Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
File:                     PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json)
Hash identifier:          2xunCHEl8PKWEu1c0wL8z9N+P0WYwRXlqfhH/+V68+c=
Subject key identifier:   09:3C:7A:A5:7B:C6:33:A8:8B:0C:10:86:87:89:AD:F7:E6:94:85:2B
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Certificate issuer:       /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial:       0197CE03FC2ACE4B35392D8D005865F511F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
Manifest number:          0F42
Signing time:             Thu 03 Jul 2025 02:00:56 +0000
Manifest this update:     Thu 03 Jul 2025 02:00:56 +0000
Manifest next update:     Fri 04 Jul 2025 02:00:56 +0000
Files and hashes:         1: 5W1H_E66w8rreTv-sH39ih7Q9Kc.roa (hash: ds103SAEhzJEdHJkH+426YBLHIwGf7CU7ARmWBMf450=)
                          2: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: AedkRoxeyK1AIlaKzG8wNxLoej8e5UDCe3mDypTa3gE=)
                          3: Tsid8gfkYRwmSvUBez-ZQcWUur8.roa (hash: msvAp4jHrZw21tVBTpGpRqFg3CGocyYoBz7jW2toIuQ=)
                          4: VnPSleeMHT-jEDZJvcj7wswo-uc.roa (hash: J8mE9CeDpgMjScDrMhJ4WgvJMldlEykT+vy+lBJjBdk=)
                          5: VyJNQqph-KXg7u6RUzzJN3rupCA.roa (hash: LooQO9Bq7ra/KCVGLYawPG8pRB8eBgj1f03IAunPvdE=)
                          6: Xy7X7Y7n1dwT-JcABr_7kk_W05o.roa (hash: AQ2x/CDJ1G+4qJ9b94DvcRRy4bmdLPUtpu6pmkV+OCs=)
                          7: _mV-RGY-pv2pFTbkkb6uI5Oje_I.roa (hash: p4eENjI/cwmo6qgfAyd3PHUV1z0BYeTGomC/74ioJaI=)
                          8: b-VhFar5Bob8wl8OUu2ZPN9DNEQ.roa (hash: tvCO5UR2+v1lg6StGj4o6eWVSuPQeXT3DDeXMyH7vLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ce:03:fc:2a:ce:4b:35:39:2d:8d:00:58:65:f5:11:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
        Validity
            Not Before: Jul  3 02:00:56 2025 GMT
            Not After : Jul  4 02:00:56 2025 GMT
        Subject: CN=093c7aa57bc633a88b0c10868789adf7e694852b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:06:83:ba:2f:86:62:29:9a:0c:71:c0:fd:
                    1a:4d:56:4e:69:03:24:b2:29:b9:20:b7:83:74:b9:
                    d0:81:e0:1d:23:fc:24:48:41:55:d3:90:22:46:4a:
                    37:b3:cb:6a:68:57:f2:ef:b9:9a:dc:aa:4f:47:ac:
                    01:f0:13:25:4c:36:ac:07:a9:19:03:f1:1b:04:23:
                    a0:43:22:9c:b8:be:31:12:59:34:5c:43:fc:f0:f2:
                    e4:23:e7:5d:62:52:e6:e6:2c:a0:b0:43:ff:f2:42:
                    86:c3:0b:fb:fc:30:9b:0a:18:13:76:89:31:3e:e8:
                    5c:6b:aa:67:1a:a7:db:c4:3f:02:0d:69:ad:58:96:
                    49:82:ee:49:c4:ed:45:6b:ce:b3:2f:33:e9:77:13:
                    82:b9:c2:ba:fa:51:3c:64:1c:bb:91:e0:c3:3d:18:
                    ab:57:12:ce:4c:76:eb:d3:c6:bf:c4:26:7a:71:6b:
                    67:d3:be:cf:ff:d9:e8:c5:61:1f:80:9d:0d:49:43:
                    ee:8d:51:6f:99:f8:e5:35:92:0a:c6:58:35:08:01:
                    07:b8:b7:10:e3:c6:a1:b4:90:37:bc:b4:69:d1:52:
                    be:ba:da:81:ee:aa:0e:1f:57:c9:f5:a3:7e:ea:90:
                    bd:dc:05:3e:e8:90:b9:c4:14:ac:14:98:24:1e:f2:
                    53:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3C:7A:A5:7B:C6:33:A8:8B:0C:10:86:87:89:AD:F7:E6:94:85:2B
            X509v3 Authority Key Identifier:
                keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:35:df:42:22:3b:fd:c3:b8:e1:fd:b0:59:37:c0:18:85:1f:
         6b:3d:7f:b9:80:49:9d:60:da:bf:b6:80:37:22:fa:09:3a:04:
         6c:c0:b0:b2:7a:23:a7:98:40:b4:b9:f7:e5:d5:27:c9:bc:5d:
         67:fb:76:be:7a:2d:38:c3:af:2d:cc:80:92:4c:27:bf:71:14:
         7e:82:15:64:74:d4:77:26:4d:c2:67:56:18:46:75:f5:04:a5:
         ac:40:2c:07:d6:6c:99:8d:cb:4f:df:d0:54:0f:06:dd:6b:9f:
         e4:1e:80:62:97:9e:f8:c5:5a:bb:3c:f1:37:6e:3a:dd:28:a9:
         af:fe:22:92:c8:ae:7a:e7:73:0a:b1:55:4f:76:7a:14:74:55:
         9a:c0:64:ba:d1:50:9d:23:2f:95:91:fd:d0:5f:ce:d0:ff:a7:
         58:00:90:09:74:1f:c4:07:38:4a:1b:40:27:d0:f6:f3:3e:21:
         00:c6:a5:dc:61:f9:32:58:37:8a:aa:2c:ef:6e:7c:4a:4f:9c:
         a2:3b:8e:31:fc:69:c9:f4:76:2a:2a:3e:96:e8:8c:36:8b:46:
         f9:62:06:87:a3:ff:16:95:13:08:ec:01:9f:a2:d5:16:02:02:
         55:b5:3a:4a:27:8d:82:90:74:0e:6a:d0:ba:5a:3f:89:71:7c:
         13:d6:4b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:31:15 2025 by rpki-client