Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
File:                     1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json)
Hash identifier:          7ZLAKOJuTz9ZDxUffUPRtt/lROS1XfQf51IDEv5cxwI=
Subject key identifier:   CB:E1:64:5A:EE:8D:59:11:CE:5B:CB:FD:4F:6F:A1:51:DF:6D:95:3E
Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
Certificate issuer:       /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Certificate serial:       019D2516736AD462E9B81B706CA34B5F2DF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
Manifest number:          1819
Signing time:             Wed 25 Mar 2026 13:02:01 +0000
Manifest this update:     Wed 25 Mar 2026 13:02:01 +0000
Manifest next update:     Thu 26 Mar 2026 13:02:01 +0000
Files and hashes:         1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: oZY/0uFUaJDn1bsfEwHpncfC0iWh23L1Cd1aMqOsNHo=)
                          2: ZbjQSCZ3uAIwmEEj11MfV5D8gC8.roa (hash: 5T7LXIEjxnn1PBqbN7TiQKs4WoehbeF3nUrwaJWfoo4=)
                          3: cST23LuN3w66sBxb_OXZ1pkXIXo.asa (hash: lZY1PDiHURGQ7ogGrBkQN7dp4ASP3/4zd1S0cXWBhGA=)
                          4: rgMK6sFHXbkCK94M_mgXVownuMc.roa (hash: Ezgfu8asu1o9JhVctSXTvp8BRnlwnmsHy1jD2PscHGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 13:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:16:73:6a:d4:62:e9:b8:1b:70:6c:a3:4b:5f:2d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
        Validity
            Not Before: Mar 25 13:02:01 2026 GMT
            Not After : Mar 26 13:02:01 2026 GMT
        Subject: CN=cbe1645aee8d5911ce5bcbfd4f6fa151df6d953e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cb:c4:6f:89:d7:1d:22:8f:79:97:12:69:3e:
                    ec:98:d1:c3:75:d1:56:31:17:36:86:a3:15:58:8d:
                    d3:4a:1a:ba:a9:36:69:81:7f:cc:1c:a0:69:03:0a:
                    d3:0f:2c:24:0c:d5:12:60:b6:7b:50:11:b9:4e:a7:
                    6c:ed:4e:d6:c3:b4:25:62:36:88:bc:80:e3:38:02:
                    48:55:1f:51:e9:49:4c:24:c4:5f:5d:15:6d:c5:c9:
                    8b:59:fd:12:ba:3e:dc:eb:6c:40:6d:f6:3d:4c:e7:
                    fc:5b:de:17:1f:be:cc:bb:a9:47:a8:2d:0e:04:39:
                    57:3d:28:b5:34:3c:b0:c8:83:f6:19:6b:f5:39:75:
                    78:92:59:cc:48:5f:0f:75:ae:6e:a5:a4:f7:6d:f8:
                    fc:e6:ea:03:cd:5f:91:da:68:6b:2c:e5:0e:7c:53:
                    76:a0:6f:1a:52:ad:6b:3a:f8:42:00:f9:eb:b2:e6:
                    f7:72:c6:d3:35:11:0e:71:77:e9:67:82:4a:76:3d:
                    4a:08:10:12:59:65:e6:ad:11:05:66:56:54:b5:5f:
                    95:15:64:69:13:66:0b:80:2c:01:f7:28:6f:37:1c:
                    c2:09:b9:cf:c7:d3:72:a8:10:5f:e8:c7:04:b5:bd:
                    76:2c:64:36:2a:9e:c5:92:8a:f4:da:39:93:23:20:
                    42:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E1:64:5A:EE:8D:59:11:CE:5B:CB:FD:4F:6F:A1:51:DF:6D:95:3E
            X509v3 Authority Key Identifier:
                keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c1:c2:1a:69:88:f0:31:bf:2c:95:c7:64:92:57:d4:17:70:
         56:28:ec:62:c7:8b:7b:93:95:bb:de:e2:1e:7b:2b:a0:59:2a:
         18:d5:f8:94:aa:b1:ea:53:59:e1:01:98:83:f8:8b:82:92:1c:
         bd:c9:f8:b9:ca:98:dc:e4:9d:a6:c4:6a:e8:04:b6:b9:e0:76:
         1a:3e:67:e8:bc:65:a8:10:6d:dc:c4:8e:6d:24:aa:83:fd:38:
         a5:fe:a8:cd:9f:c6:3c:60:0a:07:97:60:a3:11:59:5c:7c:61:
         08:19:64:3d:61:d1:95:4d:f5:c7:f4:d4:9e:fc:f6:c9:35:f8:
         4f:74:f5:1d:a2:6f:53:41:66:ba:1a:d9:79:3a:cf:09:76:1e:
         fa:1b:a8:41:9b:56:ff:cd:7d:9f:64:8c:5f:ea:28:6e:1c:03:
         0e:83:dd:dd:1f:7f:bf:2d:5c:3e:7a:47:1e:d5:f0:90:36:4e:
         cd:30:29:cf:69:c2:18:59:03:a1:63:8a:71:a8:56:92:66:00:
         ee:6e:bf:24:e4:08:d8:9d:1e:36:59:86:de:5c:20:7f:9c:e1:
         b9:19:20:a1:87:0e:1c:61:10:98:d3:30:ac:d2:d9:26:fb:7c:
         6d:29:de:50:34:04:1d:9e:29:52:1d:6f:fb:15:f0:16:af:df:
         86:9d:11:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:18:58 2026 by rpki-client