Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
File:                     Tw532cb_aNymjwXfj0Z17nvcsLw.mft (raw, json)
Hash identifier:          LvADScT7BoXjRUngFTKcEAgyKe5CBHom71bPn1eJruM=
Subject key identifier:   48:53:41:52:CB:88:51:3B:F2:91:66:17:06:49:2A:EE:BD:F5:90:FA
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Certificate issuer:       /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial:       01A158C1901E11B3A790248494AD326AF7E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
Manifest number:          1ABE
Signing time:             Tue 20 Oct 2026 10:00:42 +0000
Manifest this update:     Tue 20 Oct 2026 10:00:42 +0000
Manifest next update:     Wed 21 Oct 2026 10:00:42 +0000
Files and hashes:         1: 39rMz_WIR2e8L2mM9nRbVwSsWYs.asa (hash: 5o54GUaG5AJOqUjqrqNiS3NWFX9t0EEkMJIm09Gxdrg=)
                          2: 3XPbOVP5LZm9gbvbxeYXvE-UXNY.roa (hash: P5VCL1xp51uhegWvbhWmEVzPBE26QsXY7i6bNOoE28E=)
                          3: 4lw_9PAntET-B5MMVn16dO3Hcls.roa (hash: UDzY7XNVR7aRxZCWElIUyD0jHCPvLTcFxpVSeLZMRg4=)
                          4: GIFLi-jt7KNEKVqJVWyKYcnJxqs.asa (hash: 0Qw32jTKGN4ZNEHg/fNiti4vKA/46+3dnBe8MFnmC3A=)
                          5: Tw532cb_aNymjwXfj0Z17nvcsLw.crl (hash: NTIuZPcf4dzszwXWpO49HCjnW7/xhBlJ82KLHTwipAg=)
                          6: aU9kgnyrWEDQEPKNwyNLEVRBatE.asa (hash: dvn023c0w0CUoHP/TX/t+FPbTAi+h0wxkZINn6wTNQU=)
                          7: cqsm3cZPpf_tObwDEACdHxs7fkA.roa (hash: d+AU9b3PeXFxvtfVifLL55zjYWSVguy94TW2GQv8rLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 08:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:58:c1:90:1e:11:b3:a7:90:24:84:94:ad:32:6a:f7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
        Validity
            Not Before: Oct 20 10:00:42 2026 GMT
            Not After : Oct 21 10:00:42 2026 GMT
        Subject: CN=48534152cb88513bf291661706492aeebdf590fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:07:9a:61:d0:96:d6:51:0e:8f:26:ba:4f:88:
                    91:8a:a8:d6:69:ad:e4:9c:e9:32:68:aa:56:f9:f2:
                    65:a9:72:c5:22:30:83:b4:f6:78:de:9d:e6:0c:7d:
                    a7:93:7c:52:71:77:00:73:75:95:49:ee:ad:31:6f:
                    93:26:01:7a:ca:67:c2:dc:16:f0:14:be:e1:2d:8f:
                    2c:5d:89:69:8b:de:57:9a:98:46:3d:64:32:dd:01:
                    93:38:1f:69:2c:66:8d:7f:21:f3:86:d5:2a:bb:08:
                    e5:3d:96:5e:bf:44:56:f5:fc:89:04:48:d6:dd:81:
                    7f:57:02:f7:51:ef:1d:0b:b7:23:fa:cb:c8:d4:5c:
                    eb:e2:a8:cc:ba:de:13:a7:ec:e4:cc:ea:5b:91:c9:
                    e6:d4:b5:f5:ab:d3:31:3d:e1:15:c2:22:2a:ad:e7:
                    4f:6a:05:e3:62:87:7f:8c:5b:3c:16:cf:6d:21:9b:
                    21:4a:b2:31:39:25:7a:e9:38:d4:14:8e:c0:91:74:
                    78:24:27:ac:9a:8a:f9:db:0a:4d:dc:d3:a9:02:27:
                    af:55:e1:2c:e2:a6:6b:61:0c:e4:8b:88:10:34:a8:
