Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
File:                     TW8ORKf28MiMzpxG26jscuxhdSs.mft (raw, json)
Hash identifier:          HHvGXrhC+DGEJxuE0l0MyqoQJbAZoqBm4CctqWpq6tg=
Subject key identifier:   C8:D0:37:46:3D:2B:15:15:41:79:E2:F6:B0:B5:49:78:B6:D5:68:9E
Authority key identifier: 4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B
Certificate issuer:       /CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
Certificate serial:       019D9AE32C380559C6BDE711A0DE086A0E34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
Manifest number:          0B77
Signing time:             Fri 17 Apr 2026 10:01:12 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:12 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:12 +0000
Files and hashes:         1: TW8ORKf28MiMzpxG26jscuxhdSs.crl (hash: 5BtS3BhfF57g/5J3NjdzU5S/vXkADp6OoP0nE9zd++U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:2c:38:05:59:c6:bd:e7:11:a0:de:08:6a:0e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
        Validity
            Not Before: Apr 17 10:01:12 2026 GMT
            Not After : Apr 18 10:01:12 2026 GMT
        Subject: CN=c8d037463d2b15154179e2f6b0b54978b6d5689e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:6a:f4:b1:03:51:37:33:9d:59:ca:33:f9:d8:
                    31:bc:75:16:da:4c:00:9d:fd:40:ff:63:14:69:e4:
                    f9:76:dc:1a:ff:3a:c1:7a:33:fd:08:cd:cc:94:d8:
                    15:e1:a4:1b:17:07:a3:72:1c:6a:2a:a2:27:c5:e4:
                    42:8d:8e:bf:06:28:a2:e5:9f:94:8a:38:ed:9c:bc:
                    eb:0b:01:1e:e3:5f:b6:c1:07:d8:7a:cc:04:19:d8:
                    80:88:45:c3:b0:8d:a1:5d:29:ea:dc:a4:ad:0e:9e:
                    7c:29:3a:e1:52:2b:46:16:a0:b9:b1:34:d5:5e:ed:
                    a6:1e:9a:a9:d8:fe:4c:3a:d4:3e:65:ea:5c:b4:03:
                    b5:de:94:78:7b:01:5d:21:0c:f4:b1:60:87:31:eb:
                    1d:bf:fd:70:ea:00:83:82:eb:e1:2d:ca:2a:f5:bc:
                    6c:b9:1d:c7:c1:23:9d:dc:da:77:59:93:ba:d0:46:
                    50:d0:99:6c:df:32:15:ed:b4:20:fb:63:e2:a4:93:
                    a8:21:d0:e8:23:75:10:6a:10:27:9f:53:75:14:87:
                    81:45:28:3f:3e:00:b6:08:c4:36:f8:ea:f3:f5:8e:
                    9e:44:e8:77:2c:d2:c1:67:0b:ab:2f:79:bc:ec:fd:
                    02:3d:c1:b2:6c:d2:5c:a9:e9:c9:f9:67:6d:aa:c0:
                    88:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D0:37:46:3D:2B:15:15:41:79:E2:F6:B0:B5:49:78:B6:D5:68:9E
            X509v3 Authority Key Identifier:
                keyid:4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:45:c4:ba:df:b6:8f:3b:3a:44:03:be:d5:67:33:1a:e9:7f:
         1d:22:68:34:1d:da:95:fa:02:c6:5a:87:1b:52:b4:aa:21:45:
         f4:97:e6:20:a7:f0:7f:a7:c9:45:d9:75:cb:ea:27:22:af:34:
         77:62:eb:ce:2a:b3:3c:9c:73:bd:79:da:38:c7:3e:70:ca:e4:
         62:3d:4f:be:24:e2:2b:1a:a6:7b:e2:0c:2c:b4:84:71:5a:2a:
         95:57:e6:13:64:20:2a:d9:7a:bf:d7:c9:d3:63:94:8f:00:04:
         11:3d:59:4d:1c:30:e7:aa:09:6c:37:16:9a:25:31:d7:96:bf:
         38:b6:1b:ab:73:a5:56:60:8d:b8:5f:d5:7c:03:c2:d8:30:41:
         da:22:33:fb:d9:c4:3b:20:f1:be:b2:78:38:a9:c3:a9:4a:70:
         cd:51:ba:bc:98:c8:78:62:3a:d1:ea:cc:15:47:8e:39:2f:29:
         2f:0e:46:54:35:ce:6d:c2:1e:df:90:ec:6a:f1:a6:d8:66:63:
         16:d8:b3:30:ca:f5:0c:90:ce:ec:c3:c1:98:0f:85:65:31:75:
         75:41:5c:75:f2:94:e2:6a:58:c7:35:6e:b6:b3:d1:9e:2d:f0:
         26:97:ec:5e:c9:01:11:5c:4d:3f:7d:1b:ee:63:cc:60:d4:35:
         93:1f:31:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:27 2026 by rpki-client