Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
File:                     TWn-EboAGxKm-9GJYpo_sYG9jJs.mft (raw, json)
Hash identifier:          HaL5K8Xr65rRs8RgRxjs/9Vp0uQZfWSkdQlgw4IFWDI=
Subject key identifier:   30:5F:80:04:70:79:5A:CD:B6:14:DB:94:09:0D:33:06:23:EA:0B:02
Authority key identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B
Certificate issuer:       /CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
Certificate serial:       019A228AC6D178046396DAD9F6FB13F877EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
Manifest number:          16F7
Signing time:             Sun 26 Oct 2025 22:01:51 +0000
Manifest this update:     Sun 26 Oct 2025 22:01:51 +0000
Manifest next update:     Mon 27 Oct 2025 22:01:51 +0000
Files and hashes:         1: I72vD4clErn-KyL3Il94C9_-wtk.roa (hash: JxiFx7TuP4vOP+SWIC89SDMzWOz23TjJ939/vZhx0JU=)
                          2: TWn-EboAGxKm-9GJYpo_sYG9jJs.crl (hash: 7iB2g56F1DAs9uTt61xEAvv2OicYGBCRb6x9m/7Bw4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:8a:c6:d1:78:04:63:96:da:d9:f6:fb:13:f8:77:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
        Validity
            Not Before: Oct 26 22:01:51 2025 GMT
            Not After : Oct 27 22:01:51 2025 GMT
        Subject: CN=305f800470795acdb614db94090d330623ea0b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:9f:3c:02:2d:15:f9:0c:d9:54:e2:f1:62:
                    1c:5b:18:19:f1:fb:62:32:bb:81:53:a2:91:f3:e4:
                    5f:01:e8:3a:34:22:a7:61:47:85:78:c4:71:c6:22:
                    92:0f:0c:c2:ee:01:bf:19:87:33:40:1a:9f:c6:b4:
                    da:8c:54:d4:61:34:74:89:36:5d:9f:95:08:2f:a0:
                    db:7e:57:57:d2:7d:62:80:da:43:c0:06:cb:28:78:
                    24:d5:d0:3d:f3:d8:0f:0a:92:ac:c8:f8:df:3d:d4:
                    0d:60:ce:ed:9d:07:a8:d6:a3:92:e9:ae:99:db:3b:
                    3f:6e:e5:c0:4c:12:f3:be:1b:24:79:f8:72:f4:ba:
                    c0:b9:4e:42:64:46:17:8a:93:54:fc:68:be:02:12:
                    d3:a9:85:f5:3d:6b:ed:c1:76:47:be:11:99:95:d7:
                    4b:3c:0e:03:cb:db:6c:a5:5f:35:38:e0:e3:bc:c9:
                    d2:7e:58:a6:4a:7a:fb:37:b8:db:75:ad:69:ae:08:
                    9f:b4:69:a8:a1:53:6a:24:50:1a:c2:28:99:aa:0c:
                    fe:76:33:d9:f1:ed:dd:28:d2:2f:5f:8f:73:0f:3a:
                    6f:0b:49:b6:9b:4b:eb:25:e6:d8:53:98:2e:f8:f2:
                    e5:6c:90:fe:81:9e:10:22:20:00:00:0a:31:d1:19:
                    2c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5F:80:04:70:79:5A:CD:B6:14:DB:94:09:0D:33:06:23:EA:0B:02
            X509v3 Authority Key Identifier:
                keyid:4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8a:0c:a8:16:83:ec:66:05:92:8c:34:f9:85:00:8e:3a:5e:
         16:8c:1e:3c:72:79:0d:05:d7:cf:7f:8f:2b:43:08:ea:a8:20:
         3b:82:cc:05:5e:e2:4a:94:7a:85:72:51:45:8b:e8:45:87:1d:
         ab:8c:ef:18:95:ed:5f:af:a6:8f:2c:a3:97:d0:d2:00:d5:7b:
         9b:4a:24:31:d7:08:99:be:7f:b2:43:4b:63:c1:2d:23:9c:45:
         ec:b8:d0:88:ed:dd:0f:5c:97:cc:20:02:e0:a4:89:90:f0:70:
         fc:4a:6d:55:73:e9:bb:87:bd:a1:4d:3b:91:bb:cf:1a:d7:74:
         37:ef:bf:0f:1a:c5:77:78:44:32:13:28:13:74:fd:cc:b3:c1:
         25:8f:f9:57:63:b3:33:bf:11:d1:8d:bf:b6:e4:86:4f:8a:6f:
         db:50:8e:f4:b1:bb:7b:cd:b1:0e:2c:6c:b3:ad:69:67:55:b2:
         e3:0f:5b:80:19:29:d3:12:98:6d:fa:9b:7d:6d:5e:3b:c6:c3:
         0c:0a:b2:e1:b2:0a:52:2a:1e:d4:9c:df:f6:2c:5f:d7:5d:86:
         cd:e7:43:3a:28:7c:94:87:4f:73:cd:ab:39:ba:dc:96:7b:27:
         71:41:08:c6:ae:51:1c:37:1b:59:f7:d7:43:31:6f:b8:85:9b:
         5c:6d:25:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:08 2025 by rpki-client