Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
File:                     PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json)
Hash identifier:          rSLXVAoByQV1wfpKAsU7a82QiJwz/IDSCtnoHNX4YhY=
Subject key identifier:   1A:C1:8D:7E:C6:7A:4A:9D:05:37:D1:8A:F7:7F:56:5A:D4:B4:41:0B
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Certificate issuer:       /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial:       01A1E05F184E4FE038A46DE736E67A830D8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
Manifest number:          074D
Signing time:             Sun 15 Nov 2026 18:01:30 +0000
Manifest this update:     Sun 15 Nov 2026 18:01:30 +0000
Manifest next update:     Mon 16 Nov 2026 18:01:30 +0000
Files and hashes:         1: 4VO4JMCwvHV0sfUNLA59ac2Dg3Y.roa (hash: kJ9VYAuV//vjujGkSWMWi/e+PbUjjVkj9bRtxmow20o=)
                          2: PJqQOsiLgJpBTNtEIXIzADvxDUY.roa (hash: BexP3j7XfBxWmDzuyrg//sFpVDsAMkl0xxF/49mSdTQ=)
                          3: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: jA67EI4+71gbWXS7+4qWJ0c/eVienK7KJO5z1oltFYo=)
                          4: evCm5rnnAOY-4dGWkj8b6X_UN7k.roa (hash: 5OzvGj9KHpgSdi0IFk8ZcR4dW5jq9NgN8CVEH+7xmDk=)
                          5: ggNVICV3n79luwmtpqxkxLAB9-E.roa (hash: hehy8vJ2pMCobL1Ks6NMf8zuXtrrG4R7n74ZthFaYEQ=)
                          6: htlNfPXeOM_NDL0vMYFjvU5Mm-E.roa (hash: YFlq6LKizZ68CiU9V3egi4UmhmdAdZaBPdKX3CR59h8=)
                          7: jUmexGFaoOAw3tBMp-lAl_uGguM.roa (hash: H359l1rebuuO42B7kkI63dGIEaR0UjiEOl9VIPFGCCg=)
                          8: oy9qr6K57G0sj7USD5Fo9CTIr2c.roa (hash: 4EmG4WyLUk1IqwEn+7tNGBVXRS4H1ZTHxhaKQL/32u8=)
                          9: uj6_1RbcFYiy4iSbzHXMjMdTY8M.roa (hash: OVjAStpjdIoEMhnUSMUk0Ln55rKzOTzbc4j6hvTT0lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:e0:5f:18:4e:4f:e0:38:a4:6d:e7:36:e6:7a:83:0d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
        Validity
            Not Before: Nov 15 18:01:30 2026 GMT
            Not After : Nov 16 18:01:30 2026 GMT
        Subject: CN=1ac18d7ec67a4a9d0537d18af77f565ad4b4410b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ec:83:3a:7e:e2:4c:f0:d3:da:cf:29:ea:15:
                    99:36:43:6a:03:5d:42:93:0a:99:a7:e4:fb:28:d4:
                    14:80:dd:ed:dc:88:2c:61:30:cc:7f:25:ad:fa:3f:
                    7c:64:16:3c:01:5a:bb:86:f7:23:5a:4d:39:47:a6:
                    62:31:49:8e:b7:dd:fe:16:7a:d0:a2:43:a7:00:97:
                    23:3c:24:d9:a0:ad:cc:0b:0d:73:fe:41:ed:e1:25:
                    ff:87:6e:94:fd:21:b6:7a:de:f4:13:23:19:c7:78:
                    64:f6:ea:46:ab:43:42:f1:cc:78:da:42:19:10:d9:
                    43:0a:3b:61:ee:06:ee:6e:01:30:b1:10:ec:e6:97:
                    0f:12:7b:86:76:47:b8:2e:43:a9:57:3b:d6:21:1a:
                    36:7d:36:fa:85:7f:ed:97:9d:6c:09:e1:8d:6a:34:
                    59:e6:1b:16:f9:d3:29:c3:91:d8:57:d0:07:d8:9d:
                    8f:b2:5b:ae:4f:27:57:1c:ed:02:11:be:7b:37:2f:
                    2f:d9:7b:17:a9:f9:88:d7:9c:ad:46:04:1b:20:e9:
                    b5:af:33:52:18:50:59:e0:e3:5f:4e:83:ad:d5:f6:
                    97:46:6f:44:bb:16:46:33:8d:e9:51:b6:5c:b7:bd:
                    c7:e6:df:89:92:63:25:21:aa:f2:5f:e4:b6:ad:8a:
                    1d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C1:8D:7E:C6:7A:4A:9D:05:37:D1:8A:F7:7F:56:5A:D4:B4:41:0B
            X509v3 Authority Key Identifier:
                keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:0a:89:92:9b:26:38:8a:85:84:a3:ba:d4:ea:8f:30:a8:40:
         a6:b5:34:ea:71:ac:b2:da:68:ea:01:d6:98:9a:94:1e:15:34:
         79:52:c1:8b:85:3a:cf:51:ee:d1:06:92:1a:df:32:43:c7:ec:
         93:1f:3b:29:00:49:4a:99:14:4e:83:94:77:4f:0a:ad:02:51:
         4a:77:c5:2e:fc:99:fa:43:e7:0c:21:fc:8b:28:54:b3:c1:00:
         fb:82:22:ac:b0:69:fb:29:4e:56:27:4f:b3:5f:57:8d:9b:9a:
         3a:fd:b3:4f:ac:66:53:38:17:ac:03:40:d5:2c:6a:da:a0:b4:
         ef:d5:ae:f6:7c:44:18:ab:b8:72:47:77:83:d8:45:72:06:52:
         69:7c:ca:37:9f:1c:95:5a:ae:f6:91:3a:be:8a:a8:e2:97:25:
         25:04:98:cb:14:d4:18:02:ee:87:94:56:1f:64:85:39:57:ba:
         fd:0a:25:e1:16:de:de:77:f8:14:a0:a6:c0:27:79:3f:09:c9:
         af:55:8f:4e:e3:65:c0:8c:2d:5c:4d:8b:49:ec:2c:1c:4c:e4:
         30:ed:2d:2c:0f:80:cc:57:33:7b:9a:e6:59:64:b4:17:ff:c5:
         34:9d:d7:4f:48:bf:aa:39:54:b2:23:19:68:30:64:5e:47:96:
         10:61:8d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:19:14 2026 by rpki-client