Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
File:                     PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json)
Hash identifier:          gEvV4efaJ6wAMZW/un3IifsJhQlMO76cJ0mBzFR5qPs=
Subject key identifier:   F9:3D:B0:10:2F:9F:86:4E:C1:92:5C:7D:F9:36:82:03:21:91:F2:AE
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Certificate issuer:       /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial:       01A1303475023CC3A3F9F26E86D64AD58B20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
Manifest number:          1421
Signing time:             Mon 12 Oct 2026 13:01:45 +0000
Manifest this update:     Mon 12 Oct 2026 13:01:45 +0000
Manifest next update:     Tue 13 Oct 2026 13:01:45 +0000
Files and hashes:         1: 03e_nKrMH4A4-r2jcWSKOro4hEs.roa (hash: DxycIoEklj35A1jvEiLRJ53FKAfEe2yJnQzuZq37gCQ=)
                          2: D4w1402cKEkHHCPC0Qrp-ROm6yo.roa (hash: EMcXFEgTqCUtUEK47llV6gmt5p0zphRz9x+4xZgTdwU=)
                          3: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: BOWX/u6yTBTUzEcVxg738V1WT9IxM2cfxcoKe7H3aMk=)
                          4: Um-gNomxfjSn0kkB0eNJZRkJRcg.roa (hash: CFaWLMSGhMHtWCv6dN79ys4llyYw9LrXF5/UbAwm7l8=)
                          5: VkvT6baU95xG8FSlVbrDxq01-m0.roa (hash: wuSqKSYOAMUCrbWLjcaG0f0YLG5d5+8uKukQepwPM10=)
                          6: abaPwP2Q_8OSCHTWIlI0CKnEXZM.roa (hash: dryzgauXbdm4FHRf2Q1oRz+2w9ySHDpr4lqY5orU7Z0=)
                          7: kXOd5jH86JLvfXHemqDhfdfDdlg.roa (hash: Y1aEFrTSyZUJC/4uUI51ki9mieJNB1Uh1UY/fpEVapk=)
                          8: l0yUF1IRmtUQWgAm0m-qwhJJad8.roa (hash: zejsAU9sJFQnGEhJNTn/fy3BN2ZirT1vXiw3WbJzNvE=)
                          9: vZK02KbzwVRGi2dC-9QkubqQgbM.roa (hash: MBCgvZEuhKwH2+MDiEVq/rFuEUra8cPc3evnj5Tch+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 13:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:34:75:02:3c:c3:a3:f9:f2:6e:86:d6:4a:d5:8b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
        Validity
            Not Before: Oct 12 13:01:45 2026 GMT
            Not After : Oct 13 13:01:45 2026 GMT
        Subject: CN=f93db0102f9f864ec1925c7df93682032191f2ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:79:6d:7e:13:27:1b:1f:5d:eb:54:dc:80:8c:
                    4d:71:32:04:b8:fe:cf:32:fe:37:c3:54:0f:b8:52:
                    44:8d:71:bd:b1:29:87:28:12:77:3b:02:d3:48:e7:
                    a1:27:ad:09:eb:e6:7b:00:30:4b:d7:c9:82:4d:2c:
                    b4:52:23:7a:90:88:85:f1:38:eb:38:d6:ea:d6:46:
                    36:1b:86:ec:5b:6c:df:c5:56:1d:fe:2e:a0:47:c7:
                    c6:21:17:68:ed:37:0b:08:ba:af:af:b6:29:9a:90:
                    ba:be:2b:2a:27:f6:9b:b5:ca:f4:6e:f4:a5:5a:44:
                    5f:7d:d6:36:44:dd:b5:0e:1e:58:b3:bd:a2:ba:85:
                    96:84:cd:96:cd:4c:07:9e:a5:bc:68:93:1d:e2:dc:
                    e7:23:b3:38:95:e0:ac:7c:e4:da:6a:b2:cb:8f:55:
                    31:e3:42:fd:71:86:5c:d8:88:a6:de:b6:26:d9:dc:
