Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
File:                     PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft (raw, json)
Hash identifier:          C7ITqc8I0rNP1ShReAsScQx3ab012PR4nS/OETbjKIo=
Subject key identifier:   73:0C:F4:18:F9:FB:3A:AF:64:BE:A4:7E:A1:42:C6:4F:97:14:27:23
Authority key identifier: 3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC
Certificate issuer:       /CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
Certificate serial:       01A08C0C9BE8A709D794550AEFD49FC883C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
Manifest number:          19DD
Signing time:             Thu 10 Sep 2026 16:00:31 +0000
Manifest this update:     Thu 10 Sep 2026 16:00:31 +0000
Manifest next update:     Fri 11 Sep 2026 16:00:31 +0000
Files and hashes:         1: 6_APTo6PeDwxdx5HRP2JyjTUOC0.roa (hash: Arg0BNDQXszV4GMan0vN7YsUMFMUllHfjW3xgKiOXVU=)
                          2: 9VMvKl57FyZtFhzbGLaf00fYTZk.roa (hash: YJv0ppoA9WL93aHmjJueTI66Bs6bF13+XEmlLJFLXhs=)
                          3: PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl (hash: G5EhsswUQ/8dQPiJbcliotUCQm4A1HW8W2Kp8732DyA=)
                          4: f078Ugq10Wo6YaxLwgbU88S2yDk.roa (hash: NfdEYroLgQuj2yntUSzl/hfdTDOIZxXu0Y5Dfx1m/Z4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0c:9b:e8:a7:09:d7:94:55:0a:ef:d4:9f:c8:83:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
        Validity
            Not Before: Sep 10 16:00:31 2026 GMT
            Not After : Sep 11 16:00:31 2026 GMT
        Subject: CN=730cf418f9fb3aaf64bea47ea142c64f97142723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4c:5d:01:dc:fe:50:0a:16:f4:ec:76:81:8b:
                    70:a5:97:b4:22:04:1e:25:36:9a:09:73:f2:fd:8f:
                    ab:3e:cd:31:9e:65:60:a4:ba:74:46:28:02:a5:22:
                    08:0f:c0:fc:0a:b5:2e:64:59:10:c5:81:b0:c2:df:
                    f3:fd:2b:79:f5:88:ed:16:05:db:08:48:9d:17:e3:
                    a0:50:3a:ac:1d:2e:bb:56:b8:b3:04:46:15:cf:0b:
                    6d:05:30:5e:b5:a4:e7:8d:bd:ce:55:fc:2d:d6:bd:
                    6c:a3:ac:09:4d:ca:3c:22:19:9e:6b:60:80:5d:e4:
                    b2:9d:0d:b0:ec:3c:c7:24:c4:1b:1c:24:2f:b6:ae:
                    c7:6d:8f:90:eb:42:0b:70:69:c6:71:e5:95:12:4b:
                    52:21:43:92:d4:8e:01:ec:ea:0c:a0:cd:eb:ae:cc:
                    70:3f:dd:0e:00:1b:c2:8e:1d:40:d7:bf:0c:e4:c0:
                    bc:46:35:0a:98:2d:52:d4:f9:87:87:2a:5e:42:fc:
                    27:3d:4a:c9:fc:3c:1c:88:10:1f:76:02:91:1e:1a:
                    18:40:0c:8f:09:1c:a5:cf:8c:ff:cf:3c:be:34:70:
                    47:2e:fc:7b:d6:bd:68:17:0b:fd:c4:b5:45:90:9f:
                    d0:94:0e:87:ed:88:f8:0b:9e:9f:2a:4a:05:49:eb:
