Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
File:                     TweIqtIqxDcNUYy3-53-cktB-Vc.mft (raw, json)
Hash identifier:          CfFFzl4R9Wl1XqVuP5bXdEpdY5fpyhi93Jz3caLhhTQ=
Subject key identifier:   07:53:C7:C0:D6:0E:6F:20:DF:76:F4:E1:09:31:60:0A:8A:F3:DD:D6
Authority key identifier: 4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
Certificate issuer:       /CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Certificate serial:       019D97AA6F66598BD1ABD51E9766D0DACE0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
Manifest number:          14D6
Signing time:             Thu 16 Apr 2026 19:00:22 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:22 +0000
Manifest next update:     Fri 17 Apr 2026 19:00:22 +0000
Files and hashes:         1: TweIqtIqxDcNUYy3-53-cktB-Vc.crl (hash: SH7vgy6qumQZwrRHGVYlhglWVdXaKr0eq8dR3eoGkR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:aa:6f:66:59:8b:d1:ab:d5:1e:97:66:d0:da:ce:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
        Validity
            Not Before: Apr 16 19:00:22 2026 GMT
            Not After : Apr 17 19:00:22 2026 GMT
        Subject: CN=0753c7c0d60e6f20df76f4e10931600a8af3ddd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:1c:5f:11:8e:83:00:9a:a4:20:2e:fc:78:
                    4a:a5:51:1e:e5:b7:e7:37:4e:1d:c7:19:db:0d:c5:
                    f2:ef:97:b9:d1:21:43:0a:d1:da:80:3b:d7:ce:d2:
                    dd:fa:e8:24:18:df:ef:37:83:de:fa:f8:f3:e6:82:
                    14:ab:93:5d:48:e2:54:87:47:21:81:1d:c1:46:f9:
                    de:3b:38:2a:43:41:7f:14:1e:69:c5:93:03:9e:58:
                    8a:92:a8:7c:7c:00:40:56:1d:12:7f:2f:64:79:24:
                    b5:12:5c:c5:bb:35:11:0e:5a:4a:a3:f0:fb:ef:4e:
                    e0:05:b6:d2:2e:48:0c:2b:af:78:a8:fe:c5:98:44:
                    3d:9f:f1:c3:28:e1:4f:09:bf:5f:91:a8:13:3d:f8:
                    18:5c:fe:aa:30:f3:11:b2:10:ed:d1:16:df:a6:05:
                    ca:46:f8:58:73:2b:74:9a:ac:c9:5a:75:4a:89:7e:
                    1f:67:0e:5c:42:09:f9:b7:7f:9f:c2:d3:3d:c3:77:
                    d1:1b:a8:9f:e4:ca:45:10:6c:24:17:91:10:d5:3f:
                    68:4a:05:bc:5d:3b:8d:e0:36:40:8e:1c:5b:9c:17:
                    77:c5:6a:b5:76:b3:d1:7f:27:46:df:d8:5c:4e:8b:
                    89:b1:ac:ed:5b:ab:14:9c:5d:e3:47:ff:3e:79:0c:
                    98:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:53:C7:C0:D6:0E:6F:20:DF:76:F4:E1:09:31:60:0A:8A:F3:DD:D6
            X509v3 Authority Key Identifier:
