Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
File:                     PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json)
Hash identifier:          v3PpmsGFSl5fUFe0B7PJbTMoVeJMOMTdFhqMkm0Yqbg=
Subject key identifier:   3B:1A:F8:C1:1C:6A:11:45:F6:CD:AA:F2:A2:0F:42:88:36:74:6A:3B
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Certificate issuer:       /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial:       019765BB17459C74E103E2C91F851C6FB137
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
Manifest number:          0F0C
Signing time:             Thu 12 Jun 2025 20:00:49 +0000
Manifest this update:     Thu 12 Jun 2025 20:00:49 +0000
Manifest next update:     Fri 13 Jun 2025 20:00:49 +0000
Files and hashes:         1: 5W1H_E66w8rreTv-sH39ih7Q9Kc.roa (hash: ds103SAEhzJEdHJkH+426YBLHIwGf7CU7ARmWBMf450=)
                          2: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: sVlsK26H6sfMKRAorZlobyDQ+RGUlucSicr4wFNtr5E=)
                          3: Tsid8gfkYRwmSvUBez-ZQcWUur8.roa (hash: msvAp4jHrZw21tVBTpGpRqFg3CGocyYoBz7jW2toIuQ=)
                          4: VnPSleeMHT-jEDZJvcj7wswo-uc.roa (hash: J8mE9CeDpgMjScDrMhJ4WgvJMldlEykT+vy+lBJjBdk=)
                          5: VyJNQqph-KXg7u6RUzzJN3rupCA.roa (hash: LooQO9Bq7ra/KCVGLYawPG8pRB8eBgj1f03IAunPvdE=)
                          6: Xy7X7Y7n1dwT-JcABr_7kk_W05o.roa (hash: AQ2x/CDJ1G+4qJ9b94DvcRRy4bmdLPUtpu6pmkV+OCs=)
                          7: _mV-RGY-pv2pFTbkkb6uI5Oje_I.roa (hash: p4eENjI/cwmo6qgfAyd3PHUV1z0BYeTGomC/74ioJaI=)
                          8: b-VhFar5Bob8wl8OUu2ZPN9DNEQ.roa (hash: tvCO5UR2+v1lg6StGj4o6eWVSuPQeXT3DDeXMyH7vLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 20:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:bb:17:45:9c:74:e1:03:e2:c9:1f:85:1c:6f:b1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
        Validity
            Not Before: Jun 12 20:00:49 2025 GMT
            Not After : Jun 13 20:00:49 2025 GMT
        Subject: CN=3b1af8c11c6a1145f6cdaaf2a20f428836746a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:6c:a5:2e:4c:81:a6:66:65:81:9f:94:5b:
                    46:c3:d9:8e:f8:24:25:d3:55:66:0b:5d:e0:71:94:
                    0f:db:2a:43:37:92:64:ca:e2:4f:00:9b:9c:68:63:
                    9d:a9:d8:33:7b:86:51:8e:e6:a5:d4:64:e2:7f:97:
                    c4:30:88:1e:83:94:0c:cf:fc:0f:86:20:a1:7f:51:
                    36:44:5a:81:4d:40:f5:77:88:91:6f:64:67:93:a1:
                    b0:84:db:f5:9c:4f:5c:f0:5d:8c:63:21:77:6f:de:
                    64:53:f3:c1:bd:da:ec:71:3a:fc:ee:64:da:bb:e3:
                    d2:a6:45:0b:1b:75:4e:f8:a0:d9:1a:c3:81:26:59:
                    5a:f7:3d:b7:b5:dc:73:93:70:ba:66:6b:09:73:d1:
                    a6:bd:01:86:59:b4:1a:a3:86:b0:de:cd:c9:52:8f:
                    bf:3d:57:96:f3:4a:ca:64:74:95:f3:21:80:c5:d7:
                    ec:8e:15:13:58:42:13:e3:0b:ef:1c:70:88:13:8e:
