Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
File:                     1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json)
Hash identifier:          4hcVIEYCHLqEVx9DzFOmnWEKAsEPIK43qBoY+h7GgpE=
Subject key identifier:   03:BD:71:6B:8C:6A:E5:62:4F:B6:22:C3:4A:C2:A9:D7:64:A2:23:5E
Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
Certificate issuer:       /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Certificate serial:       01A1DE029FEA403F6AD2C97DD546B73C9221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
Manifest number:          1A8B
Signing time:             Sun 15 Nov 2026 07:01:16 +0000
Manifest this update:     Sun 15 Nov 2026 07:01:16 +0000
Manifest next update:     Mon 16 Nov 2026 07:01:16 +0000
Files and hashes:         1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: jxTtx0d8vzkEG71yicD1GjSLtF2TwDKiDfRRcdRAPMA=)
                          2: ZbjQSCZ3uAIwmEEj11MfV5D8gC8.roa (hash: 5T7LXIEjxnn1PBqbN7TiQKs4WoehbeF3nUrwaJWfoo4=)
                          3: cST23LuN3w66sBxb_OXZ1pkXIXo.asa (hash: lZY1PDiHURGQ7ogGrBkQN7dp4ASP3/4zd1S0cXWBhGA=)
                          4: rgMK6sFHXbkCK94M_mgXVownuMc.roa (hash: Ezgfu8asu1o9JhVctSXTvp8BRnlwnmsHy1jD2PscHGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:02:9f:ea:40:3f:6a:d2:c9:7d:d5:46:b7:3c:92:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
        Validity
            Not Before: Nov 15 07:01:16 2026 GMT
            Not After : Nov 16 07:01:16 2026 GMT
        Subject: CN=03bd716b8c6ae5624fb622c34ac2a9d764a2235e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:64:0e:47:14:da:2a:b2:57:a8:48:77:e7:4a:
                    de:d5:20:05:7d:2a:bb:8d:bb:db:00:a8:12:81:2f:
                    9e:26:24:b0:a8:67:96:53:83:c2:5d:8d:ab:c3:c6:
                    a4:99:b3:55:50:8f:6b:18:54:c3:67:75:7c:91:cb:
                    d5:12:54:fc:20:f6:76:f6:85:26:28:11:86:97:74:
                    f9:f0:01:28:f3:ab:90:dc:bd:05:bc:88:dd:69:f2:
                    f4:0a:d9:ff:13:64:9a:84:7f:ef:c5:18:36:c6:18:
                    40:e9:39:7d:9e:ba:87:d5:eb:1c:79:b3:61:dc:a8:
                    df:1e:39:cf:2b:b2:a9:f5:39:91:8c:92:7e:5f:22:
                    8a:31:06:12:9e:55:71:7c:38:10:f0:50:a0:5a:57:
                    bb:27:9c:9b:70:65:37:58:b9:ec:f2:c0:29:65:80:
                    89:bd:24:69:a6:65:cb:ea:34:95:e3:66:21:93:97:
                    19:53:66:78:7e:93:ee:3b:c8:34:c9:c9:a3:7a:c1:
                    94:4e:09:d1:0b:ff:1d:20:08:d1:7a:e0:af:03:0f:
                    5f:6b:9b:df:0f:37:cd:b6:95:00:1b:21:a0:62:da:
                    96:16:f0:26:ce:16:05:2d:68:a0:4d:55:ed:4d:68:
                    59:d2:5c:6d:b2:95:d3:70:3e:ac:ec:59:da:d2:da:
                    7b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BD:71:6B:8C:6A:E5:62:4F:B6:22:C3:4A:C2:A9:D7:64:A2:23:5E
            X509v3 Authority Key Identifier:
                keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a8:8c:1d:89:10:ee:67:c5:d3:b5:c3:68:72:e8:95:1d:92:
         65:a4:99:7e:aa:d3:ef:b6:6e:33:08:20:d3:a5:12:48:b6:59:
         9c:29:87:4d:ec:ba:c4:6f:ca:6d:b7:9d:ad:c2:2d:b5:a1:7e:
         91:78:5f:bf:11:8f:80:42:57:d7:8a:64:3f:d6:47:66:4d:ce:
         30:0b:43:aa:d2:7a:34:a2:1a:92:1e:6e:d6:18:66:38:2c:d2:
         a2:c7:84:ed:40:34:cd:da:c5:29:1d:e1:6b:0c:a3:67:1b:1a:
         a8:6e:e7:cb:10:c7:74:3b:c0:cf:8e:d0:90:5e:60:7a:d9:22:
         fc:34:bf:27:f1:98:60:1a:b8:ca:45:da:87:ac:80:d5:95:b8:
         2f:17:f1:bd:7e:17:0a:3b:62:34:01:97:a1:a6:59:c4:a8:3e:
         78:5b:f8:1f:3a:89:00:73:b7:79:7a:8a:7b:58:cf:fd:e3:bc:
         8b:12:a8:e3:8d:b0:14:a9:9e:47:59:8b:7e:22:1f:77:43:d9:
         65:48:c3:df:ed:51:20:47:3c:be:5f:03:67:f0:5e:c5:53:a3:
         5f:76:00:9b:3e:fd:2d:19:23:e9:e4:30:6a:6b:13:c8:a4:52:
         d3:1a:d7:9b:c7:11:0e:20:cb:20:ee:05:66:0c:da:5f:f5:8f:
         8d:cf:bd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:03:07 2026 by rpki-client