Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
File:                     PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft (raw, json)
Hash identifier:          CJ5iH9Jx/xP6PeupaoTmWSfIoDASfLhc6X5fkNe4Gy4=
Subject key identifier:   C2:24:53:32:D7:59:AC:01:2A:51:55:C1:9F:09:12:1C:CE:52:44:A9
Authority key identifier: 3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC
Certificate issuer:       /CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
Certificate serial:       01985721129C34C8E981F90AFB11E7F3F93B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
Manifest number:          159C
Signing time:             Tue 29 Jul 2025 17:00:41 +0000
Manifest this update:     Tue 29 Jul 2025 17:00:41 +0000
Manifest next update:     Wed 30 Jul 2025 17:00:41 +0000
Files and hashes:         1: 5o7Wujr8dRj8Tg7xLsudfg7dW7M.roa (hash: qeh+5//aK6tfzfv8lL06hTEmh0G9vZwCC4vXm4+gjj4=)
                          2: PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl (hash: t5gIWV7+XhcNEZf9cZ/ZJAAljxirG9usyY9bQ1OzQ90=)
                          3: f97lxnTpPAq22TugSRlYspLS210.roa (hash: JdfvaPlM9jUQgv8XgDP5xI3oBrxUeVgBrwf3Q1RSSso=)
                          4: n1FcMiLz_JoY9XiP99JB8OfMowM.roa (hash: RgJPkvDM2qRz5jBp/2aQedJ1Hffc/ZwhPvwJOiAl5xo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 14:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:57:21:12:9c:34:c8:e9:81:f9:0a:fb:11:e7:f3:f9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
        Validity
            Not Before: Jul 29 17:00:41 2025 GMT
            Not After : Jul 30 17:00:41 2025 GMT
        Subject: CN=c2245332d759ac012a5155c19f09121cce5244a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4c:82:af:e3:73:ac:b5:05:3a:11:9d:04:36:
                    8a:43:04:9b:86:8a:1f:9d:77:e4:46:40:b6:5c:97:
                    88:e2:ac:bf:65:03:b7:09:12:9a:e4:2c:d4:12:c2:
                    9d:bb:85:b2:08:b4:7b:58:56:b7:26:f4:c3:f0:ef:
                    29:71:2d:38:a4:ef:ee:a2:2e:dc:d5:0d:17:92:f3:
                    ca:02:56:46:78:36:6a:dc:d6:36:32:78:4e:cd:8d:
                    0a:29:6d:ec:d6:15:a6:cc:c8:c5:e3:6b:86:c9:88:
                    92:d4:b8:3f:62:40:5d:11:00:84:a3:82:15:d5:e9:
                    5c:d5:31:31:6a:fd:60:8a:d1:23:89:90:18:e6:f1:
                    b0:76:52:6b:c4:e3:10:25:7e:ad:59:2d:1e:a8:b8:
                    eb:69:03:da:9e:06:d7:4a:71:c3:e5:68:9f:78:81:
                    c8:d7:e1:21:58:d8:7b:c3:a4:74:1c:cd:fc:e2:f5:
                    50:02:00:e5:be:02:e5:35:8c:31:fc:7f:bc:88:7e:
                    b9:81:76:e5:12:4f:6c:07:0e:16:9f:ff:b5:57:86:
                    f8:8f:fa:d6:a7:4b:15:7e:01:f7:26:df:78:22:1b:
                    6b:15:6f:04:61:f0:60:78:17:31:44:f7:4f:e4:66:
                    e0:8d:04:a6:99:16:d4:31:6c:74:61:7d:82:46:1f:
