Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
File:                     TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft (raw, json)
Hash identifier:          9ePJAUMzTkiCEL1lnjhn3fbEh0/YQeUdu7zUqSNySGo=
Subject key identifier:   1E:7A:AC:28:80:04:35:60:A0:BE:57:CE:49:B1:4E:8F:74:C2:E3:66
Authority key identifier: 4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
Certificate issuer:       /CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Certificate serial:       019CADC77368B04702725120296FBF7595A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
Manifest number:          0CDB
Signing time:             Mon 02 Mar 2026 09:00:55 +0000
Manifest this update:     Mon 02 Mar 2026 09:00:55 +0000
Manifest next update:     Tue 03 Mar 2026 09:00:55 +0000
Files and hashes:         1: TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl (hash: 72yPTtL8VPUgfGWQCqslc4NBsLvnOqY1anocNEwCLQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:73:68:b0:47:02:72:51:20:29:6f:bf:75:95:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
        Validity
            Not Before: Mar  2 09:00:55 2026 GMT
            Not After : Mar  3 09:00:55 2026 GMT
        Subject: CN=1e7aac2880043560a0be57ce49b14e8f74c2e366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4c:31:d9:e5:b9:04:af:42:f2:65:51:e1:51:
                    87:4e:e8:20:4c:28:16:68:2f:f1:95:2c:ad:94:29:
                    81:07:5a:18:cf:6e:a5:b3:81:66:70:01:8c:3c:20:
                    93:b8:1e:28:47:01:22:48:93:1a:bf:98:2a:2f:7f:
                    c1:85:dd:73:62:b1:65:f0:2c:23:d6:b0:5a:e3:53:
                    be:43:10:0e:a9:7c:a8:d5:9d:ac:43:e9:80:ab:6c:
                    d7:ba:38:3b:60:ee:25:00:fa:ab:e5:59:9b:a4:39:
                    25:f1:b3:32:22:70:0e:c6:9b:e4:f5:e0:f8:e1:e7:
                    c6:54:38:89:0b:22:4e:0d:20:43:4d:fa:e1:1f:e7:
                    a9:02:26:64:4c:49:1b:cb:8e:e8:9b:31:8b:10:a5:
                    3d:5d:9d:5d:1b:76:ae:a5:b1:1a:fa:81:4b:99:e9:
                    0b:41:6a:6e:f3:38:8a:d4:b3:01:50:c2:e0:76:4e:
                    1e:e1:58:53:1e:e6:f1:ab:90:b8:7a:f9:54:a3:39:
                    ed:fa:ce:dc:03:8e:76:5c:46:57:4a:4b:54:f7:f0:
                    ae:76:a9:b9:4e:20:3a:b8:3a:ca:a7:18:df:b7:51:
                    06:fe:40:85:b2:0c:69:6d:6d:3c:fd:5c:36:80:c0:
                    e0:c9:15:5d:80:8f:89:bb:6d:4b:6b:54:88:45:2d:
                    ba:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7A:AC:28:80:04:35:60:A0:BE:57:CE:49:B1:4E:8F:74:C2:E3:66
            X509v3 Authority Key Identifier:
                keyid:4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f7:a8:6c:b4:bb:e0:ff:72:9a:94:41:6f:62:15:2d:07:1c:
         7f:cb:f6:36:ac:06:3e:06:56:5a:d2:c9:bb:75:ca:99:f9:da:
         c1:3c:9c:32:d3:2d:2f:f8:a7:da:bc:51:c8:34:68:32:a6:b0:
         31:5f:fb:0b:0e:5d:a7:b3:d2:ca:16:2e:86:07:ca:b6:87:ee:
         02:3e:97:a5:28:6c:a6:da:da:33:38:ef:61:04:44:64:74:c5:
         65:a0:05:65:fc:9a:13:ea:2d:73:fb:9f:8e:a7:bd:9a:6a:f3:
         49:03:8d:80:f0:bd:b3:a6:c3:94:24:0b:bc:9e:94:98:f4:70:
         a6:02:43:6f:37:bd:af:b6:db:41:d7:d0:98:eb:f8:fb:96:1c:
         c7:97:fa:e5:65:66:ad:ea:7f:2a:fd:ad:66:9d:7f:94:dd:f7:
         f5:65:11:d8:9d:5a:ec:64:58:c1:4d:50:de:4b:d5:3b:74:0f:
         a6:50:77:61:9b:2d:91:a9:7e:15:ba:6a:1b:c7:07:13:ae:d2:
         0f:81:73:26:9b:ff:8a:67:89:bb:04:0c:ee:d6:6f:e8:67:a0:
         03:5f:7d:df:10:ef:e1:43:26:4d:76:f5:4a:2f:01:ba:c2:d1:
         ff:79:ed:65:be:37:f0:30:96:8e:37:90:50:3c:ea:6c:cd:14:
         6e:74:90:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx3NosEcCclEgKW+/dZWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMDQ2ZGZkZWU4ZmNjOTJkNzQwZTBiYjhjOGI4MjkzMTU1
YTE0YmUwHhcNMjYwMzAyMDkwMDU1WhcNMjYwMzAzMDkwMDU1WjAzMTEwLwYDVQQD
EygxZTdhYWMyODgwMDQzNTYwYTBiZTU3Y2U0OWIxNGU4Zjc0YzJlMzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ewx2eW5BK9C8mVR4VGHTuggTCgW
aC/xlSytlCmBB1oYz26ls4FmcAGMPCCTuB4oRwEiSJMav5gqL3/Bhd1zYrFl8Cwj
1rBa41O+QxAOqXyo1Z2sQ+mAq2zXujg7YO4lAPqr5VmbpDkl8bMyInAOxpvk9eD4
4efGVDiJCyJODSBDTfrhH+epAiZkTEkby47omzGLEKU9XZ1dG3aupbEa+oFLmekL
QWpu8ziK1LMBUMLgdk4e4VhTHubxq5C4evlUoznt+s7cA452XEZXSktU9/Cudqm5
TiA6uDrKpxjft1EG/kCFsgxpbW08/Vw2gMDgyRVdgI+Ju21La1SIRS26SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB56rCiABDVgoL5XzkmxTo90wuNmMB8GA1UdIwQY
MBaAFE8Ebf3uj8yS10Dgu4yLgpMVWhS+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHdSdF9lNlB6SkxYUU9DN2pJdUNreFZhRkw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zODA5NGItYzQ3Yi00YjZjLTkxZTMt
MTEzZjRmNmQ1NWUzLzEvVHdSdF9lNlB6SkxYUU9DN2pJdUNreFZhRkw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zODA5NGItYzQ3Yi00YjZjLTkxZTMtMTEzZjRmNmQ1NWUz
LzEvVHdSdF9lNlB6SkxYUU9DN2pJdUNreFZhRkw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPeobLS7
4P9ympRBb2IVLQccf8v2NqwGPgZWWtLJu3XKmfnawTycMtMtL/in2rxRyDRoMqaw
MV/7Cw5dp7PSyhYuhgfKtofuAj6XpShsptraMzjvYQREZHTFZaAFZfyaE+otc/uf
jqe9mmrzSQONgPC9s6bDlCQLvJ6UmPRwpgJDbze9r7bbQdfQmOv4+5Ycx5f65WVm
rep/Kv2tZp1/lN339WUR2J1a7GRYwU1Q3kvVO3QPplB3YZstkal+FbpqG8cHE67S
D4FzJpv/imeJuwQM7tZv6GegA1993xDv4UMmTXb1Si8BusLR/3ntZb438DCWjjeQ
UDzqbM0UbnSQMA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:27 2026 by rpki-client