Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
File:                     1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json)
Hash identifier:          Wc4E6+4e/QIesL3zn28iJG52sRopDECDc2IzmoLL7bA=
Subject key identifier:   35:F2:5E:71:C9:33:02:9E:AF:DC:08:14:F5:B4:6D:0B:59:4D:64:6A
Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
Certificate issuer:       /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Certificate serial:       019E29CB9B8B44A661CD92DE4CD0847C04C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
Manifest number:          18A0
Signing time:             Fri 15 May 2026 04:01:09 +0000
Manifest this update:     Fri 15 May 2026 04:01:09 +0000
Manifest next update:     Sat 16 May 2026 04:01:09 +0000
Files and hashes:         1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: C/3jqjfVuWpzUdTKql60sjPmmJmQgaIjrq1RtZ/4OJo=)
                          2: ZbjQSCZ3uAIwmEEj11MfV5D8gC8.roa (hash: 5T7LXIEjxnn1PBqbN7TiQKs4WoehbeF3nUrwaJWfoo4=)
                          3: cST23LuN3w66sBxb_OXZ1pkXIXo.asa (hash: lZY1PDiHURGQ7ogGrBkQN7dp4ASP3/4zd1S0cXWBhGA=)
                          4: rgMK6sFHXbkCK94M_mgXVownuMc.roa (hash: Ezgfu8asu1o9JhVctSXTvp8BRnlwnmsHy1jD2PscHGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:cb:9b:8b:44:a6:61:cd:92:de:4c:d0:84:7c:04:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
        Validity
            Not Before: May 15 04:01:09 2026 GMT
            Not After : May 16 04:01:09 2026 GMT
        Subject: CN=35f25e71c933029eafdc0814f5b46d0b594d646a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c1:4d:e0:74:51:b3:88:2b:ab:67:9e:41:6f:
                    bf:e1:04:1c:df:93:bd:75:23:b3:e9:22:1f:f1:d0:
                    67:46:7e:9c:0f:8e:4c:a3:66:6c:c1:8c:0a:e5:47:
                    9d:28:db:30:f9:d1:0b:e7:12:0c:1d:00:50:37:03:
                    54:78:db:48:2e:3d:ee:c5:16:ba:01:c8:b2:16:67:
                    7f:32:8c:15:76:52:f7:b3:20:94:31:f2:de:14:1e:
                    1b:95:b4:71:14:f8:7c:79:56:08:96:71:f9:9e:c6:
                    ce:dc:af:9b:be:b8:4f:24:c7:74:d7:68:be:ba:05:
                    68:f2:fd:82:3c:ed:70:36:68:cd:b2:05:fc:a9:a9:
                    ff:a6:91:78:af:80:ac:f8:23:71:90:e3:fe:75:cd:
                    b2:f0:07:38:05:b6:20:1e:20:81:ec:cf:b2:44:c7:
                    f1:bd:d6:a9:79:a4:8b:d4:cd:d1:9f:9a:62:e1:88:
                    84:fe:5e:59:8e:8c:99:e8:a7:54:97:77:2e:41:79:
                    90:ff:78:2f:6b:e3:eb:0f:05:56:05:6d:bb:a8:c2:
                    4c:d3:b8:ee:0f:6c:b1:73:d4:bb:3b:2d:42:58:37:
                    c2:5b:dd:ba:7c:76:f6:64:9b:63:4f:8a:4c:7d:fa:
                    9d:68:28:8d:a0:05:c7:0b:46:94:a2:68:bb:01:5e:
