Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/87354c-9ad5-46bc-9576-6ce0214dc32b/1/Tsttw-UAFuqmq8aTDufgFjD0dxQ.mft
File:                     Tsttw-UAFuqmq8aTDufgFjD0dxQ.mft (raw, json)
Hash identifier:          aTjgm54z6REabQsGzNDR/BcRpoKi+UI0LLT0zyiXpGI=
Subject key identifier:   22:CE:CB:E8:F4:0C:A4:4D:7C:DA:D3:43:7F:5D:49:B4:33:52:DD:F7
Authority key identifier: 4E:CB:6D:C3:E5:00:16:EA:A6:AB:C6:93:0E:E7:E0:16:30:F4:77:14
Certificate issuer:       /CN=4ecb6dc3e50016eaa6abc6930ee7e01630f47714
Certificate serial:       019DDD31BE03C7D630C57F33837B87D4EF6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tsttw-UAFuqmq8aTDufgFjD0dxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/87354c-9ad5-46bc-9576-6ce0214dc32b/1/Tsttw-UAFuqmq8aTDufgFjD0dxQ.mft
Manifest number:          57
Signing time:             Thu 30 Apr 2026 07:01:57 +0000
Manifest this update:     Thu 30 Apr 2026 07:01:57 +0000
Manifest next update:     Fri 01 May 2026 07:01:57 +0000
Files and hashes:         1: Tsttw-UAFuqmq8aTDufgFjD0dxQ.crl (hash: fF+SGlRqRLOIqg8jFDa8IH3XZ8MKPDI/E4hExaXHueY=)
                          2: ZY_YEbzrL_E-ZuZ3jIioPCydmlA.roa (hash: ilm5jQB9YySdwy/kG88g3FsUAj3cR0CDlM5CPaMuF94=)
                          3: pKLU-oXD96BLmopSPcq2hhBz9nU.asa (hash: K+LUZQF/Ots+yaB/LqTL2DJ9BOU+/ZErUIXXL3Msu0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/87354c-9ad5-46bc-9576-6ce0214dc32b/1/Tsttw-UAFuqmq8aTDufgFjD0dxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/87354c-9ad5-46bc-9576-6ce0214dc32b/1/Tsttw-UAFuqmq8aTDufgFjD0dxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tsttw-UAFuqmq8aTDufgFjD0dxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dd:31:be:03:c7:d6:30:c5:7f:33:83:7b:87:d4:ef:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ecb6dc3e50016eaa6abc6930ee7e01630f47714
        Validity
            Not Before: Apr 30 07:01:57 2026 GMT
            Not After : May  1 07:01:57 2026 GMT
        Subject: CN=22cecbe8f40ca44d7cdad3437f5d49b43352ddf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b7:2d:d9:8b:cc:97:0f:6a:d7:44:2b:7e:01:
                    28:a0:cf:1f:75:af:c0:92:ba:db:ba:f6:7d:72:13:
                    65:3a:19:eb:dd:af:29:89:bf:77:9a:15:07:1d:87:
                    98:79:ad:2c:05:91:d9:51:16:58:c8:10:ce:94:77:
                    f7:e1:06:e9:6b:0b:61:59:f8:8c:33:82:05:45:e8:
                    d7:01:fd:bd:9e:80:0b:34:32:9f:cc:25:29:53:39:
                    52:ef:da:2e:3f:bd:ae:8c:e2:10:51:89:00:96:be:
                    ce:08:d4:fa:f1:bf:4b:27:55:92:e4:cb:48:63:2f:
                    1e:8a:7b:5f:9c:d7:d8:e5:01:4f:cf:89:a8:57:03:
                    fe:d9:0d:1a:bc:8e:8f:4f:2f:45:1c:4b:71:df:05:
                    94:cd:d7:bf:de:1e:a0:97:ab:a4:ea:6a:20:ca:9e:
                    d1:8b:d6:dd:9c:52:be:3d:09:8e:77:d3:49:09:31:
                    ba:ca:3a:06:3c:8a:f4:c9:98:61:ad:4e:fa:ec:65:
                    41:c4:c0:a1:aa:bf:05:dd:64:38:8b:8e:89:8c:f1:
                    36:bd:df:4e:c9:03:b5:b1:28:3b:17:e1:8d:ab:18:
                    cb:c9:16:6c:63:d3:c7:42:51:c9:43:53:56:48:d0:
                    0e:66:84:07:5c:e3:08:3c:79:89:2a:a0:b9:53:b1:
                    60:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CE:CB:E8:F4:0C:A4:4D:7C:DA:D3:43:7F:5D:49:B4:33:52:DD:F7
            X509v3 Authority Key Identifier:
                keyid:4E:CB:6D:C3:E5:00:16:EA:A6:AB:C6:93:0E:E7:E0:16:30:F4:77:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tsttw-UAFuqmq8aTDufgFjD0dxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/87354c-9ad5-46bc-9576-6ce0214dc32b/1/Tsttw-UAFuqmq8aTDufgFjD0dxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/87354c-9ad5-46bc-9576-6ce0214dc32b/1/Tsttw-UAFuqmq8aTDufgFjD0dxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:81:6f:c4:92:b6:48:c4:95:7c:3a:0e:29:42:c4:c9:bb:bb:
         a3:e1:57:eb:5b:23:ae:42:5f:f2:b4:b1:ce:ac:f0:86:0e:aa:
         51:e6:74:90:f9:5d:71:e6:7a:2c:51:6f:a9:8d:12:ad:b8:66:
         23:d3:e2:d8:1a:f3:c5:2c:12:7c:d4:c5:84:2a:58:c1:a6:ed:
         7c:96:6c:94:f7:19:d8:a4:02:ba:da:3e:e6:b8:ca:73:5e:a1:
         98:95:d6:6b:bd:e4:02:a1:e6:2f:9f:f3:d8:4b:4f:d9:f2:a7:
         36:13:f1:d0:6b:74:12:05:1c:e1:79:0b:73:23:3c:ca:41:12:
         2f:e6:ad:1a:ea:b8:e6:7a:8e:78:ca:dc:26:5d:65:d2:15:1b:
         44:c7:73:84:2b:6f:02:72:54:3a:84:72:8c:7e:f3:55:b5:dd:
         75:b5:a3:fc:6f:03:5e:b7:14:aa:ad:af:0b:36:28:9f:57:a9:
         a8:43:3f:d5:65:5d:0b:1f:5d:79:5f:f6:02:09:5b:db:64:9c:
         16:a3:2f:1b:59:c1:08:5e:26:a7:e0:e1:8c:b3:31:9b:e1:8c:
         0d:16:01:ba:e1:06:21:6c:06:83:b2:46:20:94:8c:98:26:25:
         7a:74:bd:dc:35:65:22:7b:c3:51:bc:fd:b3:b0:f8:44:0f:4a:
         ad:53:35:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:50:25 2026 by rpki-client