Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft
File:                     P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft (raw, json)
Hash identifier:          +KLbcmpseMcJCq9B+m4G+pzWN3SaxiuojUxOsZWmB50=
Subject key identifier:   4A:FE:A5:18:A2:87:49:00:79:87:B0:5C:00:D5:7B:A4:09:17:B9:70
Authority key identifier: 3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4
Certificate issuer:       /CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4
Certificate serial:       019D38D2FE68DFBF92CCA6AEEF878CD5C11C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft
Manifest number:          1751
Signing time:             Sun 29 Mar 2026 09:00:44 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:44 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:44 +0000
Files and hashes:         1: P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl (hash: AN07vovX2K/qkKBYzHWuFTvpkrXVDUUTFzaCqwmTdpw=)
                          2: fkccfi7U2J0VPclLxq1z-10Vueg.roa (hash: 0x4LuqEdaNq3L3rQXr3MKnKIAXFaI3RqdUjnhTRxMC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:fe:68:df:bf:92:cc:a6:ae:ef:87:8c:d5:c1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4
        Validity
            Not Before: Mar 29 09:00:44 2026 GMT
            Not After : Mar 30 09:00:44 2026 GMT
        Subject: CN=4afea518a28749007987b05c00d57ba40917b970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e9:de:f5:40:b7:79:c6:5b:c4:a4:ca:0f:35:
                    08:51:b1:9c:7f:f1:96:d8:67:1d:aa:1a:51:ff:26:
                    03:24:38:71:0d:b4:17:2f:aa:a8:82:aa:a8:62:45:
                    75:13:45:8a:0a:ec:67:8b:19:13:66:ea:55:27:10:
                    26:d9:41:49:32:ad:13:35:95:a9:8e:e0:95:8c:d2:
                    10:ec:84:bc:34:65:4a:68:65:5d:c4:46:30:51:c0:
                    6c:6d:8c:b6:80:52:5a:74:2f:67:c8:68:d0:c1:81:
                    02:f6:6e:4f:b0:18:91:6e:4a:7d:55:6b:3a:30:55:
                    d9:3c:9e:44:0a:2a:74:53:0a:b9:81:63:8e:15:0a:
                    83:c8:68:50:46:1f:2f:8a:7c:71:12:96:bb:14:01:
                    1b:b0:c6:83:50:46:d3:30:bb:03:77:fd:d7:00:90:
                    ac:77:2b:9f:49:e6:a7:39:3f:e3:ed:2d:37:f4:11:
                    c9:71:ef:e7:9c:a8:5f:6e:c4:80:4e:87:ac:5b:28:
                    0e:ee:5d:39:8f:90:17:bb:ef:ae:de:a7:42:bc:5c:
                    92:70:2c:0e:63:ed:cc:51:28:52:ee:a1:ce:7a:2d:
                    28:50:2f:58:a8:f9:4d:54:26:11:5f:c1:bd:ed:4c:
                    44:92:4e:0b:7e:c6:80:c5:0b:3b:1e:67:53:36:a1:
                    2a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FE:A5:18:A2:87:49:00:79:87:B0:5C:00:D5:7B:A4:09:17:B9:70