                    e3:ae:6d:68:ce:18:e9:26:02:72:a4:93:70:cf:66:
                    bf:4a:ae:a6:32:21:66:66:1d:ec:3d:a9:d5:eb:16:
                    82:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:53:41:52:CB:88:51:3B:F2:91:66:17:06:49:2A:EE:BD:F5:90:FA
            X509v3 Authority Key Identifier:
                keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:13:46:b8:fc:fc:45:5a:0e:f9:88:98:85:75:ec:dc:ea:32:
         3f:d7:db:05:a9:ef:9d:59:03:76:06:6b:26:75:20:11:c0:ff:
         be:93:9f:c2:1b:e6:2d:8d:7f:57:57:3a:c7:63:dc:6c:5f:2a:
         53:5a:eb:46:de:c1:34:76:3c:cd:1d:66:1f:04:1f:b7:27:38:
         18:27:94:7a:c5:a2:91:3f:7b:b0:89:cc:cf:e8:76:80:80:71:
         aa:22:27:c7:5d:66:9f:61:e3:f9:e0:13:f8:11:69:3b:c3:51:
         a6:8b:1b:ee:d1:a6:34:a5:08:1d:d5:75:d4:6b:e6:4e:12:bf:
         8e:29:8e:26:d0:c2:c4:0f:8b:bd:ce:28:e2:49:3b:6f:f7:f2:
         3e:a6:37:ea:7c:55:ba:7d:7b:b0:ae:be:27:db:dd:9b:15:a7:
         ef:25:3d:16:6f:63:02:30:55:40:d2:6b:10:58:34:ff:06:31:
         50:cf:d8:a2:62:0e:c0:c0:0a:eb:ae:38:8d:8d:02:ed:b4:64:
         94:1e:02:37:02:f0:e6:bb:0a:08:54:b5:ea:1d:69:2e:5e:1f:
         4c:e4:bf:01:40:3c:c9:b5:c7:46:8c:45:b5:48:3d:7a:ef:52:
         be:69:57:e1:95:fd:48:d4:98:fe:9d:01:df:02:4f:1f:d9:6e:
         cf:35:52:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFYwZAeEbOnkCSElK0yavfgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMGU3N2Q5YzZmZjY4ZGNhNjhmMDVkZjhmNDY3NWVlN2Jk
Y2IwYmMwHhcNMjYxMDIwMTAwMDQyWhcNMjYxMDIxMTAwMDQyWjAzMTEwLwYDVQQD
Eyg0ODUzNDE1MmNiODg1MTNiZjI5MTY2MTcwNjQ5MmFlZWJkZjU5MGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3weaYdCW1lEOjya6T4iRiqjWaa3k
nOkyaKpW+fJlqXLFIjCDtPZ43p3mDH2nk3xScXcAc3WVSe6tMW+TJgF6ymfC3Bbw
FL7hLY8sXYlpi95XmphGPWQy3QGTOB9pLGaNfyHzhtUquwjlPZZev0RW9fyJBEjW
3YF/VwL3Ue8dC7cj+svI1Fzr4qjMut4Tp+zkzOpbkcnm1LX1q9MxPeEVwiIqredP
agXjYod/jFs8Fs9tIZshSrIxOSV66TjUFI7AkXR4JCesmor52wpN3NOpAievVeEs
4qZrYQzki4gQNKjjrm1ozhjpJgJypJNwz2a/Sq6mMiFmZh3sPanV6xaCAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhTQVLLiFE78pFmFwZJKu699ZD6MB8GA1UdIwQY
MBaAFE8Od9nG/2jcpo8F349Gde573LC8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHc1MzJjYl9hTnltandYZmowWjE3bnZjc0x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zZGMyMjItMTIwNi00OTIyLTg4OTAt
NDU1YjE5Zjc2NmNjLzEvVHc1MzJjYl9hTnltandYZmowWjE3bnZjc0x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8zZGMyMjItMTIwNi00OTIyLTg4OTAtNDU1YjE5Zjc2NmNj
LzEvVHc1MzJjYl9hTnltandYZmowWjE3bnZjc0x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxNGuPz8
RVoO+YiYhXXs3OoyP9fbBanvnVkDdgZrJnUgEcD/vpOfwhvmLY1/V1c6x2PcbF8q
U1rrRt7BNHY8zR1mHwQftyc4GCeUesWikT97sInMz+h2gIBxqiInx11mn2Hj+eAT
+BFpO8NRposb7tGmNKUIHdV11GvmThK/jimOJtDCxA+Lvc4o4kk7b/fyPqY36nxV
un17sK6+J9vdmxWn7yU9Fm9jAjBVQNJrEFg0/wYxUM/YomIOwMAK6644jY0C7bRk
lB4CNwLw5rsKCFS16h1pLl4fTOS/AUA8ybXHRoxFtUg9eu9SvmlX4ZX9SNSY/p0B
3wJPH9luzzVSIw==
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:28:02 2026 by rpki-client