Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
File:                     TWn-EboAGxKm-9GJYpo_sYG9jJs.mft (raw, json)
Hash identifier:          pNw4nmi09sFobUrurG+EDwwhffhfV5A3A4nytaP7TK0=
Subject key identifier:   40:6F:80:54:BD:49:BB:A9:B0:EB:FC:B5:BF:16:10:06:0F:C2:F6:7D
Authority key identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B
Certificate issuer:       /CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
Certificate serial:       019EB84593A57AA23475037CA799A0E86F62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
Manifest number:          1957
Signing time:             Thu 11 Jun 2026 20:00:27 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:27 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:27 +0000
Files and hashes:         1: TWn-EboAGxKm-9GJYpo_sYG9jJs.crl (hash: r7TST0U669qlcqplY0qa3PtDlZGrAbFw5qp34e4US2s=)
                          2: d0gc-bfZVZ_wvr1zHWcpz3THoUw.roa (hash: omEL790d2ktapnfeuHtd9b9rxp1D6UXPaEs4yrE6gFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:93:a5:7a:a2:34:75:03:7c:a7:99:a0:e8:6f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
        Validity
            Not Before: Jun 11 20:00:27 2026 GMT
            Not After : Jun 12 20:00:27 2026 GMT
        Subject: CN=406f8054bd49bba9b0ebfcb5bf1610060fc2f67d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2f:a8:a2:25:0c:c7:d0:92:57:18:3e:e7:ea:
                    85:51:21:bd:bf:2e:61:f8:af:a2:87:c8:d9:77:d7:
                    88:96:e3:b0:59:e0:e1:a1:2c:37:38:53:3c:9e:91:
                    1d:9f:b7:9d:93:ff:97:83:9d:58:64:cd:5d:16:b3:
                    14:ec:21:5d:12:5f:38:70:cc:d0:8d:2c:4c:53:c2:
                    71:5d:54:bf:8e:75:29:ba:43:4c:15:0a:6a:d6:27:
                    2d:18:37:f6:89:10:05:b3:c8:f3:15:c2:6e:c1:af:
                    a7:8a:0f:c7:af:1b:96:b1:2a:38:b7:22:15:b8:53:
                    04:07:8f:2a:c8:90:cb:79:f8:67:4d:27:fd:d2:c8:
                    83:05:71:34:98:fe:10:63:34:87:e9:c7:87:ee:58:
                    b2:64:49:08:4f:aa:2d:5b:73:1b:bc:3c:71:30:82:
                    75:1e:08:eb:96:ea:24:05:92:c8:6d:c4:57:96:72:
                    1d:35:3a:83:c3:a3:12:42:f4:24:b8:e6:6a:da:19:
                    f7:12:ad:c8:2a:ef:62:14:a8:39:f4:c4:f5:8b:e1:
                    4f:01:4f:53:04:e7:72:43:7d:9d:a5:35:01:d6:c7:
                    c9:76:a6:ed:4a:45:f8:91:2e:92:46:43:44:95:e8:
                    2b:96:bc:be:82:b1:0e:ac:e4:d3:00:1f:ca:7c:98:
                    ee:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6F:80:54:BD:49:BB:A9:B0:EB:FC:B5:BF:16:10:06:0F:C2:F6:7D
            X509v3 Authority Key Identifier:
                keyid:4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:34:37:c2:07:14:40:6c:12:dd:90:4c:85:48:ce:4f:aa:90:
         87:c2:9f:32:5e:2f:ad:a4:8b:a1:6e:34:b1:df:04:71:74:b1:
         d8:4c:3d:d1:64:27:9b:6a:e4:e7:e6:06:00:5a:d4:b9:9a:77:
         e8:13:1d:d0:16:e3:2e:1c:38:ae:26:98:91:b8:7f:47:a0:58:
         19:86:41:73:c6:2f:93:21:8b:1d:d0:46:4f:1e:eb:8b:1b:5a:
         f5:1e:20:6b:22:50:0c:45:cf:51:6c:0c:79:84:a0:b1:ce:9e:
         ab:15:2e:76:c0:cc:60:ac:1b:4f:1f:d5:5d:3a:10:5a:b3:6e:
         cc:62:a3:e1:bf:a8:f8:99:3e:8c:48:8f:37:6a:62:4b:ac:1b:
         2e:10:fb:d9:54:b1:35:35:29:c8:53:00:b3:a3:eb:a6:b2:21:
         fd:a4:3f:a1:80:44:56:fc:05:63:e1:58:27:05:35:20:9c:3e:
         c8:e7:6b:1f:4f:0d:ac:f8:0b:5b:4d:41:5d:01:1b:4c:40:04:
         0d:18:57:69:c8:d2:68:8f:73:11:5c:6b:4b:a7:b9:53:7e:4a:
         c5:51:20:d8:0e:7e:d0:a0:6f:0f:5c:ff:3c:8c:b8:14:66:24:
         43:ea:b8:9a:16:f1:12:69:c4:d1:40:53:c2:71:f3:fd:02:0c:
         e0:a2:5b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:15 2026 by rpki-client