            X509v3 Authority Key Identifier:
                keyid:3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:7c:ca:f0:bf:6c:73:ea:fb:b4:cc:2f:2e:ba:64:2a:b7:e4:
         ea:da:af:32:44:7b:f0:f6:de:b8:d4:35:ab:fa:19:86:f4:b8:
         2b:7a:12:92:6b:0e:88:0c:27:c9:8e:1c:06:8e:2a:4c:7d:e6:
         e7:d9:7d:13:8e:c9:31:3e:03:d4:c4:77:29:53:5c:24:33:7d:
         80:be:0c:4e:58:7b:61:1f:9f:36:80:f8:f2:11:cd:60:7b:d0:
         f1:3a:7c:58:87:5f:86:3a:0c:c6:e5:57:9c:d7:e8:30:ec:c6:
         c3:39:b6:f7:70:44:76:aa:8e:e7:a4:d4:ef:a8:99:52:49:09:
         79:b6:c9:a5:e4:d4:f0:3e:51:e1:c5:0d:dd:b2:73:b7:57:c6:
         2b:18:08:69:de:f7:b4:e1:f2:e0:e2:b3:69:89:b0:fb:1a:c7:
         9c:a8:a1:9b:0a:15:3a:b5:88:b3:98:b4:f8:f5:06:41:5d:21:
         7e:a2:7b:bf:1a:cc:64:53:f1:17:cf:3a:ec:96:8e:c6:ee:50:
         6f:36:d6:e1:ac:a6:76:d7:81:12:f0:15:e9:7d:dc:69:34:92:
         c3:5e:e7:40:40:fe:fc:8d:4f:7a:cb:3b:db:71:1e:68:dd:eb:
         86:14:8a:c3:6c:db:59:9a:24:d5:be:6e:eb:d3:d6:a3:59:3e:
         4c:e7:d7:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040v5o37+SzKau74eM1cEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNWE2ZDk3ZmM3ODc4NDI5NDA0NTc4ZTVjYzBjYzY1MmZl
NGI0ZDQwHhcNMjYwMzI5MDkwMDQ0WhcNMjYwMzMwMDkwMDQ0WjAzMTEwLwYDVQQD
Eyg0YWZlYTUxOGEyODc0OTAwNzk4N2IwNWMwMGQ1N2JhNDA5MTdiOTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0One9UC3ecZbxKTKDzUIUbGcf/GW
2GcdqhpR/yYDJDhxDbQXL6qogqqoYkV1E0WKCuxnixkTZupVJxAm2UFJMq0TNZWp
juCVjNIQ7IS8NGVKaGVdxEYwUcBsbYy2gFJadC9nyGjQwYEC9m5PsBiRbkp9VWs6
MFXZPJ5ECip0Uwq5gWOOFQqDyGhQRh8vinxxEpa7FAEbsMaDUEbTMLsDd/3XAJCs
dyufSeanOT/j7S039BHJce/nnKhfbsSAToesWygO7l05j5AXu++u3qdCvFyScCwO
Y+3MUShS7qHOei0oUC9YqPlNVCYRX8G97UxEkk4LfsaAxQs7HmdTNqEqNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEr+pRiih0kAeYewXADVe6QJF7lwMB8GA1UdIwQY
MBaAFD9abZf8eHhClARXjlzAzGUv5LTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDFwdGxfeDRlRUtVQkZlT1hNRE1aU19rdE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NWYwYzEtZmU5ZC00YjA5LWI1Mjgt
NWRiMDMwYzFmMTRiLzEvUDFwdGxfeDRlRUtVQkZlT1hNRE1aU19rdE5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NWYwYzEtZmU5ZC00YjA5LWI1MjgtNWRiMDMwYzFmMTRi
LzEvUDFwdGxfeDRlRUtVQkZlT1hNRE1aU19rdE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3zK8L9s
c+r7tMwvLrpkKrfk6tqvMkR78PbeuNQ1q/oZhvS4K3oSkmsOiAwnyY4cBo4qTH3m
59l9E47JMT4D1MR3KVNcJDN9gL4MTlh7YR+fNoD48hHNYHvQ8Tp8WIdfhjoMxuVX
nNfoMOzGwzm293BEdqqO56TU76iZUkkJebbJpeTU8D5R4cUN3bJzt1fGKxgIad73
tOHy4OKzaYmw+xrHnKihmwoVOrWIs5i0+PUGQV0hfqJ7vxrMZFPxF8867JaOxu5Q
bzbW4aymdteBEvAV6X3caTSSw17nQED+/I1Pess723EeaN3rhhSKw2zbWZok1b5u
69PWo1k+TOfXtQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:43 2026 by rpki-client