Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft
File:                     P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft (raw, json)
Hash identifier:          pA3u1X3v2c1JFevHQDePPgQGcaY6EFIomQ//EhwvBbI=
Subject key identifier:   C9:7F:51:AD:F1:C5:92:EC:3D:4B:73:37:5E:3D:A6:9A:E4:44:96:01
Authority key identifier: 3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4
Certificate issuer:       /CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4
Certificate serial:       01974BC4190786CA077F31D336971A477C48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft
Manifest number:          143F
Signing time:             Sat 07 Jun 2025 19:00:31 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:31 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:31 +0000
Files and hashes:         1: P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl (hash: 7eTl4xGrwhyzdrBEPkq6YTIheudntlHcxOrIDRpjaMw=)
                          2: yV6dlaQqykdXmPFxWtSp2DJEhJw.roa (hash: WmIvozgI3vtTkD0hLlFRwt8yL/FQ4uPIVdy3pddOlRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:19:07:86:ca:07:7f:31:d3:36:97:1a:47:7c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4
        Validity
            Not Before: Jun  7 19:00:31 2025 GMT
            Not After : Jun  8 19:00:31 2025 GMT
        Subject: CN=c97f51adf1c592ec3d4b73375e3da69ae4449601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:69:80:25:b5:41:61:1b:16:0d:2a:27:b8:
                    6b:ae:a1:98:3a:92:61:25:21:df:0a:d9:97:d6:1d:
                    c9:27:d9:89:e5:2d:48:e0:d7:e9:ed:ea:1e:6c:e6:
                    ae:67:f4:e2:d8:4c:4e:d3:8f:aa:f8:7e:f3:9e:05:
                    08:ec:b7:8b:fd:3f:eb:64:9c:c0:b2:07:1e:2b:8d:
                    53:12:72:5f:d6:f6:cb:20:0d:9a:ca:c0:f3:82:c9:
                    4d:cd:31:a7:3c:c8:06:e9:76:b6:c2:bc:99:75:ab:
                    52:e8:67:66:08:f4:83:20:c2:ef:77:32:2c:fb:5f:
                    c5:cd:b9:98:a5:52:01:ae:00:31:53:69:b6:38:9e:
                    ae:c5:c2:4f:36:ad:9b:5d:04:10:26:9e:31:25:de:
                    39:e3:76:dd:8e:a9:32:1e:5f:1d:0e:66:44:d1:e2:
                    10:b4:34:35:b9:b6:9f:ab:a0:f0:e0:81:69:70:69:
                    ed:9c:6a:43:73:08:83:a3:c9:f3:ec:d7:ed:d7:54:
                    17:29:c2:47:f7:aa:41:73:2c:41:14:5c:21:1f:6b:
                    f7:97:10:d0:69:1d:ef:ec:c9:96:a9:37:27:a6:49:
                    9d:4b:15:28:c9:de:84:8e:cc:f1:70:fe:d6:f0:0a:
                    07:00:58:b8:e0:e0:c1:c2:58:0a:8e:74:1a:44:71:
                    46:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7F:51:AD:F1:C5:92:EC:3D:4B:73:37:5E:3D:A6:9A:E4:44:96:01
