea:4e:06:ec:da:
         10:91:43:4b:45:dd:45:e8:b6:db:66:b4:be:9a:3e:22:29:f3:
         e3:c4:08:d0:dc:94:ae:03:a7:a0:74:cb:16:18:c6:b5:14:0c:
         02:0e:3b:52:8d:0a:fc:f7:27:66:83:ff:df:16:c9:0f:e1:6a:
         04:90:89:c4:50:6f:7e:fa:d2:fa:c4:75:3d:be:2c:aa:f9:15:
         62:b1:b7:15:7a:4f:42:b1:42:00:3a:bf:09:76:f3:53:62:4e:
         6c:8c:10:ac:7c:2a:af:5f:96:52:4f:e0:51:c9:14:09:06:67:
         e0:c1:35:a2:1a:f0:6b:6d:a2:a8:66:81:13:85:24:3d:f6:1f:
         dc:28:c2:ba:ce:88:05:e8:60:61:a9:fe:fe:7d:e5:b6:fa:27:
         3d:c2:40:40:e5:ed:f8:4f:17:f5:94:99:7b:c7:0a:91:26:e1:
         b3:1f:cf:7e:79:63:f3:36:87:4a:ca:0d:be:0c:b5:b6:a7:18:
         c1:26:6a:e0:38:ed:49:d7:df:8a:76:51:41:92:76:15:f1:23:
         41:2f:24:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx37CNZpKAVvXgbfulmjiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNWE2ZDk3ZmM3ODc4NDI5NDA0NTc4ZTVjYzBjYzY1MmZl
NGI0ZDQwHhcNMjYwMzAyMDkwMDU4WhcNMjYwMzAzMDkwMDU4WjAzMTEwLwYDVQQD
EygzZGEzZTdhODE1OGY0NzViZGEyMjMxYTFhNWI3Y2Y2Y2Q2MmM1Y2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v6+uyxzHBI53z85apnLasS0kKUR
R1OoPaOp6p4SvrhbYQAJy++no107nBjPTo3o6/LRPQBVbeQcf10zB2ZzmJtbclJi
5wM6SV1Y51e8skDCQHX9z3RVXMBOAwgxw2+1RUGFj1i+qLrHFiNgDyXnuCrtTA+/
Gf9w8VdGqwEP5qZwJjBpd6ibX841zCLpw4MKlUIWUejiSz2BsKfYtJi2hfSKyJKk
qR0y4g2NmNdFdh8bBllMR2hZDwcMEdzj3Y+SFYUj6u33wFXh0q4p98JsKWVMjk83
8C+QnK3JwRg22ilGJUpak8Ds99UxKo5L7KUFsstGBBodhHnlkxcz7oRgpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2j56gVj0db2iIxoaW3z2zWLFzEMB8GA1UdIwQY
MBaAFD9abZf8eHhClARXjlzAzGUv5LTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDFwdGxfeDRlRUtVQkZlT1hNRE1aU19rdE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NWYwYzEtZmU5ZC00YjA5LWI1Mjgt
NWRiMDMwYzFmMTRiLzEvUDFwdGxfeDRlRUtVQkZlT1hNRE1aU19rdE5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NWYwYzEtZmU5ZC00YjA5LWI1MjgtNWRiMDMwYzFmMTRi
LzEvUDFwdGxfeDRlRUtVQkZlT1hNRE1aU19rdE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDxcQBuu
DuiX/jNi4KIwbXLI93bCxdojwKxYUcscRp3VhwuctnwyoWEnPa2xvad4QepOBuza
EJFDS0XdRei222a0vpo+Iinz48QI0NyUrgOnoHTLFhjGtRQMAg47Uo0K/PcnZoP/
3xbJD+FqBJCJxFBvfvrS+sR1Pb4sqvkVYrG3FXpPQrFCADq/CXbzU2JObIwQrHwq
r1+WUk/gUckUCQZn4ME1ohrwa22iqGaBE4UkPfYf3CjCus6IBehgYan+/n3ltvon
PcJAQOXt+E8X9ZSZe8cKkSbhsx/Pfnlj8zaHSsoNvgy1tqcYwSZq4DjtSdffinZR
QZJ2FfEjQS8kDw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:31 2026 by rpki-client