                    96:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0C:F4:18:F9:FB:3A:AF:64:BE:A4:7E:A1:42:C6:4F:97:14:27:23
            X509v3 Authority Key Identifier:
                keyid:3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:18:36:79:c4:84:a5:e0:92:08:a1:19:94:94:14:d0:76:43:
         c4:f1:d8:6d:44:0b:a4:58:9f:4d:b5:08:65:7a:62:68:29:1a:
         16:66:3b:e4:9c:d9:1a:7e:b4:e5:74:6a:d5:c6:b1:81:0c:b7:
         2d:ad:5c:e6:df:27:2f:7e:99:28:48:d8:b8:43:76:aa:67:71:
         db:88:71:66:47:22:4b:d7:45:74:d3:38:64:07:b8:3a:74:c9:
         18:eb:94:61:aa:c1:fd:a0:f2:31:57:35:8b:94:99:e2:2f:14:
         3c:f6:f3:d2:f2:64:35:df:ca:e8:5a:d9:30:60:d2:9d:10:79:
         48:36:56:60:50:c1:0f:79:a6:71:8a:45:8b:5b:47:cc:f5:ac:
         3d:d7:a0:70:45:97:9a:72:f9:06:de:ea:a6:dd:6e:e8:82:ab:
         ba:e1:1c:d8:94:aa:38:35:ea:2d:25:98:7e:b0:f1:a6:42:d1:
         12:97:d9:14:41:c0:5b:34:85:7b:32:e8:99:7f:e9:1b:10:04:
         86:e4:8c:c5:f0:db:0c:8d:53:3a:46:97:f1:57:b2:0c:d0:96:
         3b:b1:52:ef:ce:56:bc:9f:4d:71:3b:9d:31:8c:31:2d:ae:10:
         82:18:84:de:cd:1f:ef:ee:56:ea:31:f3:f7:05:39:9e:fc:cb:
         4b:65:be:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDJvopwnXlFUK79SfyIPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYTRjMmZiZGYxMGY4MjMxZjNkZjUzMWNlNWEzYTJlM2Iy
M2NlZmMwHhcNMjYwOTEwMTYwMDMxWhcNMjYwOTExMTYwMDMxWjAzMTEwLwYDVQQD
Eyg3MzBjZjQxOGY5ZmIzYWFmNjRiZWE0N2VhMTQyYzY0Zjk3MTQyNzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyExdAdz+UAoW9Ox2gYtwpZe0IgQe
JTaaCXPy/Y+rPs0xnmVgpLp0RigCpSIID8D8CrUuZFkQxYGwwt/z/St59YjtFgXb
CEidF+OgUDqsHS67VrizBEYVzwttBTBetaTnjb3OVfwt1r1so6wJTco8Ihmea2CA
XeSynQ2w7DzHJMQbHCQvtq7HbY+Q60ILcGnGceWVEktSIUOS1I4B7OoMoM3rrsxw
P90OABvCjh1A178M5MC8RjUKmC1S1PmHhypeQvwnPUrJ/DwciBAfdgKRHhoYQAyP
CRylz4z/zzy+NHBHLvx71r1oFwv9xLVFkJ/QlA6H7Yj4C56fKkoFSeuWbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMM9Bj5+zqvZL6kfqFCxk+XFCcjMB8GA1UdIwQY
MBaAFD2kwvvfEPgjHz31Mc5aOi47I878MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGFUQy05OFEtQ01mUGZVeHpsbzZManNqenZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zNDljNTgtZmJiMC00ZGRkLWEwODAt
ZDJjOTdkNjVlZmE4LzEvUGFUQy05OFEtQ01mUGZVeHpsbzZManNqenZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8zNDljNTgtZmJiMC00ZGRkLWEwODAtZDJjOTdkNjVlZmE4
LzEvUGFUQy05OFEtQ01mUGZVeHpsbzZManNqenZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBg2ecSE
peCSCKEZlJQU0HZDxPHYbUQLpFifTbUIZXpiaCkaFmY75JzZGn605XRq1caxgQy3
La1c5t8nL36ZKEjYuEN2qmdx24hxZkciS9dFdNM4ZAe4OnTJGOuUYarB/aDyMVc1
i5SZ4i8UPPbz0vJkNd/K6FrZMGDSnRB5SDZWYFDBD3mmcYpFi1tHzPWsPdegcEWX
mnL5Bt7qpt1u6IKruuEc2JSqODXqLSWYfrDxpkLREpfZFEHAWzSFezLomX/pGxAE
huSMxfDbDI1TOkaX8VeyDNCWO7FS785WvJ9NcTudMYwxLa4QghiE3s0f7+5W6jHz
9wU5nvzLS2W+iQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:04:18 2026 by rpki-client