Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
File:                     pTW_JFBXN0H5Q16UghAWoi5rwUc.mft (raw, json)
Hash identifier:          8bO6C+NsNsGBYpFS6eunEqhFmkzOe5KTXaQ9Dr0ck34=
Subject key identifier:   92:0D:59:57:5A:8C:01:E0:80:07:6B:EE:C1:2B:6B:AE:45:85:F0:3E
Authority key identifier: A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47
Certificate issuer:       /CN=a535bf2450573741f9435e94821016a22e6bc147
Certificate serial:       019CAA8FF16CF2C8F1B5184769BBDEE156E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
Manifest number:          1842
Signing time:             Sun 01 Mar 2026 18:01:25 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:25 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:25 +0000
Files and hashes:         1: pTW_JFBXN0H5Q16UghAWoi5rwUc.crl (hash: cVY6rloZf9CPh02ZkvVV+QgQEvHgDFPFAWOe9yiF4vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:f1:6c:f2:c8:f1:b5:18:47:69:bb:de:e1:56:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a535bf2450573741f9435e94821016a22e6bc147
        Validity
            Not Before: Mar  1 18:01:25 2026 GMT
            Not After : Mar  2 18:01:25 2026 GMT
        Subject: CN=920d59575a8c01e080076beec12b6bae4585f03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6a:90:97:90:42:5d:b6:86:df:21:c9:aa:ad:
                    b5:70:23:d8:55:c3:e6:85:17:3d:cf:3b:2a:d0:02:
                    68:b8:4c:ae:43:c5:3a:02:4a:d3:07:a8:b4:0e:15:
                    9d:0d:ff:f3:fa:7e:f6:da:2b:a1:bc:15:d6:b4:af:
                    71:8e:0b:bf:3d:b9:5a:6e:c5:85:0f:7e:09:01:a0:
                    d8:3f:3c:ee:f6:1a:94:ec:90:bd:9b:52:b7:74:56:
                    a8:78:a5:3b:08:e5:61:8b:fe:6b:2c:0a:79:35:27:
                    75:39:88:3d:73:f8:35:7b:28:35:1e:fb:c0:ce:3a:
                    41:4c:96:13:7a:69:b5:67:ef:4f:59:86:05:5a:80:
                    b9:bc:5c:30:76:4c:f1:15:e5:ce:4d:85:e0:5f:e2:
                    c1:b9:1a:cb:d5:ba:ac:e3:22:f1:6c:00:34:77:76:
                    f4:90:c0:20:b0:75:46:df:96:02:01:a8:82:c5:2e:
                    4b:93:a5:a7:9e:fe:ee:c1:ce:63:4f:ab:98:c1:12:
                    a6:08:ce:02:67:5e:98:12:e3:ef:2a:14:6b:ba:13:
                    14:48:ef:97:02:48:e4:77:55:9b:76:dd:73:cd:e9:
                    0c:da:f9:87:95:9e:49:93:38:52:ff:01:5e:f6:8d:
                    fb:30:63:e8:b8:c9:38:00:44:43:10:9d:0b:6e:20:
                    52:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0D:59:57:5A:8C:01:E0:80:07:6B:EE:C1:2B:6B:AE:45:85:F0:3E
            X509v3 Authority Key Identifier:
                keyid:A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:46:f0:04:8e:1b:ef:49:96:4a:1e:7a:59:6d:90:ff:d0:5c:
         ce:9a:30:ff:13:85:f5:67:3d:d2:fe:68:74:be:9c:24:aa:07:
         5d:bb:5b:da:e1:ab:6f:d8:3b:72:1f:a7:8c:02:1f:81:83:05:
         e7:5a:e9:01:29:b1:80:0a:b3:dc:1f:7d:f4:13:00:3a:f6:46:
         c0:e2:b1:35:9e:c0:68:d9:27:19:f5:d0:82:1a:02:7f:43:e3:
         69:f5:45:9b:4a:ea:d5:7f:a7:d4:17:4c:b9:90:93:37:69:dc:
         17:68:0d:fb:f8:91:c2:74:4a:f1:1c:0f:62:8b:43:a5:7f:8e:
         74:5b:ce:2f:f4:f6:8f:41:83:6d:cc:8b:30:5f:f2:0c:b9:20:
         19:79:a0:1b:42:74:b9:dc:5d:3a:ce:a5:df:e5:25:8f:cf:1a:
         8b:90:b8:c0:d1:8d:00:ec:f4:e2:99:9e:59:e8:70:ad:16:3a:
         3c:61:0a:4b:a0:b8:fc:a5:19:cd:d8:61:26:c6:5f:a4:ec:6c:
         40:56:c3:66:dc:b8:43:c6:94:34:85:28:8b:7e:85:8e:ca:c7:
         1f:95:b9:7e:23:8c:63:eb:aa:fe:52:29:ec:f3:d9:f7:a7:5a:
         73:ec:12:c8:15:1f:d8:12:5c:81:3b:ff:fc:28:92:5d:20:84:
         87:2e:d7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:34 2026 by rpki-client