Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
File:                     Tw532cb_aNymjwXfj0Z17nvcsLw.mft (raw, json)
Hash identifier:          wFYSEyP0RTX22fSNKnpwkB0/mbJgRks4Y7iPLmdL1IY=
Subject key identifier:   FA:E4:3B:11:68:C6:3A:7A:0B:A7:8C:DB:0B:25:78:7E:3B:2C:22:DA
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Certificate issuer:       /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial:       01A002EFECAEAFF962D12E6822F16B211E35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
Manifest number:          1A0B
Signing time:             Sat 15 Aug 2026 01:01:13 +0000
Manifest this update:     Sat 15 Aug 2026 01:01:13 +0000
Manifest next update:     Sun 16 Aug 2026 01:01:13 +0000
Files and hashes:         1: 39rMz_WIR2e8L2mM9nRbVwSsWYs.asa (hash: 5o54GUaG5AJOqUjqrqNiS3NWFX9t0EEkMJIm09Gxdrg=)
                          2: 3XPbOVP5LZm9gbvbxeYXvE-UXNY.roa (hash: P5VCL1xp51uhegWvbhWmEVzPBE26QsXY7i6bNOoE28E=)
                          3: 4lw_9PAntET-B5MMVn16dO3Hcls.roa (hash: UDzY7XNVR7aRxZCWElIUyD0jHCPvLTcFxpVSeLZMRg4=)
                          4: Tw532cb_aNymjwXfj0Z17nvcsLw.crl (hash: nnr5joGdNcEd8qEnQQAVNamY3oYGiA6Uxp/1qNBSaNM=)
                          5: cqsm3cZPpf_tObwDEACdHxs7fkA.roa (hash: d+AU9b3PeXFxvtfVifLL55zjYWSVguy94TW2GQv8rLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 01:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:ef:ec:ae:af:f9:62:d1:2e:68:22:f1:6b:21:1e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
        Validity
            Not Before: Aug 15 01:01:13 2026 GMT
            Not After : Aug 16 01:01:13 2026 GMT
        Subject: CN=fae43b1168c63a7a0ba78cdb0b25787e3b2c22da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:ab:a4:b1:ca:58:c5:17:c3:89:f2:84:76:
                    7e:57:02:6c:e8:f0:33:39:3b:a3:f4:17:71:b5:cd:
                    eb:e2:1d:ab:25:0e:80:51:a3:43:23:5c:03:aa:5a:
                    3a:7d:2c:18:13:71:8c:52:e7:2b:3f:0f:5e:c9:10:
                    0e:36:08:e9:a9:c4:83:5b:0e:0f:2b:3e:65:40:00:
                    3c:00:f8:75:f2:ac:ac:af:54:46:ed:7c:47:16:b0:
                    db:7e:fb:c9:09:d1:07:e6:1f:20:99:dc:b2:e9:38:
                    78:b3:f8:74:bc:69:98:cb:aa:40:98:39:9e:4e:10:
                    0a:cb:c7:42:43:f8:cd:1c:c5:03:7f:3f:32:a1:61:
                    90:3b:f9:1a:b5:9b:d6:71:55:81:64:3a:4f:f1:26:
                    72:9d:41:27:c9:ab:5f:c5:7b:b8:65:e9:be:31:3b:
                    59:50:2e:6d:71:d7:22:17:ba:40:33:d3:8f:59:06:
                    8d:44:de:37:d6:51:e9:ce:0b:b6:b8:e8:3b:79:36:
                    a9:0a:d4:30:40:99:a6:45:ba:47:e9:c7:27:ea:de:
                    71:47:b3:70:4c:3e:09:b9:80:f9:e6:f8:9f:7a:8e:
                    10:b6:a1:ee:c4:53:b8:b3:06:7c:dd:79:ac:ca:33:
                    d8:15:7c:15:c7:08:59:7f:bf:08:f5:d9:62:74:0e:
                    99:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E4:3B:11:68:C6:3A:7A:0B:A7:8C:DB:0B:25:78:7E:3B:2C:22:DA
            X509v3 Authority Key Identifier:
                keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:58:7b:72:53:57:48:23:28:ee:2f:f2:3f:e4:4c:52:6b:17:
         09:5e:4f:72:f2:13:65:66:39:e7:15:23:1d:f6:5d:3a:21:98:
         77:54:c1:cf:1d:bb:5f:5b:75:ee:03:00:a2:45:47:7c:c9:f9:
         8e:3f:f8:2b:96:9d:a2:09:0e:1c:8f:b1:c4:c8:39:71:fa:f1:
         b5:47:91:51:d2:36:f0:f7:f3:cd:26:17:61:09:04:e6:f2:e4:
         ed:41:78:51:fc:53:d1:94:c0:5a:5d:20:8d:77:10:d8:ef:49:
         61:98:02:48:b0:f4:62:d8:19:df:60:46:0f:a2:de:4f:39:79:
         19:20:14:fb:62:7d:92:c4:59:ab:9b:d4:20:e2:f2:25:e9:01:
         ab:54:36:f9:aa:87:7f:76:c2:96:d4:70:80:76:76:2f:f0:7d:
         7e:7f:6c:e5:6e:b7:06:a0:ec:e9:63:0d:e8:3f:c0:41:5d:9d:
         dc:43:7e:cb:11:b7:52:6b:99:fe:33:4b:6b:c7:8b:ef:1d:b2:
         e0:a6:7e:fd:9b:4b:78:19:02:a1:5b:2b:3c:a5:5d:f3:21:bd:
         c9:d9:23:0f:90:9b:d1:74:ee:26:b8:b8:de:48:2f:47:ad:4c:
         4d:85:34:da:08:fb:69:ea:08:26:fb:b5:6e:18:6d:b9:63:2a:
         4a:e3:47:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:34:28 2026 by rpki-client