Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
File:                     TWn-EboAGxKm-9GJYpo_sYG9jJs.mft (raw, json)
Hash identifier:          csAYl8a4pVO7RZQ6phmfadI76zjH8VoOs1254WrRHSo=
Subject key identifier:   77:BD:9A:FF:49:66:E3:8C:F2:18:58:54:DA:93:BE:F9:D1:F8:1F:EB
Authority key identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B
Certificate issuer:       /CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
Certificate serial:       019DCE99582D15CED082935A377FB21C2DD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
Manifest number:          18DE
Signing time:             Mon 27 Apr 2026 11:00:49 +0000
Manifest this update:     Mon 27 Apr 2026 11:00:49 +0000
Manifest next update:     Tue 28 Apr 2026 11:00:49 +0000
Files and hashes:         1: TWn-EboAGxKm-9GJYpo_sYG9jJs.crl (hash: 7Li4OvWDsiFnounL1XrBUPZcUIinQUJqUziMhoZNOwo=)
                          2: d0gc-bfZVZ_wvr1zHWcpz3THoUw.roa (hash: omEL790d2ktapnfeuHtd9b9rxp1D6UXPaEs4yrE6gFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:99:58:2d:15:ce:d0:82:93:5a:37:7f:b2:1c:2d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
        Validity
            Not Before: Apr 27 11:00:49 2026 GMT
            Not After : Apr 28 11:00:49 2026 GMT
        Subject: CN=77bd9aff4966e38cf2185854da93bef9d1f81feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:a8:94:2e:1e:b0:f9:89:38:ca:d1:5b:b2:
                    37:31:82:17:be:c6:6a:e7:b2:9b:bf:78:cf:be:87:
                    34:b2:2e:57:5e:d2:d5:3b:20:96:e3:af:10:68:d0:
                    4e:ee:31:31:52:00:dd:1e:1d:40:18:09:6d:f1:5b:
                    1a:49:79:14:c6:bc:68:63:97:63:9c:ed:43:aa:51:
                    01:be:a3:57:91:d2:d4:c2:d2:f2:84:3f:c5:7e:5b:
                    64:02:b0:34:84:44:34:da:23:c6:44:14:ae:f7:f5:
                    cb:8f:d0:f9:f2:4c:af:c9:c0:ca:83:2c:17:c8:c3:
                    3a:96:ee:68:d8:ed:3e:4a:bc:dc:e7:d4:d7:dc:fb:
                    7c:2c:5c:95:6b:aa:f2:f7:27:48:8d:40:d6:3a:22:
                    59:ec:2d:3f:f2:95:e6:d9:99:7f:0e:5d:27:2f:f5:
                    2e:96:01:82:5e:77:ba:6a:a3:3c:ec:b9:04:d5:1c:
                    b6:f3:89:2d:9d:22:a2:cd:d9:9e:dc:48:26:3d:63:
                    bc:44:09:d3:84:c5:9d:53:80:e4:02:b6:00:46:94:
                    d5:7e:3c:99:7c:fc:10:f7:5f:c3:c9:fc:0a:74:8d:
                    e5:23:04:4a:31:5e:40:8f:95:47:30:6b:1e:e2:73:
                    74:3f:d9:6a:d8:b7:8f:94:96:19:03:54:f2:38:fc:
                    95:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BD:9A:FF:49:66:E3:8C:F2:18:58:54:DA:93:BE:F9:D1:F8:1F:EB
            X509v3 Authority Key Identifier:
                keyid:4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ed:06:e4:ab:d8:02:94:b8:68:99:c7:dd:be:9d:d3:c5:1a:
         87:2b:e7:ad:22:f4:f2:75:03:98:f0:ba:7c:02:4e:98:41:65:
         bb:b6:7d:66:09:c6:12:12:00:78:36:6f:b0:5b:1c:2f:bd:9b:
         ed:fa:ec:c5:ab:1a:8f:d2:c9:e4:61:93:eb:7e:be:8d:98:88:
         fd:62:05:cd:c0:f2:3f:6f:f5:01:64:cd:13:e0:45:a7:87:6e:
         28:bc:cc:6e:ec:d9:bc:3a:8f:61:90:ce:ff:7a:1f:44:d6:a6:
         e8:6a:d0:8b:da:3c:3a:76:b5:f5:af:69:ee:5c:0e:18:96:29:
         53:ff:22:57:5f:6b:aa:d3:ad:20:3d:41:a2:ca:f5:38:e4:2e:
         0e:de:68:67:0b:da:56:00:d1:34:5f:70:90:7f:31:fb:27:0f:
         0c:e0:46:87:7d:47:87:8f:57:49:c6:98:2f:11:9e:ee:0f:a3:
         d9:e0:1a:4e:dd:9c:03:33:6e:b3:ff:56:a9:c1:99:53:cd:77:
         0c:dc:7f:17:66:35:1b:84:7a:ba:d2:5e:89:61:09:af:c6:3f:
         d0:dc:bf:39:77:1e:5d:5c:12:e3:52:04:73:36:6a:a4:6e:ef:
         6b:b4:db:17:1c:54:4b:24:63:58:21:ea:b2:04:d9:63:dd:96:
         da:4f:51:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OmVgtFc7QgpNaN3+yHC3QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNjlmZTExYmEwMDFiMTJhNmZiZDE4OTYyOWEzZmIxODFi
ZDhjOWIwHhcNMjYwNDI3MTEwMDQ5WhcNMjYwNDI4MTEwMDQ5WjAzMTEwLwYDVQQD
Eyg3N2JkOWFmZjQ5NjZlMzhjZjIxODU4NTRkYTkzYmVmOWQxZjgxZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsaolC4esPmJOMrRW7I3MYIXvsZq
57Kbv3jPvoc0si5XXtLVOyCW468QaNBO7jExUgDdHh1AGAlt8VsaSXkUxrxoY5dj
nO1DqlEBvqNXkdLUwtLyhD/FfltkArA0hEQ02iPGRBSu9/XLj9D58kyvycDKgywX
yMM6lu5o2O0+Srzc59TX3Pt8LFyVa6ry9ydIjUDWOiJZ7C0/8pXm2Zl/Dl0nL/Uu
lgGCXne6aqM87LkE1Ry284ktnSKizdme3EgmPWO8RAnThMWdU4DkArYARpTVfjyZ
fPwQ91/DyfwKdI3lIwRKMV5Aj5VHMGse4nN0P9lq2LePlJYZA1TyOPyVdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHe9mv9JZuOM8hhYVNqTvvnR+B/rMB8GA1UdIwQY
MBaAFE1p/hG6ABsSpvvRiWKaP7GBvYybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQt
M2I2OGE4NGNkMmI4LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQtM2I2OGE4NGNkMmI4
LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+0G5KvY
ApS4aJnH3b6d08UahyvnrSL08nUDmPC6fAJOmEFlu7Z9ZgnGEhIAeDZvsFscL72b
7frsxasaj9LJ5GGT636+jZiI/WIFzcDyP2/1AWTNE+BFp4duKLzMbuzZvDqPYZDO
/3ofRNam6GrQi9o8Ona19a9p7lwOGJYpU/8iV19rqtOtID1Bosr1OOQuDt5oZwva
VgDRNF9wkH8x+ycPDOBGh31Hh49XScaYLxGe7g+j2eAaTt2cAzNus/9WqcGZU813
DNx/F2Y1G4R6utJeiWEJr8Y/0Ny/OXceXVwS41IEczZqpG7va7TbFxxUSyRjWCHq
sgTZY92W2k9Rcg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 20:12:32 2026 by rpki-client