                    93:64:13:3e:a6:77:c6:ec:3d:fb:40:61:c3:6c:d9:
                    0b:f3:f5:61:b7:73:59:db:aa:68:6b:13:b3:d2:37:
                    eb:fa:78:b1:f4:f6:c1:2d:7c:2f:ba:65:59:c6:ad:
                    af:ad:83:09:aa:3f:de:d1:71:b9:c0:4b:60:e2:9b:
                    40:c5:94:43:1b:1e:93:fe:e4:8b:78:51:fe:f1:be:
                    e6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3D:B0:10:2F:9F:86:4E:C1:92:5C:7D:F9:36:82:03:21:91:F2:AE
            X509v3 Authority Key Identifier:
                keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7f:42:e5:ec:06:dc:5c:9a:6f:2e:55:ce:21:5d:1a:f9:f3:
         0b:86:7d:92:d7:b5:5c:1b:8f:0e:0d:85:17:60:c6:4a:12:b6:
         ba:f4:c0:ea:29:65:ae:9f:41:dc:0f:06:e2:47:96:ee:d6:26:
         ba:d0:ac:e8:07:1f:e3:e8:bf:91:df:f4:cd:4b:fb:ba:99:8b:
         76:b3:3d:43:b1:32:ea:0c:99:50:38:f1:e6:5b:51:56:0d:82:
         5c:1e:d2:1e:39:f0:a1:40:5a:fc:1a:71:7f:a4:4b:02:b8:02:
         a6:50:04:a6:5b:0e:94:84:8d:ca:b6:3e:da:cc:af:bc:d8:71:
         e2:a6:7c:15:a1:7f:7d:34:3b:c9:61:9e:0d:ba:82:66:a5:90:
         6b:2f:d6:2f:db:90:ba:80:4e:b3:5f:ff:c5:f9:1d:7a:92:98:
         46:b5:e2:fe:14:5f:94:54:50:9f:cc:7b:b3:2b:44:c3:b1:c8:
         b7:11:87:31:2e:aa:7c:89:7f:5f:80:98:47:a0:66:52:8b:59:
         c8:e2:f6:2f:6a:de:d4:1d:7a:09:6e:a6:38:c4:46:6d:8f:e2:
         ff:7e:90:8d:14:11:6a:09:15:c2:81:6e:e2:74:b5:40:b0:d8:
         20:a6:10:19:e6:f2:b0:8c:3a:a8:62:47:6e:40:ea:d0:02:04:
         1b:4f:20:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEwNHUCPMOj+fJuhtZK1YsgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkM2Y4N2JiN2Y3ODc0YWE3ZTE1Y2ZlYzliYmY2YWFlM2M5
Y2UzM2EwHhcNMjYxMDEyMTMwMTQ1WhcNMjYxMDEzMTMwMTQ1WjAzMTEwLwYDVQQD
EyhmOTNkYjAxMDJmOWY4NjRlYzE5MjVjN2RmOTM2ODIwMzIxOTFmMmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnltfhMnGx9d61TcgIxNcTIEuP7P
Mv43w1QPuFJEjXG9sSmHKBJ3OwLTSOehJ60J6+Z7ADBL18mCTSy0UiN6kIiF8Tjr
ONbq1kY2G4bsW2zfxVYd/i6gR8fGIRdo7TcLCLqvr7YpmpC6visqJ/abtcr0bvSl
WkRffdY2RN21Dh5Ys72iuoWWhM2WzUwHnqW8aJMd4tznI7M4leCsfOTaarLLj1Ux
40L9cYZc2Iim3rYm2dyTZBM+pnfG7D37QGHDbNkL8/Vht3NZ26poaxOz0jfr+nix
9PbBLXwvumVZxq2vrYMJqj/e0XG5wEtg4ptAxZRDGx6T/uSLeFH+8b7mbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPk9sBAvn4ZOwZJcffk2ggMhkfKuMB8GA1UdIwQY
MBaAFD0/h7t/eHSqfhXP7Ju/aq48nOM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTIt
NjJiZTUzNDI1Njc2LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTItNjJiZTUzNDI1Njc2
LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd39C5ewG
3Fyaby5VziFdGvnzC4Z9kte1XBuPDg2FF2DGShK2uvTA6illrp9B3A8G4keW7tYm
utCs6Acf4+i/kd/0zUv7upmLdrM9Q7Ey6gyZUDjx5ltRVg2CXB7SHjnwoUBa/Bpx
f6RLArgCplAEplsOlISNyrY+2syvvNhx4qZ8FaF/fTQ7yWGeDbqCZqWQay/WL9uQ
uoBOs1//xfkdepKYRrXi/hRflFRQn8x7sytEw7HItxGHMS6qfIl/X4CYR6BmUotZ
yOL2L2re1B16CW6mOMRGbY/i/36QjRQRagkVwoFu4nS1QLDYIKYQGebysIw6qGJH
bkDq0AIEG08gzQ==
-----END CERTIFICATE-----
Generated at Mon Oct 12 23:56:31 2026 by rpki-client