Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
File:                     PtW83-CttrlBURh__axK6PMRpvE.mft (raw, json)
Hash identifier:          VXJ4Ue3ifUCkBNF50oXGG788AC2rHmn4BIDQC3EBA9E=
Subject key identifier:   FC:0C:2B:FB:5B:EA:C5:11:A7:06:4E:16:75:C2:53:24:16:C8:B8:5F
Authority key identifier: 3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1
Certificate issuer:       /CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
Certificate serial:       019CAA8F7D6DAEB4F9D14C145F86169AA898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
Manifest number:          17DA
Signing time:             Sun 01 Mar 2026 18:00:56 +0000
Manifest this update:     Sun 01 Mar 2026 18:00:56 +0000
Manifest next update:     Mon 02 Mar 2026 18:00:56 +0000
Files and hashes:         1: PtW83-CttrlBURh__axK6PMRpvE.crl (hash: tyb3MpiOpXqWJOw/GeiNJkDAnGjOq1LJzsh7M5LZxo0=)
                          2: cUOwzS6zZJ75wp4AMkGAVEGIHAM.roa (hash: zhJ7nX2X7NThWP5yAOvlZvDnjb68FXcjF71dp2XEQHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:7d:6d:ae:b4:f9:d1:4c:14:5f:86:16:9a:a8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
        Validity
            Not Before: Mar  1 18:00:56 2026 GMT
            Not After : Mar  2 18:00:56 2026 GMT
        Subject: CN=fc0c2bfb5beac511a7064e1675c2532416c8b85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c3:39:f7:e3:eb:f1:11:31:94:f8:e2:a8:0b:
                    9b:9a:20:9d:16:04:4b:30:e5:28:e8:f8:80:aa:a7:
                    2d:d5:96:b3:dc:df:66:71:21:50:28:9d:52:10:49:
                    3c:92:08:39:f7:5e:04:c8:1b:70:85:18:3c:56:19:
                    1c:86:99:85:93:f0:7e:ed:2e:6c:79:87:b0:fc:ae:
                    48:66:fd:a0:a4:08:d4:01:4a:fb:b1:44:33:93:6d:
                    50:52:83:8c:62:5d:4a:cc:13:06:cd:cf:69:0c:67:
                    a9:87:e6:62:aa:00:d8:65:d8:4c:5f:d4:ee:97:4d:
                    6a:cc:f5:57:3b:b0:1b:33:9f:d4:5d:5f:f0:a8:64:
                    b8:51:8c:66:9c:f0:0f:bd:c7:96:73:ed:66:3d:3c:
                    5a:d6:6e:97:5f:11:fc:61:12:7d:9a:e2:fe:6b:9d:
                    ab:cd:6f:51:2e:7d:43:26:0b:95:75:99:b0:7c:2b:
                    04:2b:a3:56:a2:74:c3:1c:9e:0d:eb:10:65:d5:bd:
                    ee:99:e2:fb:04:a9:0a:3f:93:76:ce:a2:0d:5a:f7:
                    3b:d2:f7:6b:76:18:72:97:d1:31:67:e9:46:fa:ef:
                    ec:37:f6:ae:71:98:63:2f:17:36:fd:b0:d4:c4:54:
                    07:d8:1a:bd:f3:b5:a9:10:45:e0:df:a3:61:0e:83:
                    df:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0C:2B:FB:5B:EA:C5:11:A7:06:4E:16:75:C2:53:24:16:C8:B8:5F
            X509v3 Authority Key Identifier:
                keyid:3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:13:c3:92:1c:c1:98:1e:4f:9a:a1:92:de:87:9e:8a:0a:f1:
         97:0a:8f:06:2a:1a:14:33:ac:d3:e1:36:45:70:3a:c4:84:b6:
         c0:41:a3:70:01:26:ff:2f:51:b7:a6:96:ac:14:13:3b:eb:4c:
         52:86:0e:2c:d3:b1:a7:e2:00:65:8d:59:66:77:f1:7a:27:e7:
         6c:21:9f:5f:80:81:04:27:16:68:62:5d:42:2f:b6:5f:51:d7:
         8f:ba:53:cf:ed:cf:db:08:8a:51:e2:3c:db:62:77:7b:22:e3:
         ba:fa:24:4f:f6:6b:77:00:3a:96:32:68:cd:1a:7d:70:25:30:
         de:c0:2a:8e:71:f3:e7:f6:58:6d:50:ae:b9:ad:e2:ae:ad:e4:
         05:7e:75:6f:b6:57:4e:91:3b:1c:2c:de:80:a0:79:2b:55:28:
         34:e4:28:fe:bd:57:c4:9d:3a:7f:d3:c9:26:3a:ee:05:4e:cf:
         7d:2c:41:0f:c5:b2:2c:dc:03:f1:cc:6c:f3:d6:e0:d9:80:c4:
         24:a6:6e:5d:a0:95:68:66:47:ee:d9:99:90:21:ff:99:ba:38:
         2c:d9:b7:69:5f:37:73:fe:b1:13:b1:61:b3:49:e7:34:5c:8e:
         7a:44:28:e4:f9:0b:71:cf:35:7d:12:b1:64:44:ff:29:7f:07:
         d7:49:a0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:10:31 2026 by rpki-client