Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
File:                     TWn-EboAGxKm-9GJYpo_sYG9jJs.mft (raw, json)
Hash identifier:          orTF884b5YAcCNBe9OSjfJVeK65RIC739hWwZ7rdoI8=
Subject key identifier:   F0:B0:D2:6D:73:E3:B0:76:89:F8:64:9C:F0:24:49:88:E7:30:A4:B5
Authority key identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B
Certificate issuer:       /CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
Certificate serial:       019696A99C50AEF70E6EAE39E8AE91F17F7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
Manifest number:          1521
Signing time:             Sat 03 May 2025 15:00:20 +0000
Manifest this update:     Sat 03 May 2025 15:00:20 +0000
Manifest next update:     Sun 04 May 2025 15:00:20 +0000
Files and hashes:         1: I72vD4clErn-KyL3Il94C9_-wtk.roa (hash: JxiFx7TuP4vOP+SWIC89SDMzWOz23TjJ939/vZhx0JU=)
                          2: TWn-EboAGxKm-9GJYpo_sYG9jJs.crl (hash: 72y/u1NIBY1c0U7LtlSMCjfMfTBi9gRWso/kcyhDAbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 15:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:96:a9:9c:50:ae:f7:0e:6e:ae:39:e8:ae:91:f1:7f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
        Validity
            Not Before: May  3 15:00:20 2025 GMT
            Not After : May  4 15:00:20 2025 GMT
        Subject: CN=f0b0d26d73e3b07689f8649cf0244988e730a4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:50:08:2d:12:fb:36:2b:df:57:92:0e:1d:22:
                    01:36:6c:94:93:19:21:5f:65:70:5c:96:44:62:e6:
                    ad:d4:53:15:2c:07:51:b7:bd:dd:42:95:34:bb:2f:
                    89:78:0f:cb:b3:c5:d2:f9:7b:ab:1c:9f:92:4b:90:
                    26:92:d1:8d:51:6d:72:8d:89:13:71:f8:05:cb:a3:
                    66:16:46:4e:e4:81:df:98:cc:fb:52:19:06:74:19:
                    48:dc:79:28:09:9d:10:e3:79:32:43:0b:27:dd:61:
                    3d:7f:42:cf:df:5a:cb:b9:ae:fb:9b:32:c2:7d:20:
                    a7:66:20:30:f4:d8:15:ad:0b:5a:b2:14:21:08:51:
                    09:55:96:fd:84:d3:5b:1f:5a:34:23:ef:84:b3:e2:
                    78:3b:ac:9a:c7:97:82:49:36:b2:1b:a2:4a:8c:b5:
                    6c:30:df:fa:2c:58:fd:2b:eb:e7:41:f9:fa:80:54:
                    ef:10:6b:a9:02:45:1c:26:e1:b7:2e:83:12:bc:b5:
                    5f:65:18:5d:5b:e7:37:9b:bf:5d:fc:fe:04:fe:79:
                    d3:30:c7:0a:74:a3:9f:9e:40:27:97:9d:b5:45:8e:
                    0b:61:d2:44:59:56:1f:b9:b6:a8:b3:58:38:48:52:
                    06:68:65:68:c3:d9:68:00:62:38:f7:3a:a3:af:ba:
                    aa:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B0:D2:6D:73:E3:B0:76:89:F8:64:9C:F0:24:49:88:E7:30:A4:B5
            X509v3 Authority Key Identifier:
                keyid:4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:df:14:59:f8:6d:6b:84:d6:da:8e:e3:da:e5:82:83:22:f3:
         b2:0d:43:4c:94:5e:c9:80:b8:8d:08:e4:51:46:ae:85:3f:61:
         58:95:6a:9d:aa:43:68:d5:1d:2f:39:d4:5f:3e:72:5a:e1:df:
         b7:1d:49:ab:d6:4f:b8:bb:8b:ee:de:ae:98:e5:ab:13:22:ce:
         ce:c7:0e:6e:a0:45:01:f6:cb:f6:79:77:1b:3b:9a:4f:f8:b3:
         5f:7c:26:22:d0:25:b9:f8:ab:a5:b5:9c:de:06:0d:25:67:48:
         c5:fc:aa:65:01:2b:a9:29:37:7c:d7:47:af:39:bf:ee:38:64:
         7b:54:86:cd:e3:bc:94:a2:f5:86:c0:2c:94:71:81:d3:0e:99:
         a4:d0:ef:d4:e7:e0:99:71:69:b6:f7:cd:f5:5a:17:21:0e:23:
         21:2d:b4:ef:cd:84:a5:d1:5d:42:d4:39:89:14:1f:98:c0:ca:
         f9:d6:94:1e:60:8e:fc:5e:4b:45:05:02:da:e5:0e:45:cc:a7:
         ce:92:1a:5e:b5:d0:ec:f3:35:4c:91:28:44:6b:21:f2:f5:b9:
         31:ef:2a:dd:13:bb:c4:e4:a5:4c:07:75:0c:fa:d1:b2:94:7f:
         62:2a:af:b7:00:c4:6d:41:c5:99:ad:fa:1e:d3:cb:1b:cf:c3:
         1b:7b:bd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:56:51 2025 by rpki-client