Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
File:                     Tw532cb_aNymjwXfj0Z17nvcsLw.mft (raw, json)
Hash identifier:          vATHK/Y3vmihcBr/31lzBROWDqFyADqnLFPoPqm0sik=
Subject key identifier:   75:AC:72:FC:2D:F8:EA:1E:39:4F:03:15:AD:BF:5F:74:E3:A4:01:EA
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Certificate issuer:       /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial:       019D98F4DB72A291F65754718C9F6427F15F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
Manifest number:          18CB
Signing time:             Fri 17 Apr 2026 01:01:16 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:16 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:16 +0000
Files and hashes:         1: 39rMz_WIR2e8L2mM9nRbVwSsWYs.asa (hash: 5o54GUaG5AJOqUjqrqNiS3NWFX9t0EEkMJIm09Gxdrg=)
                          2: 3XPbOVP5LZm9gbvbxeYXvE-UXNY.roa (hash: P5VCL1xp51uhegWvbhWmEVzPBE26QsXY7i6bNOoE28E=)
                          3: 4lw_9PAntET-B5MMVn16dO3Hcls.roa (hash: UDzY7XNVR7aRxZCWElIUyD0jHCPvLTcFxpVSeLZMRg4=)
                          4: Tw532cb_aNymjwXfj0Z17nvcsLw.crl (hash: 9MJL1i1fzpMHqLZzHq5+2HmdwZZbkYkNiv+qpoVOZ0U=)
                          5: cqsm3cZPpf_tObwDEACdHxs7fkA.roa (hash: d+AU9b3PeXFxvtfVifLL55zjYWSVguy94TW2GQv8rLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:db:72:a2:91:f6:57:54:71:8c:9f:64:27:f1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
        Validity
            Not Before: Apr 17 01:01:16 2026 GMT
            Not After : Apr 18 01:01:16 2026 GMT
        Subject: CN=75ac72fc2df8ea1e394f0315adbf5f74e3a401ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:3c:ac:08:b8:9a:bd:2f:ab:88:16:da:a5:
                    8e:05:79:18:22:44:d4:b8:7b:8d:58:c7:e1:1c:b3:
                    be:bf:12:8b:94:c6:cb:80:51:a2:a6:2b:17:89:10:
                    2f:a7:9a:64:d6:8f:4b:98:1f:b5:61:68:dc:11:13:
                    d9:0a:93:a3:3c:3e:84:45:d1:0f:9c:23:7d:26:4e:
                    9b:9d:6a:1d:9b:9e:fd:ec:80:2e:fa:dd:7b:1e:12:
                    1f:b4:a6:92:26:3e:b8:23:70:7e:f0:91:9b:95:5d:
                    7c:45:14:ad:4c:5a:fe:8c:64:ea:66:7d:b1:96:01:
                    ab:9a:ee:33:bf:62:96:8d:f9:11:d8:9c:3f:b1:56:
                    6a:7e:c1:ba:57:ef:ec:ab:40:ea:d6:78:16:fd:5c:
                    77:67:a0:ff:1f:c1:2c:5a:93:cb:f6:65:2a:bb:8b:
                    a0:20:ff:1e:19:f4:02:ba:5d:98:1c:81:e0:c6:eb:
                    45:c7:8f:68:df:ac:93:02:bb:0b:dd:5c:9b:a9:8f:
                    70:8b:dc:ab:ba:44:68:79:24:7e:8f:0e:43:00:e2:
                    63:f1:4a:6e:da:af:e0:29:cd:5d:f7:29:88:fd:b8:
                    f3:2c:2d:3b:e1:31:f7:d8:95:3b:85:bf:66:bf:c1:
                    0e:42:34:2b:73:6a:89:44:59:f6:9e:6e:ef:f1:e4:
                    c1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AC:72:FC:2D:F8:EA:1E:39:4F:03:15:AD:BF:5F:74:E3:A4:01:EA
            X509v3 Authority Key Identifier:
                keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:61:d2:53:de:2a:a4:08:97:1f:e8:30:4a:7c:18:b6:d1:1c:
         b3:aa:17:e8:ff:14:b9:25:78:14:95:6c:96:1f:07:5c:f3:40:
         79:a1:14:6c:de:47:0c:07:83:46:8a:b3:a7:e9:98:41:17:a5:
         45:05:37:85:1a:9a:79:68:d5:07:e8:ae:b6:28:bc:9e:53:e8:
         7c:66:a6:64:1c:ab:21:ef:73:94:a2:22:29:9f:52:51:bf:8e:
         fe:10:4e:6f:b7:64:48:d2:cf:5a:f1:aa:35:52:5e:83:14:4d:
         5e:ee:34:e7:65:06:eb:a5:f3:1f:d8:da:f2:64:32:1d:5e:22:
         bf:e1:a8:d5:70:88:c9:65:aa:2b:4c:06:07:d7:b1:73:a6:8a:
         ce:7a:62:7a:8f:2f:1f:86:d0:41:37:ba:8f:59:f8:3a:fd:05:
         88:55:65:c6:ea:94:ea:86:ee:4f:f9:02:85:00:fe:f3:cf:dc:
         ad:ec:8d:be:d5:4c:41:52:ec:97:39:e5:39:18:17:01:8d:f3:
         06:81:c3:51:2c:00:ce:7c:82:9e:ec:28:60:44:ef:fa:fc:df:
         3a:88:e4:1f:8a:35:f0:ee:19:b3:5a:15:9d:1e:7d:f0:b9:f9:
         ba:c6:7f:7d:dc:49:19:39:75:fd:e8:83:0c:fb:4b:32:16:92:
         3a:70:4d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:56 2026 by rpki-client