Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
File:                     TWn-EboAGxKm-9GJYpo_sYG9jJs.mft (raw, json)
Hash identifier:          aYCWSWwgqssbSdA4H+pfF1/1GotOiIrbskzgR/AmN9E=
Subject key identifier:   FC:22:D6:6D:06:C5:B3:C4:FF:E4:DC:02:89:19:25:B9:49:E6:00:17
Authority key identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B
Certificate issuer:       /CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
Certificate serial:       01974E20564FF5564D985B11806047FCFD5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
Manifest number:          1580
Signing time:             Sun 08 Jun 2025 06:00:31 +0000
Manifest this update:     Sun 08 Jun 2025 06:00:31 +0000
Manifest next update:     Mon 09 Jun 2025 06:00:31 +0000
Files and hashes:         1: I72vD4clErn-KyL3Il94C9_-wtk.roa (hash: JxiFx7TuP4vOP+SWIC89SDMzWOz23TjJ939/vZhx0JU=)
                          2: TWn-EboAGxKm-9GJYpo_sYG9jJs.crl (hash: uIORBovvl20lT1joQiByM/+LnYosNqntXdu2e5+LF7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:20:56:4f:f5:56:4d:98:5b:11:80:60:47:fc:fd:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
        Validity
            Not Before: Jun  8 06:00:31 2025 GMT
            Not After : Jun  9 06:00:31 2025 GMT
        Subject: CN=fc22d66d06c5b3c4ffe4dc02891925b949e60017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:e8:04:3f:ac:dc:1f:cb:d6:a8:1c:3f:ba:
                    0b:f7:e2:2e:36:29:7e:28:8d:93:8a:42:ee:a8:65:
                    12:ed:07:01:af:f9:c2:7e:55:74:d7:b3:2a:b6:f7:
                    bc:cc:5f:d7:1a:6d:64:03:8c:7b:06:0b:73:d0:94:
                    aa:39:d3:96:d4:cf:12:02:fa:58:00:30:d2:5d:5f:
                    ff:88:32:ef:fc:07:df:2f:fb:81:14:9f:08:48:7b:
                    c3:ca:81:41:9c:60:79:a8:92:00:04:a7:74:52:11:
                    e2:fe:f3:80:b5:14:7e:c4:fb:da:e1:37:48:cd:66:
                    d5:76:13:62:5f:17:6b:e2:b5:8b:4e:d8:3f:75:42:
                    2d:c8:b6:e4:75:bf:f7:f7:79:2d:db:38:d4:5b:d6:
                    68:03:57:09:94:7a:b7:64:8a:26:58:e0:92:57:b2:
                    73:13:ff:f7:24:22:9f:54:1f:dd:c1:46:52:b3:a9:
                    ef:3e:93:9a:1f:03:bc:f5:8a:37:0a:13:8f:ec:11:
                    11:f2:74:49:b6:a9:93:c7:2e:3d:56:48:ed:55:11:
                    0b:7a:d0:0c:f6:82:51:1e:cc:7b:82:41:00:73:08:
                    97:85:47:a3:69:d1:d5:ee:8e:4c:9f:07:d9:a4:dc:
                    8b:6e:02:60:8b:96:2a:a8:73:63:ed:41:8a:99:ba:
                    75:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:22:D6:6D:06:C5:B3:C4:FF:E4:DC:02:89:19:25:B9:49:E6:00:17
            X509v3 Authority Key Identifier:
                keyid:4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:1a:8e:92:ab:56:e3:ce:0d:cf:f5:8b:23:f9:52:ca:d9:8e:
         d1:1c:63:8b:4f:e9:4a:0d:49:12:29:dd:ea:c3:a1:1b:82:54:
         85:5b:e4:3a:7a:a6:46:7e:3a:9f:e8:31:09:38:6a:2e:aa:e3:
         8c:9f:3d:86:63:50:f9:bb:d3:38:cd:82:09:3a:5f:78:34:8e:
         43:e9:a9:01:3e:f5:6e:7f:7e:9d:0f:1c:5b:32:25:a8:e7:fa:
         69:bf:29:44:08:32:23:85:dc:91:57:ba:1d:80:34:15:81:c8:
         6a:1e:f3:a0:fa:43:fc:69:ce:bb:52:15:51:25:dd:80:2b:66:
         cc:4b:32:e0:ad:f2:5f:3b:7c:d2:d4:d4:ad:65:d2:b8:20:72:
         b6:49:a9:9c:e4:6d:f6:ac:6f:09:c7:76:0d:f4:75:f2:c8:0b:
         67:05:10:64:29:12:42:ff:e1:0f:f9:ce:11:2c:8e:3f:4e:ee:
         a1:d1:7a:8f:28:15:4a:e6:45:4a:4c:76:fb:ff:8c:91:f3:d2:
         64:52:a5:57:d9:d9:76:4b:44:5d:12:57:89:04:8c:44:44:00:
         a0:82:42:4b:f0:5a:51:fa:86:39:d2:bf:11:e4:99:f4:ef:f8:
         6c:35:f2:01:99:97:3b:29:57:e8:5b:93:99:f7:6b:99:be:5a:
         34:89:f1:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOIFZP9VZNmFsRgGBH/P1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNjlmZTExYmEwMDFiMTJhNmZiZDE4OTYyOWEzZmIxODFi
ZDhjOWIwHhcNMjUwNjA4MDYwMDMxWhcNMjUwNjA5MDYwMDMxWjAzMTEwLwYDVQQD
EyhmYzIyZDY2ZDA2YzViM2M0ZmZlNGRjMDI4OTE5MjViOTQ5ZTYwMDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqPoBD+s3B/L1qgcP7oL9+IuNil+
KI2TikLuqGUS7QcBr/nCflV017Mqtve8zF/XGm1kA4x7Bgtz0JSqOdOW1M8SAvpY
ADDSXV//iDLv/AffL/uBFJ8ISHvDyoFBnGB5qJIABKd0UhHi/vOAtRR+xPva4TdI
zWbVdhNiXxdr4rWLTtg/dUItyLbkdb/393kt2zjUW9ZoA1cJlHq3ZIomWOCSV7Jz
E//3JCKfVB/dwUZSs6nvPpOaHwO89Yo3ChOP7BER8nRJtqmTxy49VkjtVRELetAM
9oJRHsx7gkEAcwiXhUejadHV7o5MnwfZpNyLbgJgi5YqqHNj7UGKmbp1CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwi1m0GxbPE/+TcAokZJblJ5gAXMB8GA1UdIwQY
MBaAFE1p/hG6ABsSpvvRiWKaP7GBvYybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQt
M2I2OGE4NGNkMmI4LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQtM2I2OGE4NGNkMmI4
LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRqOkqtW
484Nz/WLI/lSytmO0Rxji0/pSg1JEind6sOhG4JUhVvkOnqmRn46n+gxCThqLqrj
jJ89hmNQ+bvTOM2CCTpfeDSOQ+mpAT71bn9+nQ8cWzIlqOf6ab8pRAgyI4XckVe6
HYA0FYHIah7zoPpD/GnOu1IVUSXdgCtmzEsy4K3yXzt80tTUrWXSuCBytkmpnORt
9qxvCcd2DfR18sgLZwUQZCkSQv/hD/nOESyOP07uodF6jygVSuZFSkx2+/+MkfPS
ZFKlV9nZdktEXRJXiQSMREQAoIJCS/BaUfqGOdK/EeSZ9O/4bDXyAZmXOylX6FuT
mfdrmb5aNInxvA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:47:43 2025 by rpki-client