                    dd:06:be:09:73:df:24:ce:8a:1c:3c:2b:3c:81:c9:
                    e2:ce:06:76:7a:11:1c:a8:47:6c:97:27:75:17:dc:
                    8c:b9:0e:62:2d:76:b5:33:90:a4:12:9a:93:2b:a8:
                    15:07:7d:1f:fe:ea:54:04:35:47:55:4f:50:29:79:
                    47:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1A:F8:C1:1C:6A:11:45:F6:CD:AA:F2:A2:0F:42:88:36:74:6A:3B
            X509v3 Authority Key Identifier:
                keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:35:77:50:d0:7e:12:7f:b3:76:75:32:43:f2:1a:96:b8:b3:
         70:f6:85:55:11:a5:a3:08:22:ce:de:34:84:53:df:30:a7:83:
         6d:29:7f:3f:c1:d8:ea:d3:8f:c0:06:57:f8:67:ed:70:b7:bb:
         02:a3:f6:c3:7f:47:1e:76:0f:d0:f7:aa:36:aa:9b:39:d9:83:
         e3:c8:a2:9c:d7:e2:2a:7c:35:69:e5:42:50:79:19:c0:c2:61:
         b5:63:cd:45:14:07:10:f0:c7:b1:c4:14:b4:81:5a:eb:9b:52:
         39:48:f7:df:5d:43:62:d2:73:95:b3:78:e8:3c:74:19:06:72:
         ab:fe:89:21:17:92:94:6c:44:f2:50:5c:b8:35:af:cc:68:67:
         5d:e1:6b:b0:c5:47:14:75:ef:01:bd:6d:9d:16:f3:55:ad:27:
         a6:69:3a:10:a0:c0:1b:84:0e:c2:6d:ed:d7:70:9a:e4:e2:80:
         58:c4:ff:36:98:c9:2b:03:99:6e:66:fa:18:a4:cf:15:2d:82:
         11:78:7b:19:d9:a3:1f:3a:74:9e:5c:96:fe:e2:ec:98:78:34:
         6e:66:ff:23:04:e5:8e:b6:71:22:12:78:24:4e:c2:ab:84:f1:
         23:8f:df:2f:01:94:35:9b:ce:59:68:ee:59:f5:10:67:78:01:
         88:05:cb:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdluxdFnHThA+LJH4Ucb7E3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkM2Y4N2JiN2Y3ODc0YWE3ZTE1Y2ZlYzliYmY2YWFlM2M5
Y2UzM2EwHhcNMjUwNjEyMjAwMDQ5WhcNMjUwNjEzMjAwMDQ5WjAzMTEwLwYDVQQD
EygzYjFhZjhjMTFjNmExMTQ1ZjZjZGFhZjJhMjBmNDI4ODM2NzQ2YTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2ZspS5MgaZmZYGflFtGw9mO+CQl
01VmC13gcZQP2ypDN5JkyuJPAJucaGOdqdgze4ZRjual1GTif5fEMIgeg5QMz/wP
hiChf1E2RFqBTUD1d4iRb2Rnk6GwhNv1nE9c8F2MYyF3b95kU/PBvdrscTr87mTa
u+PSpkULG3VO+KDZGsOBJlla9z23tdxzk3C6ZmsJc9GmvQGGWbQao4aw3s3JUo+/
PVeW80rKZHSV8yGAxdfsjhUTWEIT4wvvHHCIE47dBr4Jc98kzoocPCs8gcnizgZ2
ehEcqEdslyd1F9yMuQ5iLXa1M5CkEpqTK6gVB30f/upUBDVHVU9QKXlHMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsa+MEcahFF9s2q8qIPQog2dGo7MB8GA1UdIwQY
MBaAFD0/h7t/eHSqfhXP7Ju/aq48nOM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTIt
NjJiZTUzNDI1Njc2LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTItNjJiZTUzNDI1Njc2
LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDV3UNB+
En+zdnUyQ/IalrizcPaFVRGlowgizt40hFPfMKeDbSl/P8HY6tOPwAZX+GftcLe7
AqP2w39HHnYP0PeqNqqbOdmD48iinNfiKnw1aeVCUHkZwMJhtWPNRRQHEPDHscQU
tIFa65tSOUj3311DYtJzlbN46Dx0GQZyq/6JIReSlGxE8lBcuDWvzGhnXeFrsMVH
FHXvAb1tnRbzVa0npmk6EKDAG4QOwm3t13Ca5OKAWMT/NpjJKwOZbmb6GKTPFS2C
EXh7GdmjHzp0nlyW/uLsmHg0bmb/IwTljrZxIhJ4JE7Cq4TxI4/fLwGUNZvOWWju
WfUQZ3gBiAXLzA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 06:10:53 2025 by rpki-client