                    65:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F2:5E:71:C9:33:02:9E:AF:DC:08:14:F5:B4:6D:0B:59:4D:64:6A
            X509v3 Authority Key Identifier:
                keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:56:6d:7b:b2:e1:ca:67:51:97:c8:0e:e8:3a:ee:de:34:9d:
         30:18:70:9c:ae:75:81:0d:2b:4c:46:eb:dc:7c:38:14:d0:77:
         a0:39:d0:41:62:75:fd:cd:86:53:9f:dd:24:06:89:b4:5a:44:
         9e:cd:36:e1:95:0a:2b:e6:d2:a5:0e:89:a1:df:41:a4:46:b4:
         41:c4:94:f3:af:56:c9:15:ef:04:24:c5:de:84:2f:28:41:81:
         fc:78:fe:a1:4e:7d:4d:9c:26:28:63:e3:8d:1b:1f:a4:ff:b1:
         0d:97:eb:cc:19:2c:c6:aa:f3:20:85:07:fb:5a:b8:78:86:c4:
         0f:10:06:78:67:8e:53:8a:90:32:a8:cf:f0:2a:d3:b9:54:e4:
         03:0f:15:56:69:96:fb:a4:93:4d:35:ab:ff:3f:1f:eb:c7:4a:
         b1:6f:8f:cc:5f:bf:b9:ad:44:5b:0a:44:d5:37:fe:94:f8:63:
         ff:e1:8d:34:b8:a2:1e:e3:ff:4a:c9:62:4a:e1:7c:ea:05:53:
         2d:94:91:1f:d3:3e:de:a9:84:c0:d4:07:16:cd:6c:85:dc:bc:
         68:9c:12:f6:82:27:74:39:92:45:dd:53:ee:83:99:74:89:12:
         77:f1:44:5a:d8:9c:9e:4d:28:61:e7:47:2f:63:29:ee:a5:bd:
         3e:0c:de:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4py5uLRKZhzZLeTNCEfATJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MzVmOGZhYzcwNjJmNzdmMjRiOThjZDVjM2I1NGE4OWJh
ZDQ4MzgwHhcNMjYwNTE1MDQwMTA5WhcNMjYwNTE2MDQwMTA5WjAzMTEwLwYDVQQD
EygzNWYyNWU3MWM5MzMwMjllYWZkYzA4MTRmNWI0NmQwYjU5NGQ2NDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosFN4HRRs4grq2eeQW+/4QQc35O9
dSOz6SIf8dBnRn6cD45Mo2ZswYwK5UedKNsw+dEL5xIMHQBQNwNUeNtILj3uxRa6
AciyFmd/MowVdlL3syCUMfLeFB4blbRxFPh8eVYIlnH5nsbO3K+bvrhPJMd012i+
ugVo8v2CPO1wNmjNsgX8qan/ppF4r4Cs+CNxkOP+dc2y8Ac4BbYgHiCB7M+yRMfx
vdapeaSL1M3Rn5pi4YiE/l5ZjoyZ6KdUl3cuQXmQ/3gva+PrDwVWBW27qMJM07ju
D2yxc9S7Oy1CWDfCW926fHb2ZJtjT4pMffqdaCiNoAXHC0aUomi7AV5ltwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXyXnHJMwKer9wIFPW0bQtZTWRqMB8GA1UdIwQY
MBaAFNU1+PrHBi938kuYzVw7VKibrUg4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wOTdkYTEtN2NjOS00MzQzLTgwMjQt
YjMxMGQ3MWMyY2FkLzEvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8wOTdkYTEtN2NjOS00MzQzLTgwMjQtYjMxMGQ3MWMyY2Fk
LzEvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlZte7Lh
ymdRl8gO6Dru3jSdMBhwnK51gQ0rTEbr3Hw4FNB3oDnQQWJ1/c2GU5/dJAaJtFpE
ns024ZUKK+bSpQ6Jod9BpEa0QcSU869WyRXvBCTF3oQvKEGB/Hj+oU59TZwmKGPj
jRsfpP+xDZfrzBksxqrzIIUH+1q4eIbEDxAGeGeOU4qQMqjP8CrTuVTkAw8VVmmW
+6STTTWr/z8f68dKsW+PzF+/ua1EWwpE1Tf+lPhj/+GNNLiiHuP/SsliSuF86gVT
LZSRH9M+3qmEwNQHFs1shdy8aJwS9oIndDmSRd1T7oOZdIkSd/FEWticnk0oYedH
L2Mp7qW9Pgzexg==
-----END CERTIFICATE-----
Generated at Fri May 15 06:58:59 2026 by rpki-client