Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
File:                     TWn-EboAGxKm-9GJYpo_sYG9jJs.mft (raw, json)
Hash identifier:          3fgCSAg+TcP0Pa9vWrYHfLdyhTx8MiioXwkDqFy9xKc=
Subject key identifier:   D0:55:83:D3:17:78:CE:60:95:B6:A6:CA:29:80:0C:F0:5B:33:7B:E2
Authority key identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B
Certificate issuer:       /CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
Certificate serial:       01A08B9F1BE93DEEF579E604DAE31C8D934A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
Manifest number:          1A49
Signing time:             Thu 10 Sep 2026 14:00:55 +0000
Manifest this update:     Thu 10 Sep 2026 14:00:55 +0000
Manifest next update:     Fri 11 Sep 2026 14:00:55 +0000
Files and hashes:         1: TWn-EboAGxKm-9GJYpo_sYG9jJs.crl (hash: D+p+Id4jJWrNFjFIat3UrL06Fn7ojxqcHX9aiXzX/A8=)
                          2: d0gc-bfZVZ_wvr1zHWcpz3THoUw.roa (hash: omEL790d2ktapnfeuHtd9b9rxp1D6UXPaEs4yrE6gFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9f:1b:e9:3d:ee:f5:79:e6:04:da:e3:1c:8d:93:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
        Validity
            Not Before: Sep 10 14:00:55 2026 GMT
            Not After : Sep 11 14:00:55 2026 GMT
        Subject: CN=d05583d31778ce6095b6a6ca29800cf05b337be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2e:ac:34:8e:96:05:98:e8:9b:e6:12:6b:79:
                    9f:43:a2:6f:fe:97:16:f4:80:fe:ea:c3:de:7f:6b:
                    e5:0e:74:e9:0c:e5:96:20:c8:9a:72:56:e7:37:22:
                    97:63:98:14:78:b0:c9:87:b9:fd:10:28:7c:ef:93:
                    3c:0c:4b:31:b1:dd:2d:84:d8:a1:2d:f3:86:c5:3f:
                    7a:e4:3d:14:9d:a4:db:02:43:b4:87:9d:8f:69:79:
                    6d:26:ed:08:58:1a:ec:07:1b:1f:08:55:63:32:c8:
                    56:3f:07:1d:bf:89:ab:09:cd:e6:b4:6f:84:51:0a:
                    12:4b:cc:0e:41:1f:19:03:ec:be:94:69:70:78:8d:
                    ec:fa:fa:f4:78:23:ec:27:57:e0:50:eb:c7:19:16:
                    6a:da:ba:19:10:80:6c:d6:3e:1b:fc:16:fd:14:26:
                    f3:ea:db:46:86:77:de:ab:8f:f8:b5:cb:2a:32:bb:
                    b8:ff:51:de:13:54:ab:31:20:a9:07:eb:f6:be:2e:
                    ce:f1:b9:05:fe:c2:c2:e5:09:f4:c7:c5:96:c4:79:
                    a3:3a:53:9f:ba:ca:d2:31:c3:a8:d2:94:23:b1:7b:
                    f5:be:7a:ae:69:2e:a8:95:8b:18:d2:53:c9:93:ae:
                    6b:ea:db:48:09:d4:2d:e9:7c:ad:19:57:8c:ff:22:
                    9a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:55:83:D3:17:78:CE:60:95:B6:A6:CA:29:80:0C:F0:5B:33:7B:E2
            X509v3 Authority Key Identifier:
                keyid:4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:7e:dc:e9:fb:e7:58:61:ed:8a:78:7d:6f:e6:8d:d7:a9:9a:
         fc:c5:15:07:66:e7:a0:74:08:d2:25:13:03:b8:07:0b:82:1b:
         f5:a4:8e:88:89:ca:5f:3d:d3:b0:88:7c:88:33:91:68:da:e4:
         d0:b4:d2:11:43:69:72:bd:0b:9a:4a:8e:6f:c0:68:b2:47:a3:
         52:e9:56:7e:d0:7e:62:1d:4f:bf:41:a6:45:44:87:ca:d7:4e:
         79:89:3d:12:a0:2d:56:fe:97:2e:c4:92:d9:60:d1:23:e9:97:
         4e:6a:e2:4a:34:36:4c:83:63:5a:0d:47:df:8a:18:85:39:d9:
         93:f8:45:db:ab:7a:2e:4d:6d:32:38:fd:e1:88:e6:ca:b2:b1:
         94:91:99:17:b8:90:b7:e6:9a:c1:dd:44:5f:ae:97:45:96:5c:
         6c:ea:ea:18:32:d9:f3:d7:47:a9:99:69:62:3e:a7:51:6e:97:
         da:46:72:fe:c2:dc:44:4d:c5:60:ca:5f:74:a9:6e:67:cd:e4:
         22:fb:07:fb:82:b5:98:19:28:7a:68:96:aa:ab:15:37:52:45:
         58:63:05:ea:70:86:1d:eb:cf:ce:16:49:1e:aa:6a:6f:13:2b:
         3b:4a:9a:2d:24:a6:52:58:d6:4c:70:9a:fc:ba:5d:9a:b2:fe:
         18:18:b5:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLnxvpPe71eeYE2uMcjZNKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNjlmZTExYmEwMDFiMTJhNmZiZDE4OTYyOWEzZmIxODFi
ZDhjOWIwHhcNMjYwOTEwMTQwMDU1WhcNMjYwOTExMTQwMDU1WjAzMTEwLwYDVQQD
EyhkMDU1ODNkMzE3NzhjZTYwOTViNmE2Y2EyOTgwMGNmMDViMzM3YmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS6sNI6WBZjom+YSa3mfQ6Jv/pcW
9ID+6sPef2vlDnTpDOWWIMiaclbnNyKXY5gUeLDJh7n9ECh875M8DEsxsd0thNih
LfOGxT965D0UnaTbAkO0h52PaXltJu0IWBrsBxsfCFVjMshWPwcdv4mrCc3mtG+E
UQoSS8wOQR8ZA+y+lGlweI3s+vr0eCPsJ1fgUOvHGRZq2roZEIBs1j4b/Bb9FCbz
6ttGhnfeq4/4tcsqMru4/1HeE1SrMSCpB+v2vi7O8bkF/sLC5Qn0x8WWxHmjOlOf
usrSMcOo0pQjsXv1vnquaS6olYsY0lPJk65r6ttICdQt6XytGVeM/yKaFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBVg9MXeM5glbamyimADPBbM3viMB8GA1UdIwQY
MBaAFE1p/hG6ABsSpvvRiWKaP7GBvYybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQt
M2I2OGE4NGNkMmI4LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQtM2I2OGE4NGNkMmI4
LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaX7c6fvn
WGHtinh9b+aN16ma/MUVB2bnoHQI0iUTA7gHC4Ib9aSOiInKXz3TsIh8iDORaNrk
0LTSEUNpcr0LmkqOb8BoskejUulWftB+Yh1Pv0GmRUSHytdOeYk9EqAtVv6XLsSS
2WDRI+mXTmriSjQ2TINjWg1H34oYhTnZk/hF26t6Lk1tMjj94YjmyrKxlJGZF7iQ
t+aawd1EX66XRZZcbOrqGDLZ89dHqZlpYj6nUW6X2kZy/sLcRE3FYMpfdKluZ83k
IvsH+4K1mBkoemiWqqsVN1JFWGMF6nCGHevPzhZJHqpqbxMrO0qaLSSmUljWTHCa
/LpdmrL+GBi1oA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:11:49 2026 by rpki-client