            X509v3 Authority Key Identifier:
                keyid:3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:4a:c7:5b:c2:60:11:9f:8b:0f:c8:be:8c:bf:90:1c:e3:27:
         06:b4:c1:48:d2:21:eb:21:39:41:e1:37:0b:9f:08:fc:50:50:
         f7:3c:92:ed:48:2c:d3:d7:98:a4:ea:f9:73:d6:cb:5a:d2:01:
         f1:e5:2a:79:09:6e:4b:f0:69:74:d1:64:c3:f5:84:90:e5:15:
         73:b7:1e:77:7a:9a:f7:0d:35:f1:92:57:11:3e:6c:10:84:0f:
         cf:d0:1a:7c:04:0d:78:4e:26:fa:c1:ec:b2:e1:52:e8:4c:bb:
         c3:c7:41:fc:3b:74:5c:9d:12:8b:ef:9b:9e:5b:c5:87:fd:ac:
         27:c0:e0:40:8f:1c:7b:30:99:01:ad:80:db:ce:ab:ce:22:49:
         95:dd:1c:b7:3b:33:9d:26:f1:3c:33:79:b0:d8:c7:4f:57:f6:
         1f:6b:95:42:c0:48:4e:16:c9:80:ad:ea:44:6b:c0:5a:a0:33:
         81:cc:a7:06:7b:12:cf:7b:c8:79:84:73:de:25:59:8b:e1:be:
         70:ff:26:8c:7a:80:2e:a7:36:ab:cd:a7:e1:88:2d:58:5e:c6:
         11:d1:36:7d:b3:cc:45:7f:76:2d:5a:b4:45:19:a7:a7:97:70:
         dd:2c:c7:83:6e:c4:31:56:63:e6:71:18:97:0a:5c:ba:e1:04:
         33:00:e6:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxBkHhsoHfzHTNpcaR3xIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNWE2ZDk3ZmM3ODc4NDI5NDA0NTc4ZTVjYzBjYzY1MmZl
NGI0ZDQwHhcNMjUwNjA3MTkwMDMxWhcNMjUwNjA4MTkwMDMxWjAzMTEwLwYDVQQD
EyhjOTdmNTFhZGYxYzU5MmVjM2Q0YjczMzc1ZTNkYTY5YWU0NDQ5NjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBxpgCW1QWEbFg0qJ7hrrqGYOpJh
JSHfCtmX1h3JJ9mJ5S1I4Nfp7eoebOauZ/Ti2ExO04+q+H7zngUI7LeL/T/rZJzA
sgceK41TEnJf1vbLIA2aysDzgslNzTGnPMgG6Xa2wryZdatS6GdmCPSDIMLvdzIs
+1/FzbmYpVIBrgAxU2m2OJ6uxcJPNq2bXQQQJp4xJd4543bdjqkyHl8dDmZE0eIQ
tDQ1ubafq6Dw4IFpcGntnGpDcwiDo8nz7Nft11QXKcJH96pBcyxBFFwhH2v3lxDQ
aR3v7MmWqTcnpkmdSxUoyd6EjszxcP7W8AoHAFi44ODBwlgKjnQaRHFGFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMl/Ua3xxZLsPUtzN149pprkRJYBMB8GA1UdIwQY
MBaAFD9abZf8eHhClARXjlzAzGUv5LTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDFwdGxfeDRlRUtVQkZlT1hNRE1aU19rdE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NWYwYzEtZmU5ZC00YjA5LWI1Mjgt
NWRiMDMwYzFmMTRiLzEvUDFwdGxfeDRlRUtVQkZlT1hNRE1aU19rdE5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NWYwYzEtZmU5ZC00YjA5LWI1MjgtNWRiMDMwYzFmMTRi
LzEvUDFwdGxfeDRlRUtVQkZlT1hNRE1aU19rdE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUrHW8Jg
EZ+LD8i+jL+QHOMnBrTBSNIh6yE5QeE3C58I/FBQ9zyS7Ugs09eYpOr5c9bLWtIB
8eUqeQluS/BpdNFkw/WEkOUVc7ced3qa9w018ZJXET5sEIQPz9AafAQNeE4m+sHs
suFS6Ey7w8dB/Dt0XJ0Si++bnlvFh/2sJ8DgQI8cezCZAa2A286rziJJld0ctzsz
nSbxPDN5sNjHT1f2H2uVQsBIThbJgK3qRGvAWqAzgcynBnsSz3vIeYRz3iVZi+G+
cP8mjHqALqc2q82n4YgtWF7GEdE2fbPMRX92LVq0RRmnp5dw3SzHg27EMVZj5nEY
lwpcuuEEMwDmrA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:20:40 2025 by rpki-client