                    c7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:24:53:32:D7:59:AC:01:2A:51:55:C1:9F:09:12:1C:CE:52:44:A9
            X509v3 Authority Key Identifier:
                keyid:3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e9:89:44:38:bd:cb:ba:34:fa:4c:4d:d8:55:10:4f:73:b0:
         2a:60:0b:e6:7a:1a:36:42:b2:dd:f2:d6:48:71:51:05:e9:c5:
         54:f4:04:07:b4:fc:de:33:c4:b7:b3:d6:0d:9e:d5:8e:cc:58:
         0d:13:55:52:0f:18:6f:66:a6:6d:87:65:86:2a:0d:4b:75:45:
         fb:85:c5:f1:36:5f:be:89:d9:81:c0:80:81:da:ce:b4:e9:66:
         21:18:69:e9:b6:d0:93:39:e3:38:98:f7:b1:9c:9f:f8:cf:c0:
         a0:2f:be:be:20:4e:c9:2b:d5:2b:dc:17:90:dc:d4:79:71:53:
         8c:30:94:6d:49:0c:c0:db:11:a9:a3:e7:83:9e:6e:c3:0c:25:
         f9:bc:1c:a2:ed:b3:d2:65:51:b3:ea:ab:3c:f6:fe:19:2a:58:
         cd:a1:14:b7:a6:11:0e:90:e4:50:5f:c0:86:1b:37:a3:1d:da:
         f0:f8:38:ec:5e:01:44:18:8e:4c:b3:64:b1:01:fd:41:47:1e:
         3b:30:6e:8a:c7:01:f0:be:6c:56:48:e6:e3:9e:73:59:06:d5:
         d5:c7:bc:19:e4:c4:47:9c:76:d2:18:ab:1c:71:89:67:06:b9:
         7e:5b:aa:e5:9a:e3:e9:2e:54:9b:b3:a3:67:91:3c:84:f7:ae:
         63:cb:28:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhXIRKcNMjpgfkK+xHn8/k7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYTRjMmZiZGYxMGY4MjMxZjNkZjUzMWNlNWEzYTJlM2Iy
M2NlZmMwHhcNMjUwNzI5MTcwMDQxWhcNMjUwNzMwMTcwMDQxWjAzMTEwLwYDVQQD
EyhjMjI0NTMzMmQ3NTlhYzAxMmE1MTU1YzE5ZjA5MTIxY2NlNTI0NGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykyCr+NzrLUFOhGdBDaKQwSbhoof
nXfkRkC2XJeI4qy/ZQO3CRKa5CzUEsKdu4WyCLR7WFa3JvTD8O8pcS04pO/uoi7c
1Q0XkvPKAlZGeDZq3NY2MnhOzY0KKW3s1hWmzMjF42uGyYiS1Lg/YkBdEQCEo4IV
1elc1TExav1gitEjiZAY5vGwdlJrxOMQJX6tWS0eqLjraQPangbXSnHD5WifeIHI
1+EhWNh7w6R0HM384vVQAgDlvgLlNYwx/H+8iH65gXblEk9sBw4Wn/+1V4b4j/rW
p0sVfgH3Jt94IhtrFW8EYfBgeBcxRPdP5GbgjQSmmRbUMWx0YX2CRh/H9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIkUzLXWawBKlFVwZ8JEhzOUkSpMB8GA1UdIwQY
MBaAFD2kwvvfEPgjHz31Mc5aOi47I878MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGFUQy05OFEtQ01mUGZVeHpsbzZManNqenZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zNDljNTgtZmJiMC00ZGRkLWEwODAt
ZDJjOTdkNjVlZmE4LzEvUGFUQy05OFEtQ01mUGZVeHpsbzZManNqenZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8zNDljNTgtZmJiMC00ZGRkLWEwODAtZDJjOTdkNjVlZmE4
LzEvUGFUQy05OFEtQ01mUGZVeHpsbzZManNqenZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXumJRDi9
y7o0+kxN2FUQT3OwKmAL5noaNkKy3fLWSHFRBenFVPQEB7T83jPEt7PWDZ7VjsxY
DRNVUg8Yb2ambYdlhioNS3VF+4XF8TZfvonZgcCAgdrOtOlmIRhp6bbQkznjOJj3
sZyf+M/AoC++viBOySvVK9wXkNzUeXFTjDCUbUkMwNsRqaPng55uwwwl+bwcou2z
0mVRs+qrPPb+GSpYzaEUt6YRDpDkUF/Ahhs3ox3a8Pg47F4BRBiOTLNksQH9QUce
OzBuiscB8L5sVkjm455zWQbV1ce8GeTER5x20hirHHGJZwa5fluq5Zrj6S5Um7Oj
Z5E8hPeuY8so7g==
-----END CERTIFICATE-----
Generated at Tue Jul 29 18:38:44 2025 by rpki-client