Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
File:                     TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft (raw, json)
Hash identifier:          X6vRKf/x8hwE/UCX06oBBAQ/hgdGaXxA4TiPstr5Ruw=
Subject key identifier:   54:A0:90:AE:AC:E6:9F:9D:2E:DC:D4:35:B1:33:3B:78:D5:83:90:FA
Authority key identifier: 4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
Certificate issuer:       /CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Certificate serial:       0198744FD80A86D54C5EBBDB73227456D808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
Manifest number:          0AAB
Signing time:             Mon 04 Aug 2025 09:00:46 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:46 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:46 +0000
Files and hashes:         1: TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl (hash: FAWXuDuLldwVAutJhRXBBC+sm/f1wYC1wJ/2RX3M+co=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:d8:0a:86:d5:4c:5e:bb:db:73:22:74:56:d8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
        Validity
            Not Before: Aug  4 09:00:46 2025 GMT
            Not After : Aug  5 09:00:46 2025 GMT
        Subject: CN=54a090aeace69f9d2edcd435b1333b78d58390fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:b9:77:9b:99:2a:d1:ad:37:9e:e5:0f:5a:
                    50:f0:60:93:5e:32:4e:7f:9a:4f:af:20:30:d6:33:
                    d3:eb:97:8c:e0:c3:fb:f3:fe:c8:e7:64:a7:af:c3:
                    d3:b8:96:3c:76:ef:91:ba:22:d7:da:b7:5a:b3:ce:
                    f8:ff:4a:7a:3e:7c:a3:3f:36:c6:04:4f:56:0a:91:
                    82:0e:a1:04:35:3a:cb:c7:4a:8e:73:c4:47:a3:e1:
                    97:18:f1:97:f3:82:21:06:c9:ab:a5:e8:f9:3f:ea:
                    d8:f2:17:08:d8:07:78:58:ac:80:bf:4a:1b:a3:70:
                    64:30:1a:48:07:e7:88:25:21:e1:c7:58:d3:a6:e5:
                    16:78:2d:45:de:7e:ff:ef:15:f9:66:48:52:d5:90:
                    d1:46:88:8e:0e:5e:b8:62:39:57:ed:e9:82:85:54:
                    12:ed:e0:0b:77:6a:85:0f:f9:98:6f:d3:ce:2d:fc:
                    9a:8f:aa:d5:74:53:3b:8a:c1:d5:58:9d:6d:1e:67:
                    17:51:61:b1:ae:c3:b8:1d:2b:4a:1e:22:3d:d0:0f:
                    fb:27:c9:a4:af:f5:03:10:41:12:80:87:dd:92:a9:
                    69:5b:72:42:16:a1:1b:97:10:b7:7e:82:1e:57:a6:
                    f9:80:0d:ef:f1:e1:ae:96:7c:01:d9:a4:5a:bc:46:
                    2c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A0:90:AE:AC:E6:9F:9D:2E:DC:D4:35:B1:33:3B:78:D5:83:90:FA
            X509v3 Authority Key Identifier:
                keyid:4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5d:01:5d:67:f6:5a:99:da:03:94:88:59:ef:44:2e:1d:6d:
         0c:94:96:4a:a8:40:75:af:7e:9f:72:5f:e5:2b:77:78:a2:e4:
         66:66:fd:de:97:51:76:a6:52:68:da:7b:f8:00:24:86:d6:36:
         7a:1e:20:c3:e3:e3:13:6a:b3:4d:7d:71:e6:22:33:a2:a8:d0:
         e2:8b:91:9e:7e:12:ea:c6:ba:79:91:0e:25:1d:d9:26:74:5d:
         1a:56:64:b8:7b:63:35:0b:a1:d8:7d:ea:ad:6a:08:b7:54:ab:
         73:00:71:04:d4:d5:54:0c:4d:5a:47:e9:e8:0b:f5:ff:3d:01:
         0e:c4:35:48:60:5d:31:a7:08:d8:1a:15:74:ff:e8:af:d2:43:
         27:6c:68:86:f2:4a:0f:88:ec:fd:2a:29:6c:44:5e:dd:92:d7:
         13:48:db:6c:b5:c1:03:78:db:4f:79:6b:55:59:ae:46:e4:57:
         14:2f:70:49:cc:06:de:77:ef:2c:b9:6f:aa:7d:d3:1b:8e:41:
         f4:21:88:f6:ec:10:0a:ca:6a:bb:84:cd:12:b2:34:fd:52:8e:
         4e:80:ea:64:aa:0e:62:84:6d:51:2e:ff:4a:27:9a:af:7a:13:
         fb:49:4b:a1:93:e2:e1:b5:b6:87:3d:d4:9b:e2:8c:c1:db:7c:
         52:99:6e:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T9gKhtVMXrvbcyJ0VtgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMDQ2ZGZkZWU4ZmNjOTJkNzQwZTBiYjhjOGI4MjkzMTU1
YTE0YmUwHhcNMjUwODA0MDkwMDQ2WhcNMjUwODA1MDkwMDQ2WjAzMTEwLwYDVQQD
Eyg1NGEwOTBhZWFjZTY5ZjlkMmVkY2Q0MzViMTMzM2I3OGQ1ODM5MGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+e5d5uZKtGtN57lD1pQ8GCTXjJO
f5pPryAw1jPT65eM4MP78/7I52Snr8PTuJY8du+RuiLX2rdas874/0p6PnyjPzbG
BE9WCpGCDqEENTrLx0qOc8RHo+GXGPGX84IhBsmrpej5P+rY8hcI2Ad4WKyAv0ob
o3BkMBpIB+eIJSHhx1jTpuUWeC1F3n7/7xX5ZkhS1ZDRRoiODl64YjlX7emChVQS
7eALd2qFD/mYb9POLfyaj6rVdFM7isHVWJ1tHmcXUWGxrsO4HStKHiI90A/7J8mk
r/UDEEESgIfdkqlpW3JCFqEblxC3foIeV6b5gA3v8eGulnwB2aRavEYsHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSgkK6s5p+dLtzUNbEzO3jVg5D6MB8GA1UdIwQY
MBaAFE8Ebf3uj8yS10Dgu4yLgpMVWhS+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHdSdF9lNlB6SkxYUU9DN2pJdUNreFZhRkw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zODA5NGItYzQ3Yi00YjZjLTkxZTMt
MTEzZjRmNmQ1NWUzLzEvVHdSdF9lNlB6SkxYUU9DN2pJdUNreFZhRkw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zODA5NGItYzQ3Yi00YjZjLTkxZTMtMTEzZjRmNmQ1NWUz
LzEvVHdSdF9lNlB6SkxYUU9DN2pJdUNreFZhRkw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM10BXWf2
WpnaA5SIWe9ELh1tDJSWSqhAda9+n3Jf5St3eKLkZmb93pdRdqZSaNp7+AAkhtY2
eh4gw+PjE2qzTX1x5iIzoqjQ4ouRnn4S6sa6eZEOJR3ZJnRdGlZkuHtjNQuh2H3q
rWoIt1SrcwBxBNTVVAxNWkfp6Av1/z0BDsQ1SGBdMacI2BoVdP/or9JDJ2xohvJK
D4js/SopbERe3ZLXE0jbbLXBA3jbT3lrVVmuRuRXFC9wScwG3nfvLLlvqn3TG45B
9CGI9uwQCspqu4TNErI0/VKOToDqZKoOYoRtUS7/Siear3oT+0lLoZPi4bW2hz3U
m+KMwdt8UpluQQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:19:56 2025 by rpki-client