Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
File:                     TWn-EboAGxKm-9GJYpo_sYG9jJs.mft (raw, json)
Hash identifier:          q6DNMGUxqTJGgz9D+3obozqn/EBCEWP66kj6IsdPB98=
Subject key identifier:   A0:32:CF:96:C1:E8:42:A4:42:C7:CD:6C:A5:FB:9F:CA:DB:56:2F:06
Authority key identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B
Certificate issuer:       /CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
Certificate serial:       019CAAFD64ACBE56624400E3B6C1468DC04A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 20:00:58 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:58 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:58 +0000
Files and hashes:         1: TWn-EboAGxKm-9GJYpo_sYG9jJs.crl (hash: Qzm+ZJ6XP7rf6svzzy7e3y0FdYOFRHBt/GdIX7rCye0=)
                          2: d0gc-bfZVZ_wvr1zHWcpz3THoUw.roa (hash: omEL790d2ktapnfeuHtd9b9rxp1D6UXPaEs4yrE6gFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:64:ac:be:56:62:44:00:e3:b6:c1:46:8d:c0:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
        Validity
            Not Before: Mar  1 20:00:58 2026 GMT
            Not After : Mar  2 20:00:58 2026 GMT
        Subject: CN=a032cf96c1e842a442c7cd6ca5fb9fcadb562f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fb:ff:57:f4:1b:19:bc:78:72:47:e7:9a:97:
                    6f:40:70:a4:2d:5c:3b:34:44:0f:6a:ff:56:c3:1d:
                    68:b6:b8:7c:a1:fd:b7:69:30:b4:ad:fa:f0:21:30:
                    cd:bc:ff:d0:14:4f:c1:89:ca:f7:8c:f0:92:c5:2c:
                    57:ab:b9:65:55:f6:52:91:d9:d3:1c:af:3c:24:3b:
                    08:33:81:13:6a:0a:55:3b:98:33:09:28:0e:75:58:
                    b9:e0:d2:29:df:ea:5f:99:a5:0e:df:58:b1:63:d6:
                    1f:a2:1b:ff:96:df:2e:a5:6c:10:ad:2e:51:a1:60:
                    5a:8b:4b:1b:90:3f:f9:2d:08:4b:ac:ef:8e:f5:67:
                    71:e9:44:11:3d:4b:55:55:91:8e:d8:f8:2f:7a:0a:
                    bc:bc:e2:65:94:88:b8:88:34:40:5c:86:6c:46:15:
                    69:9b:5b:bb:c0:7a:ba:8b:b4:0b:9d:b8:e2:58:b0:
                    9a:2c:86:42:72:d4:9f:46:9f:bc:11:6f:9c:7a:ea:
                    f8:fb:a1:00:d7:81:29:e4:2f:34:89:3c:bd:3e:18:
                    16:47:b9:67:75:0f:16:29:d6:4c:67:aa:51:4b:41:
                    c4:bc:0b:a9:ca:74:cf:01:f1:db:ba:48:9c:2a:b9:
                    06:e2:78:03:df:6d:4c:3b:73:f8:a4:e7:5c:bc:17:
                    aa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:32:CF:96:C1:E8:42:A4:42:C7:CD:6C:A5:FB:9F:CA:DB:56:2F:06
            X509v3 Authority Key Identifier:
                keyid:4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:34:59:6c:d9:66:83:06:44:20:84:0a:57:47:4f:27:e0:59:
         2a:34:49:71:9c:7b:50:00:66:76:e7:1a:0c:6c:a7:a9:38:ef:
         e8:7f:88:4d:f0:15:69:ab:06:c1:02:b7:44:21:d6:73:e0:d0:
         c0:b6:62:9f:53:28:20:11:19:df:8b:4a:8e:67:39:97:92:70:
         08:cf:e5:22:dc:99:3e:8c:00:e8:bb:a7:36:d9:64:ae:7a:93:
         8b:e9:ae:2d:9e:91:0c:61:9c:7c:e4:20:2e:76:48:fc:96:df:
         bb:65:08:a4:cc:af:4c:7f:ed:86:af:b9:21:df:86:d0:4f:98:
         1c:e9:35:56:56:fc:d9:67:b1:d3:ab:78:a7:52:29:c3:30:5f:
         3c:49:01:bf:a4:fa:4f:cd:b6:20:fe:38:d1:01:86:87:36:40:
         4a:62:ee:9e:0b:4c:fb:a2:9a:49:4e:ca:77:17:b1:7f:77:b2:
         b9:0d:02:60:ec:d2:1a:96:96:fb:62:d2:fe:27:a4:bc:04:e7:
         5f:11:5f:f0:f6:ae:68:67:24:ba:5a:5b:bd:c6:fe:f2:f9:a6:
         be:7a:bf:fc:30:78:0d:bd:54:a1:3b:20:6d:16:5c:6f:c7:61:
         28:d0:f4:32:64:1e:9d:b3:27:00:1f:0f:78:16:ff:6c:08:09:
         a3:60:ee:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/WSsvlZiRADjtsFGjcBKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNjlmZTExYmEwMDFiMTJhNmZiZDE4OTYyOWEzZmIxODFi
ZDhjOWIwHhcNMjYwMzAxMjAwMDU4WhcNMjYwMzAyMjAwMDU4WjAzMTEwLwYDVQQD
EyhhMDMyY2Y5NmMxZTg0MmE0NDJjN2NkNmNhNWZiOWZjYWRiNTYyZjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pv/V/QbGbx4ckfnmpdvQHCkLVw7
NEQPav9Wwx1otrh8of23aTC0rfrwITDNvP/QFE/Bicr3jPCSxSxXq7llVfZSkdnT
HK88JDsIM4ETagpVO5gzCSgOdVi54NIp3+pfmaUO31ixY9Yfohv/lt8upWwQrS5R
oWBai0sbkD/5LQhLrO+O9Wdx6UQRPUtVVZGO2Pgvegq8vOJllIi4iDRAXIZsRhVp
m1u7wHq6i7QLnbjiWLCaLIZCctSfRp+8EW+ceur4+6EA14Ep5C80iTy9PhgWR7ln
dQ8WKdZMZ6pRS0HEvAupynTPAfHbukicKrkG4ngD321MO3P4pOdcvBeqLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAyz5bB6EKkQsfNbKX7n8rbVi8GMB8GA1UdIwQY
MBaAFE1p/hG6ABsSpvvRiWKaP7GBvYybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQt
M2I2OGE4NGNkMmI4LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQtM2I2OGE4NGNkMmI4
LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjRZbNlm
gwZEIIQKV0dPJ+BZKjRJcZx7UABmducaDGynqTjv6H+ITfAVaasGwQK3RCHWc+DQ
wLZin1MoIBEZ34tKjmc5l5JwCM/lItyZPowA6LunNtlkrnqTi+muLZ6RDGGcfOQg
LnZI/Jbfu2UIpMyvTH/thq+5Id+G0E+YHOk1Vlb82Wex06t4p1IpwzBfPEkBv6T6
T822IP440QGGhzZASmLungtM+6KaSU7Kdxexf3eyuQ0CYOzSGpaW+2LS/iekvATn
XxFf8PauaGckulpbvcb+8vmmvnq//DB4Db1UoTsgbRZcb8dhKND0MmQenbMnAB8P
eBb/bAgJo2Duvw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:12 2026 by rpki-client