Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
File:                     TWn-EboAGxKm-9GJYpo_sYG9jJs.mft (raw, json)
Hash identifier:          03Bva7PZqcwS6B4msWNdMUK6VuMxneZNfkaWQWn/zJ8=
Subject key identifier:   6F:26:E2:46:52:7A:6D:44:84:93:65:2A:0F:29:42:A5:05:C3:C4:86
Authority key identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B
Certificate issuer:       /CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
Certificate serial:       01965500DCC3D83679D8B31E50507C29ED29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
Manifest number:          14FF
Signing time:             Sun 20 Apr 2025 21:00:41 +0000
Manifest this update:     Sun 20 Apr 2025 21:00:41 +0000
Manifest next update:     Mon 21 Apr 2025 21:00:41 +0000
Files and hashes:         1: I72vD4clErn-KyL3Il94C9_-wtk.roa (hash: JxiFx7TuP4vOP+SWIC89SDMzWOz23TjJ939/vZhx0JU=)
                          2: TWn-EboAGxKm-9GJYpo_sYG9jJs.crl (hash: 5aLX4ZZLD1eUcYtflhcUrGYQEa9up8tKnMUZ/j0F4as=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 21:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:00:dc:c3:d8:36:79:d8:b3:1e:50:50:7c:29:ed:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
        Validity
            Not Before: Apr 20 21:00:41 2025 GMT
            Not After : Apr 21 21:00:41 2025 GMT
        Subject: CN=6f26e246527a6d448493652a0f2942a505c3c486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fb:d0:f8:8c:74:b3:70:ac:70:78:1a:9f:50:
                    34:f6:b6:88:81:bf:8e:3f:8f:ce:ef:7a:89:a1:5c:
                    0c:45:13:70:48:69:72:e1:f9:29:50:78:58:75:8e:
                    b4:35:24:3f:9c:c1:bb:42:b1:98:d3:f0:84:f4:9f:
                    c6:41:66:e8:5e:d3:fa:43:50:b0:ae:09:2f:95:9d:
                    32:f3:ab:6e:61:08:f3:d6:0c:b2:1a:44:4e:27:0a:
                    4e:ea:9d:3e:47:c7:c3:54:63:4d:83:2f:65:ec:ae:
                    f7:ac:6a:62:95:fa:92:75:fb:05:d6:e7:65:18:cb:
                    84:f9:ec:3a:90:87:31:0d:6f:16:52:5d:68:d8:1d:
                    53:38:bb:3f:de:ce:50:48:16:d8:c6:81:a3:6a:38:
                    b7:b3:f7:20:13:85:a4:66:ba:cd:7c:25:53:b0:9a:
                    ee:d1:a6:82:38:e1:e2:ad:f2:f9:2c:ee:5b:92:f3:
                    85:fa:08:6b:81:f2:2f:1a:f1:e8:2c:15:2e:cd:39:
                    c3:56:65:9b:a2:58:d4:6c:97:1a:37:ff:b7:41:ee:
                    88:c2:a8:73:c6:41:07:78:8b:98:cf:a5:b2:c2:73:
                    b7:4a:fd:fb:19:1d:24:66:4d:ee:c4:71:53:fa:ca:
                    6f:af:05:7a:44:99:73:2b:38:13:72:e8:bf:24:d2:
                    c5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:26:E2:46:52:7A:6D:44:84:93:65:2A:0F:29:42:A5:05:C3:C4:86
            X509v3 Authority Key Identifier:
                keyid:4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:3c:65:25:01:84:27:5b:03:23:90:17:0e:30:21:82:4b:a8:
         e3:99:eb:76:ff:00:ec:e2:be:49:44:40:71:0a:ea:da:14:39:
         4b:85:ee:53:ec:ce:a2:bb:ab:03:b2:e2:d7:40:53:29:45:f7:
         de:f5:c7:dc:25:17:39:c6:46:8e:2b:17:5f:b1:6b:67:89:f7:
         41:06:76:c7:75:81:29:13:19:72:1c:c4:6f:83:ae:1c:89:f9:
         51:bc:33:68:98:75:53:1e:58:21:83:4e:68:35:20:38:bd:0a:
         8f:41:e9:5f:f6:40:2a:05:b3:4c:c7:4d:33:08:d8:bf:15:6c:
         e2:48:e6:68:28:38:73:b2:89:a5:57:a7:7f:82:52:cf:96:d2:
         26:d4:1c:b4:97:e2:20:33:88:ea:9f:03:1a:91:e7:a3:36:4a:
         f5:91:ee:98:8d:09:4a:f8:1e:18:1c:00:f7:a4:7d:70:6c:71:
         63:54:18:ae:39:c9:cb:bc:07:12:46:d9:e7:60:ed:1f:26:e9:
         2b:29:e9:2f:f8:ef:a5:f8:dd:a1:05:5d:1a:8c:96:8b:4a:34:
         68:fb:cf:80:ef:45:39:45:65:94:0a:5e:57:1e:34:05:f2:ef:
         db:b9:d3:b8:14:31:4a:9b:d7:6a:d7:98:99:4a:eb:d8:61:f6:
         9f:ac:92:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:30:45 2025 by rpki-client