                keyid:4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:8c:9c:2b:ca:53:85:ec:67:3f:2d:22:6a:5d:dd:55:0e:34:
         cd:3c:49:7d:74:45:63:c4:a7:2a:21:2e:76:53:69:73:42:43:
         11:bd:01:9e:1f:11:7a:5b:ed:1f:c6:67:10:b1:54:50:a8:29:
         5e:40:e8:1e:57:3a:3d:51:b2:60:d5:a6:cf:51:e2:25:fe:65:
         0e:1a:a2:92:eb:ac:7b:c0:16:0f:b0:7e:4d:0d:dd:8d:07:de:
         47:ec:57:07:f9:bf:eb:f7:d4:d5:73:b8:98:56:21:cc:88:74:
         23:f1:bf:ae:34:8d:2a:73:85:06:af:fc:99:7d:db:fb:8e:34:
         dd:48:8a:6f:f3:ef:05:d1:13:9b:a7:45:4d:2f:30:ea:f9:b6:
         50:8b:f5:99:a0:cb:c5:a7:e7:4d:a2:23:6e:d9:83:fd:49:ea:
         98:a1:d4:dd:59:5b:6c:d5:ba:73:02:50:87:4c:9b:c8:28:46:
         d5:34:bb:02:69:06:dd:d8:92:72:1b:80:97:e7:4c:4d:c2:5d:
         02:1c:1c:37:52:64:38:2a:31:d9:1a:1a:dc:66:7b:27:84:6d:
         5a:0f:26:64:2d:80:4c:9d:93:2f:f8:ff:83:27:e4:82:3d:aa:
         df:b4:df:22:9f:cb:d8:54:f8:38:aa:b4:ea:7b:46:84:f4:d1:
         fb:0d:f0:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Xqm9mWYvRq9Uel2bQ2s4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMDc4OGFhZDIyYWM0MzcwZDUxOGNiN2ZiOWRmZTcyNGI0
MWY5NTcwHhcNMjYwNDE2MTkwMDIyWhcNMjYwNDE3MTkwMDIyWjAzMTEwLwYDVQQD
EygwNzUzYzdjMGQ2MGU2ZjIwZGY3NmY0ZTEwOTMxNjAwYThhZjNkZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowgcXxGOgwCapCAu/HhKpVEe5bfn
N04dxxnbDcXy75e50SFDCtHagDvXztLd+ugkGN/vN4Pe+vjz5oIUq5NdSOJUh0ch
gR3BRvneOzgqQ0F/FB5pxZMDnliKkqh8fABAVh0Sfy9keSS1ElzFuzURDlpKo/D7
707gBbbSLkgMK694qP7FmEQ9n/HDKOFPCb9fkagTPfgYXP6qMPMRshDt0RbfpgXK
RvhYcyt0mqzJWnVKiX4fZw5cQgn5t3+fwtM9w3fRG6if5MpFEGwkF5EQ1T9oSgW8
XTuN4DZAjhxbnBd3xWq1drPRfydG39hcTouJsaztW6sUnF3jR/8+eQyY/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdTx8DWDm8g33b04QkxYAqK893WMB8GA1UdIwQY
MBaAFE8HiKrSKsQ3DVGMt/ud/nJLQflXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHdlSXF0SXF4RGNOVVl5My01My1ja3RCLVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85YzA0ZDUtNDU5Yi00ZmUyLTg0NTAt
ZTExYWIyNjFjYTdiLzEvVHdlSXF0SXF4RGNOVVl5My01My1ja3RCLVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85YzA0ZDUtNDU5Yi00ZmUyLTg0NTAtZTExYWIyNjFjYTdi
LzEvVHdlSXF0SXF4RGNOVVl5My01My1ja3RCLVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIycK8pT
hexnPy0ial3dVQ40zTxJfXRFY8SnKiEudlNpc0JDEb0Bnh8RelvtH8ZnELFUUKgp
XkDoHlc6PVGyYNWmz1HiJf5lDhqikuuse8AWD7B+TQ3djQfeR+xXB/m/6/fU1XO4
mFYhzIh0I/G/rjSNKnOFBq/8mX3b+4403UiKb/PvBdETm6dFTS8w6vm2UIv1maDL
xafnTaIjbtmD/UnqmKHU3VlbbNW6cwJQh0ybyChG1TS7AmkG3diSchuAl+dMTcJd
AhwcN1JkOCox2Roa3GZ7J4RtWg8mZC2ATJ2TL/j/gyfkgj2q37TfIp/L2FT4OKq0
6ntGhPTR+w3wQw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:10 2026 by rpki-client