Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
File:                     Tx097mN940sTx0umz7TSBb5VYn4.mft (raw, json)
Hash identifier:          diM8cG3Fa7V5HQPYwZ/mv6vKw/AaL8NE4wPrhyp4/0g=
Subject key identifier:   3D:1A:5B:09:46:F1:16:40:DA:12:29:C6:20:0B:EE:B8:0D:9D:96:BA
Authority key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
Certificate issuer:       /CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Certificate serial:       019CAA58A662CCC8E293A55214293871254C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
Manifest number:          1841
Signing time:             Sun 01 Mar 2026 17:01:02 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:02 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:02 +0000
Files and hashes:         1: Tx097mN940sTx0umz7TSBb5VYn4.crl (hash: 5x55zQ6BVllEO1WU1xHQ9uQCyQ1WSN4cZgLVvhQcyxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:a6:62:cc:c8:e2:93:a5:52:14:29:38:71:25:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
        Validity
            Not Before: Mar  1 17:01:02 2026 GMT
            Not After : Mar  2 17:01:02 2026 GMT
        Subject: CN=3d1a5b0946f11640da1229c6200beeb80d9d96ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b4:b8:d2:cf:4e:01:fd:56:a9:86:41:d4:28:
                    e8:fb:0c:7c:59:8f:b8:cc:b0:0d:70:ce:d8:40:3a:
                    2d:c7:7d:98:56:b8:2d:4c:a3:56:c2:91:3b:28:86:
                    8f:6d:fd:9c:69:89:80:ee:1f:16:36:2a:eb:a2:4f:
                    5e:f8:47:de:1f:70:fa:22:3b:0d:ed:d9:a9:05:c2:
                    f3:94:18:53:d2:a5:2b:85:55:05:5f:04:00:e9:c5:
                    36:f3:fd:5d:a8:2e:05:4d:43:87:96:2b:be:62:7f:
                    57:f7:88:0e:66:0b:99:66:1d:ab:04:7f:17:c6:a5:
                    e3:c4:a9:c3:5d:97:51:95:22:62:ec:9c:d3:3b:d6:
                    d5:ba:c1:db:6c:79:87:f4:46:ce:59:bb:94:28:b0:
                    47:da:bc:8a:3c:06:61:9b:28:aa:dd:c8:3e:f4:b2:
                    27:34:89:dd:4a:13:8b:01:a8:d1:d7:1c:07:42:5e:
                    76:ee:ff:ee:73:34:e1:5a:dc:54:a2:f1:8f:3d:f8:
                    fe:ad:8e:0b:74:c0:1d:51:b1:3c:1e:f0:be:f5:92:
                    25:54:fb:6e:7d:7b:75:0a:e5:6c:54:40:a5:2c:20:
                    5b:de:52:7a:18:58:51:e5:7d:c1:1c:e7:24:3a:9e:
                    cb:77:36:b9:09:4e:ba:d4:47:0d:6c:37:bc:67:13:
                    2c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1A:5B:09:46:F1:16:40:DA:12:29:C6:20:0B:EE:B8:0D:9D:96:BA
            X509v3 Authority Key Identifier:
                keyid:4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7c:58:8d:d0:6e:29:ea:92:e9:8d:88:e3:01:76:45:d8:5c:
         c3:d8:1f:5d:db:1a:ab:57:64:4e:39:83:dd:f2:28:1a:5a:de:
         a9:70:fe:c9:a6:fe:a0:07:67:12:a5:05:98:80:f6:67:6a:7e:
         36:c9:b7:f7:30:d8:5d:ca:32:f3:55:e0:85:50:1b:5b:6a:06:
         2b:88:a8:6d:fb:18:bc:40:0f:84:6c:6e:65:76:bc:04:56:d8:
         bb:ab:9b:84:ea:4d:99:1d:50:77:e4:ef:17:92:7a:87:1b:44:
         a2:9e:07:e5:b3:dd:08:11:91:1c:8a:4e:c8:31:eb:9a:7a:fd:
         a8:95:e3:45:1f:98:8e:7a:d8:e9:a3:75:12:76:c1:5c:8a:ad:
         24:76:b6:25:15:44:6f:b4:b5:75:3c:53:9b:86:68:2f:17:a5:
         67:5f:04:1e:51:33:d4:79:2c:6c:a6:ff:ad:33:0d:0f:a4:7d:
         b3:95:e4:30:4b:25:c2:87:37:c4:90:f8:2c:ba:92:88:87:19:
         1c:5c:98:39:76:12:06:9b:df:e5:10:c4:6a:10:80:32:46:34:
         2b:b8:97:92:37:f5:2f:55:6b:f0:66:e9:ae:b6:45:a5:f7:bc:
         71:3a:4e:a3:55:80:c5:0b:6f:24:40:6d:56:f8:88:a6:62:7a:
         a0:e3:f9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:11 2026 by rpki-client