Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
File:                     1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json)
Hash identifier:          ZyXzcB75nVX0QN9B473cae4T5HfIY+y0Q53wJ/RsON4=
Subject key identifier:   09:23:48:F9:BA:70:32:A0:10:3B:98:6D:DE:FA:AC:8E:89:2A:35:4B
Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
Certificate issuer:       /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Certificate serial:       019FA82BE2C2140B844DE596BEA3A61E1D06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
Manifest number:          1966
Signing time:             Tue 28 Jul 2026 10:01:16 +0000
Manifest this update:     Tue 28 Jul 2026 10:01:16 +0000
Manifest next update:     Wed 29 Jul 2026 10:01:16 +0000
Files and hashes:         1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: AgEHffr8ufTwJBM4YQcAK5BbL3aIoSDx6Hv0GmE0/bc=)
                          2: ZbjQSCZ3uAIwmEEj11MfV5D8gC8.roa (hash: 5T7LXIEjxnn1PBqbN7TiQKs4WoehbeF3nUrwaJWfoo4=)
                          3: cST23LuN3w66sBxb_OXZ1pkXIXo.asa (hash: lZY1PDiHURGQ7ogGrBkQN7dp4ASP3/4zd1S0cXWBhGA=)
                          4: rgMK6sFHXbkCK94M_mgXVownuMc.roa (hash: Ezgfu8asu1o9JhVctSXTvp8BRnlwnmsHy1jD2PscHGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:e2:c2:14:0b:84:4d:e5:96:be:a3:a6:1e:1d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
        Validity
            Not Before: Jul 28 10:01:16 2026 GMT
            Not After : Jul 29 10:01:16 2026 GMT
        Subject: CN=092348f9ba7032a0103b986ddefaac8e892a354b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:eb:f8:17:d9:94:45:24:f3:73:29:b5:c6:
                    be:e2:f4:ea:5e:9d:d9:35:6b:d9:2e:32:23:65:79:
                    a5:65:a7:76:96:25:07:43:e7:8f:77:3a:ca:ab:9b:
                    92:c3:71:71:ae:68:90:76:37:e9:ce:72:04:48:3b:
                    f9:dd:e1:16:12:17:80:e7:dc:f0:0e:96:5b:5d:13:
                    33:17:5c:3b:36:52:1b:72:31:7e:62:16:14:1e:e2:
                    8b:e3:78:ff:61:f1:a1:f1:e5:9f:4a:1e:96:91:9f:
                    ae:0a:8f:d4:fc:c6:fc:e1:74:b5:c1:56:b8:a2:f0:
                    8c:0a:f9:cb:ef:4a:e5:87:25:24:f3:14:28:ec:c0:
                    53:35:e0:8d:ee:e1:ab:b1:bf:3d:be:ae:ff:0e:27:
                    11:91:f4:7e:68:99:f4:ec:3e:3d:1d:c9:f7:88:f5:
                    16:79:c6:32:ce:b5:25:67:74:c1:65:16:f8:49:cc:
                    78:1b:12:50:2f:1f:28:93:6c:84:67:e0:f1:de:78:
                    db:3c:a0:98:2b:68:0c:3d:13:0c:96:93:26:6d:97:
                    d0:97:be:48:83:74:09:f0:9e:7e:11:b7:b8:08:db:
                    d9:cd:66:56:c4:b9:8a:ce:14:3e:4f:36:9c:14:94:
                    02:94:ec:d2:b3:fd:f5:21:fb:8c:f6:aa:98:61:e4:
                    d7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:23:48:F9:BA:70:32:A0:10:3B:98:6D:DE:FA:AC:8E:89:2A:35:4B
            X509v3 Authority Key Identifier:
                keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:81:48:b4:b3:1d:a1:2e:71:d7:a4:75:13:1c:f0:28:8f:19:
         12:76:9a:94:2d:a6:9c:62:b9:6e:ae:c1:1c:6b:ff:18:80:b6:
         ca:f9:33:07:18:0a:17:16:45:b0:7d:7c:04:3c:cc:2a:b3:05:
         59:cf:c8:c0:39:2f:32:99:9f:86:c9:d3:4a:c7:d4:b2:8f:85:
         26:1b:c6:85:f4:9d:fa:4a:c6:6a:da:62:bd:6f:bb:e4:b3:fe:
         e5:80:00:14:22:da:53:38:97:1c:bc:3d:60:12:0a:61:dd:b8:
         e7:f6:a8:e7:09:9a:b1:8b:1e:0c:a9:f1:29:84:07:86:90:99:
         fb:5c:a7:08:c6:5a:c6:31:f9:9c:60:30:b2:50:d9:06:5e:09:
         eb:f0:d3:09:1c:b8:cf:94:2b:bf:70:d3:50:f5:a7:5d:ab:3c:
         f5:3f:3d:88:f2:b4:f6:55:22:f8:92:6a:8f:3c:99:ae:c2:5c:
         46:a4:45:0f:0d:67:16:c1:96:d7:e1:b0:8d:1d:ec:69:c5:8f:
         a8:2b:21:4d:b3:28:c9:6b:88:33:fc:2a:e4:71:03:5e:4a:7a:
         cd:e7:82:7a:52:ca:d6:49:34:eb:ff:b8:7f:41:f8:41:3e:f2:
         33:3a:0f:24:fd:9f:7a:d8:e8:4c:b5:f2:17:f5:e4:7f:1f:c7:
         75:f5:3c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:17:41 2026 by rpki-client