Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
File:                     PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft (raw, json)
Hash identifier:          yfjQe/yAAl8+vYCTna+W2IG0i5f5xBw2QGuyxfn9zmQ=
Subject key identifier:   E6:61:8A:20:21:D6:20:5B:BE:1F:99:A4:C5:CB:D1:4A:3A:FA:E5:5E
Authority key identifier: 3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC
Certificate issuer:       /CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
Certificate serial:       019D062FC0106A828ED5E3FDEEE49232D1D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
Manifest number:          180A
Signing time:             Thu 19 Mar 2026 13:01:25 +0000
Manifest this update:     Thu 19 Mar 2026 13:01:25 +0000
Manifest next update:     Fri 20 Mar 2026 13:01:25 +0000
Files and hashes:         1: 6_APTo6PeDwxdx5HRP2JyjTUOC0.roa (hash: Arg0BNDQXszV4GMan0vN7YsUMFMUllHfjW3xgKiOXVU=)
                          2: 9VMvKl57FyZtFhzbGLaf00fYTZk.roa (hash: YJv0ppoA9WL93aHmjJueTI66Bs6bF13+XEmlLJFLXhs=)
                          3: PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl (hash: O+JS8Wr9uNSz4E08ZyhPGvoXa0cDPWu+NPBV7WrmZi4=)
                          4: f078Ugq10Wo6YaxLwgbU88S2yDk.roa (hash: NfdEYroLgQuj2yntUSzl/hfdTDOIZxXu0Y5Dfx1m/Z4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 08:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:06:2f:c0:10:6a:82:8e:d5:e3:fd:ee:e4:92:32:d1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
        Validity
            Not Before: Mar 19 13:01:25 2026 GMT
            Not After : Mar 20 13:01:25 2026 GMT
        Subject: CN=e6618a2021d6205bbe1f99a4c5cbd14a3afae55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fa:88:d9:29:8e:63:8b:48:f3:0e:de:97:45:
                    cd:58:14:26:82:cb:03:05:3d:1e:a0:1c:41:81:e4:
                    ae:4f:0e:d0:1d:93:27:c4:42:26:9c:ea:95:1d:44:
                    f8:c6:d8:b5:e2:31:2e:45:bb:72:a8:e3:57:91:1d:
                    31:a9:e6:6e:1e:94:9a:7d:f7:84:d8:fd:28:02:50:
                    46:2c:61:e7:67:74:70:ff:80:60:78:e0:55:bb:c0:
                    a3:9c:7d:2c:b0:f3:44:85:60:0f:f7:56:ca:cd:51:
                    23:ad:f0:c8:cd:80:65:69:37:c1:4a:2b:e1:b9:60:
                    65:b5:ef:41:b6:dd:22:ca:b6:0e:47:9a:45:b3:c1:
                    11:44:4f:78:9d:db:5b:0d:ce:15:5c:58:14:45:41:
                    38:28:49:c1:30:08:e9:83:cf:41:04:a5:c0:81:2a:
                    e9:a1:78:05:08:8f:19:31:17:01:85:12:d3:2d:0a:
                    a2:df:0c:84:0b:91:d8:d8:61:fe:ad:b0:93:e8:8c:
                    72:40:5f:94:5b:50:57:ce:32:48:ce:c5:e6:92:5a:
                    16:95:84:5c:fb:4c:fe:87:95:f4:cf:2f:85:db:9f:
                    36:09:c7:69:2d:00:62:be:bc:f0:42:b7:f3:6f:6a:
                    1a:aa:0b:bf:3b:f2:2a:b7:49:75:15:0a:7b:f9:2f:
                    58:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:61:8A:20:21:D6:20:5B:BE:1F:99:A4:C5:CB:D1:4A:3A:FA:E5:5E
            X509v3 Authority Key Identifier:
                keyid:3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:82:89:3a:29:57:79:6b:45:ae:0e:31:7d:b4:4c:56:5d:49:
         9f:84:0d:16:51:01:28:81:2a:20:aa:c4:2b:8c:dd:f1:53:53:
         45:4c:72:90:c9:70:3f:88:7d:84:d6:d0:1c:32:bf:ac:ff:a0:
         64:48:a8:75:c0:23:1a:3e:1e:e4:b0:4b:55:58:82:a9:f1:08:
         27:92:70:0e:d4:0d:b7:13:be:3c:69:91:93:18:bc:69:1f:44:
         41:34:36:15:f3:dd:6e:32:17:64:47:93:d5:19:4c:5d:86:da:
         41:50:a2:ac:ff:c2:b1:87:03:43:02:fe:89:d9:53:58:6d:d2:
         37:46:17:66:0f:6f:e0:5b:2c:b5:75:46:87:ea:e0:ed:a6:a6:
         4a:18:25:58:b1:1b:54:77:69:6b:83:ee:06:23:cf:46:35:e3:
         4d:4d:dc:65:d9:d2:2e:5f:62:2d:6c:fd:3e:67:a0:c0:26:ef:
         dc:17:5a:d2:d6:11:4a:7e:38:eb:57:4a:f4:a8:67:c3:21:7f:
         f7:04:f3:c6:6e:0b:ee:4d:54:75:7f:27:ab:94:37:d1:f4:e0:
         4a:92:a1:43:44:5f:1a:a3:9e:ed:5e:1a:35:25:ba:49:06:b0:
         06:73:f4:36:90:25:7a:3d:b5:9a:8b:9f:15:5e:cc:a8:85:1d:
         52:30:22:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:31:15 2026 by rpki-client