Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
File:                     PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json)
Hash identifier:          2X56B1mN2z/mNUuAM4Bo39Ha1BkQCBs9INUmBHgxVCQ=
Subject key identifier:   C1:38:3B:F3:AD:C2:76:31:3C:1B:8E:F3:82:1F:84:7D:47:13:25:0A
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Certificate issuer:       /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial:       019F92ED0C8EC3146A0ABBA4C66AAA98222F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
Manifest number:          134B
Signing time:             Fri 24 Jul 2026 07:00:36 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:36 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:36 +0000
Files and hashes:         1: 03e_nKrMH4A4-r2jcWSKOro4hEs.roa (hash: DxycIoEklj35A1jvEiLRJ53FKAfEe2yJnQzuZq37gCQ=)
                          2: D4w1402cKEkHHCPC0Qrp-ROm6yo.roa (hash: EMcXFEgTqCUtUEK47llV6gmt5p0zphRz9x+4xZgTdwU=)
                          3: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: 2ZYz3jt+y6hOZZAgi9yxnHCKfNKI+P4HubUKk8IZgp4=)
                          4: Um-gNomxfjSn0kkB0eNJZRkJRcg.roa (hash: CFaWLMSGhMHtWCv6dN79ys4llyYw9LrXF5/UbAwm7l8=)
                          5: VkvT6baU95xG8FSlVbrDxq01-m0.roa (hash: wuSqKSYOAMUCrbWLjcaG0f0YLG5d5+8uKukQepwPM10=)
                          6: abaPwP2Q_8OSCHTWIlI0CKnEXZM.roa (hash: dryzgauXbdm4FHRf2Q1oRz+2w9ySHDpr4lqY5orU7Z0=)
                          7: kXOd5jH86JLvfXHemqDhfdfDdlg.roa (hash: Y1aEFrTSyZUJC/4uUI51ki9mieJNB1Uh1UY/fpEVapk=)
                          8: l0yUF1IRmtUQWgAm0m-qwhJJad8.roa (hash: zejsAU9sJFQnGEhJNTn/fy3BN2ZirT1vXiw3WbJzNvE=)
                          9: vZK02KbzwVRGi2dC-9QkubqQgbM.roa (hash: MBCgvZEuhKwH2+MDiEVq/rFuEUra8cPc3evnj5Tch+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:0c:8e:c3:14:6a:0a:bb:a4:c6:6a:aa:98:22:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
        Validity
            Not Before: Jul 24 07:00:36 2026 GMT
            Not After : Jul 25 07:00:36 2026 GMT
        Subject: CN=c1383bf3adc276313c1b8ef3821f847d4713250a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:78:84:d6:d9:cc:12:37:22:aa:c8:35:75:97:
                    76:7b:3a:0f:56:93:d9:b6:87:d6:72:4f:17:b3:51:
                    9c:d2:b2:0e:5a:47:31:93:20:d6:ef:56:ba:dd:c3:
                    72:81:2f:7d:8e:96:71:05:54:3f:7d:8e:aa:09:2f:
                    68:26:52:75:26:e1:d4:92:8f:da:86:47:d2:2c:bb:
                    97:e0:6a:06:f4:46:22:76:db:3e:29:b2:cd:33:14:
                    8b:d5:d0:53:dc:59:11:f9:73:51:53:6a:a0:49:6e:
                    3d:e5:f8:17:de:43:99:e2:06:89:59:3f:c3:37:11:
                    f3:6f:1e:cb:38:ac:12:0a:2b:65:9b:35:88:85:80:
                    03:13:42:e5:dc:61:da:6e:bd:66:48:38:90:db:11:
                    69:da:64:02:f2:0b:3e:67:71:e7:ab:ec:cc:0e:51:
                    14:2e:7f:b4:3f:f4:04:8e:d2:37:e4:77:5d:3d:25:
                    5c:f1:e4:0e:80:15:3d:83:f5:27:27:08:fc:38:d0:
                    35:ec:58:91:09:61:26:fc:4f:7d:b9:ee:af:6d:b4:
                    44:14:97:69:61:45:1e:a3:4d:e5:39:f4:84:64:e3:
                    02:20:66:f0:d6:b4:76:c1:78:bd:f0:59:d6:58:c6:
                    ef:73:55:7a:91:94:0b:fa:ea:8a:29:d2:7f:b6:c1:
                    c2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:38:3B:F3:AD:C2:76:31:3C:1B:8E:F3:82:1F:84:7D:47:13:25:0A
            X509v3 Authority Key Identifier:
                keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:0e:52:74:26:72:87:16:4d:11:b8:a6:11:b3:bb:2b:8d:45:
         3a:da:1f:2f:5e:96:ef:55:2d:3e:89:2d:aa:b4:70:83:a6:17:
         a5:ba:fa:16:b0:be:27:54:25:56:c8:48:bc:ac:38:1c:1b:eb:
         3c:03:2b:e3:ef:6a:63:6f:61:bf:fd:b7:1e:45:0d:71:80:35:
         d8:12:0e:f6:4b:20:90:fc:9e:df:21:96:7e:e7:85:8b:3d:4b:
         0c:0f:c3:7d:24:96:e7:6a:93:5c:d9:ea:6a:58:82:ae:19:37:
         61:8d:93:9c:f5:10:bd:0d:97:b3:b7:d8:92:c6:a9:dd:5b:79:
         af:49:a5:e9:da:46:36:a1:30:93:2d:ae:d9:ff:21:55:4c:47:
         6e:7b:07:c3:51:f6:f2:dc:d4:f5:03:d4:0f:58:4d:16:38:60:
         8b:b4:a4:aa:48:dc:04:6c:b3:a9:82:23:65:f7:e4:c9:e1:ae:
         89:18:5a:de:99:01:1b:2f:bb:ad:18:8b:86:52:c9:9f:1a:18:
         89:df:b7:51:55:20:c6:2e:76:3c:2f:7e:b3:c9:ee:ec:f7:25:
         7c:de:dc:5a:04:53:07:8a:db:2d:9c:af:f8:c4:20:3a:7f:45:
         e2:33:b4:98:58:b8:73:e1:a2:38:7a:4e:c0:41:68:89:6d:07:
         aa:d1:a3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:13:07 2026 by rpki-client