Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
File:                     TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft (raw, json)
Hash identifier:          pamR2a9096G/zzg66fLk5thdcjta4YnvJpucEx/CfVo=
Subject key identifier:   8F:EC:44:A6:70:30:D5:51:07:BD:C3:50:97:96:B1:26:0A:26:FC:A8
Authority key identifier: 4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
Certificate issuer:       /CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Certificate serial:       01976BBD91AFD98844E85B7127A4ECB36A82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
Manifest number:          0A22
Signing time:             Sat 14 Jun 2025 00:01:15 +0000
Manifest this update:     Sat 14 Jun 2025 00:01:15 +0000
Manifest next update:     Sun 15 Jun 2025 00:01:15 +0000
Files and hashes:         1: TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl (hash: rzl3Eze2sS+oXcmpSSAOr1ecqqvhYXGeVSF3P3+UsCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:91:af:d9:88:44:e8:5b:71:27:a4:ec:b3:6a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
        Validity
            Not Before: Jun 14 00:01:15 2025 GMT
            Not After : Jun 15 00:01:15 2025 GMT
        Subject: CN=8fec44a67030d55107bdc3509796b1260a26fca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:49:53:44:de:d5:4d:96:c3:26:8b:a0:26:76:
                    04:4c:11:b5:22:70:6f:d8:c9:0f:0c:01:f5:6b:72:
                    cc:89:4b:ee:61:fd:b7:ef:fe:a7:3f:7b:9e:d5:89:
                    96:b6:30:fd:5a:0e:f7:a5:a8:58:65:7f:03:7c:b5:
                    f1:bd:ec:15:45:33:16:6f:c5:55:2b:c3:67:ff:29:
                    6b:fb:f2:5a:e9:25:e7:da:62:8f:36:14:96:84:fe:
                    7c:f3:ae:b2:75:37:c1:7a:3b:c0:c9:8a:43:08:f2:
                    24:91:be:8f:95:bf:b5:1e:63:09:dd:e7:74:c7:ec:
                    e7:9e:6b:92:00:7b:4a:16:e6:50:bb:1f:1b:58:c4:
                    28:9d:12:66:76:d7:50:f3:d3:54:9d:6c:cd:03:30:
                    d5:6a:68:d2:1a:6e:47:98:b9:cd:68:92:f8:d2:99:
                    19:d5:64:32:a7:50:9a:87:3e:e3:54:76:2e:9a:77:
                    0b:e9:c9:ef:b8:ed:88:6d:a6:3b:5c:0c:fa:0f:b5:
                    20:d9:d8:49:41:06:be:1d:6d:45:d1:f5:95:b5:dc:
                    5f:b8:34:70:8b:47:a0:e5:e8:ef:1a:a0:a0:5c:3f:
                    24:58:1c:1c:54:95:43:e6:b7:da:7f:eb:22:53:8e:
                    e7:dc:b6:82:48:41:43:05:2d:24:d7:3c:1e:ff:40:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EC:44:A6:70:30:D5:51:07:BD:C3:50:97:96:B1:26:0A:26:FC:A8
            X509v3 Authority Key Identifier:
                keyid:4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:2a:9d:34:58:b9:3f:d9:2a:b3:67:ae:f2:37:f2:c3:5f:45:
         e8:15:f2:31:f5:f8:1b:3b:11:52:fb:74:17:fb:de:d7:b6:c7:
         06:ba:1f:93:14:54:67:68:4d:09:f4:b9:c1:cf:67:b6:c8:58:
         3c:6d:c9:88:0b:fc:34:8e:d4:7f:b3:5d:d9:0c:23:43:aa:c8:
         46:1e:75:98:97:6c:b2:34:77:b6:50:77:00:01:36:55:5e:09:
         79:e5:25:f1:26:05:32:3e:bf:b2:ad:ec:51:45:60:b6:fc:76:
         a5:fd:8a:f9:02:47:d2:04:98:0e:3c:4d:4a:88:3f:b0:0f:09:
         0b:cc:e5:5a:ac:8e:bb:b0:b9:46:0c:53:c3:8e:0a:14:7a:b7:
         6c:78:97:ce:10:aa:eb:38:01:51:29:22:a0:d3:ba:05:83:46:
         ac:19:33:cc:81:4c:1f:37:86:21:7c:de:05:0a:59:6c:a7:23:
         e0:9e:bd:81:7e:84:b0:ae:f5:74:ba:fc:27:4d:d1:af:8e:fe:
         65:cb:42:eb:65:57:9e:5f:96:f3:e3:54:44:ba:3f:18:5f:06:
         00:d1:2e:5c:93:82:6d:b7:6e:78:df:b1:47:32:70:72:a7:50:
         b3:5b:ba:6e:66:89:f7:10:10:3d:0b:b7:3a:c4:76:52:a8:5d:
         80:f6:bb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:23 2025 by rpki-client