Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
File:                     TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft (raw, json)
Hash identifier:          LXTECx93QK3pQAgo627jlEdxD3I9u5O33RjQ9a+6ias=
Subject key identifier:   A3:B7:CF:E7:17:D9:F9:FA:64:03:A0:47:28:65:2B:56:78:CC:27:48
Authority key identifier: 4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
Certificate issuer:       /CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Certificate serial:       019D29608177236020109904F496FDA586AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
Manifest number:          0D1B
Signing time:             Thu 26 Mar 2026 09:01:23 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:23 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:23 +0000
Files and hashes:         1: TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl (hash: OY+o8z6+tDo4LQ71RbcMc3tBIRHkrgtsdcocQ4w4GOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:60:81:77:23:60:20:10:99:04:f4:96:fd:a5:86:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
        Validity
            Not Before: Mar 26 09:01:23 2026 GMT
            Not After : Mar 27 09:01:23 2026 GMT
        Subject: CN=a3b7cfe717d9f9fa6403a04728652b5678cc2748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:f6:78:54:81:b7:5b:58:64:8d:6c:e4:40:
                    78:f8:48:14:c2:26:48:b2:b0:0a:70:9e:84:58:d5:
                    de:45:36:f4:42:86:d8:23:34:ed:22:12:15:72:7d:
                    6d:01:a1:91:56:06:fa:93:50:56:cf:79:ae:46:d4:
                    fb:8f:51:84:70:20:60:cd:b0:4c:38:cf:6f:54:de:
                    d5:d4:cd:77:96:ca:f5:46:c7:97:bc:b9:96:f5:e3:
                    4f:d0:61:70:1b:4d:2b:e8:af:e9:97:3c:be:49:7b:
                    e4:dd:3d:cb:ac:ca:67:17:a5:3b:dc:e5:69:4b:60:
                    c1:e7:7f:0b:11:da:cf:cf:e5:4c:a8:e0:2c:d8:53:
                    6a:01:54:9a:70:d6:eb:c7:9f:46:02:e1:cd:32:05:
                    9e:e7:53:43:69:79:cf:57:8a:60:50:5e:02:7c:5e:
                    aa:55:c7:07:05:70:46:68:68:eb:a6:fb:fc:01:d4:
                    41:2d:75:f0:58:57:95:1d:a4:5d:71:ae:02:d6:d3:
                    fc:f6:02:fe:c1:4d:43:a8:ee:b3:de:10:27:ef:e3:
                    a9:a7:76:db:15:a7:30:1e:f5:d8:60:67:e3:ad:ff:
                    09:ba:65:3a:1c:e5:82:9c:1f:67:55:c7:a2:d3:c1:
                    72:08:41:40:2f:a3:93:67:b0:96:fa:98:e5:06:90:
                    75:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B7:CF:E7:17:D9:F9:FA:64:03:A0:47:28:65:2B:56:78:CC:27:48
            X509v3 Authority Key Identifier:
                keyid:4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:56:ee:fb:cb:b8:6d:87:ab:d6:b8:c7:83:96:5d:ba:f2:c9:
         b8:ec:4b:cc:e0:e9:68:9f:91:e9:e8:65:11:20:54:9c:b2:85:
         97:3e:ba:90:29:b1:15:fa:c3:de:f7:a7:90:72:6c:bf:ff:94:
         d4:0f:4e:e5:df:cc:3b:41:12:3e:6e:b5:00:6a:8d:a2:45:83:
         18:17:85:6d:a8:f4:05:f6:d4:71:5a:32:8a:7e:e3:a0:6e:be:
         da:73:eb:b9:20:ec:79:3f:13:54:a5:5a:62:3c:75:cd:41:59:
         f8:28:ec:d9:de:b5:66:64:d1:a9:79:ef:fa:fd:83:c0:da:48:
         bc:b8:0f:a2:a9:c7:bf:0c:46:87:d2:37:57:77:03:1e:7c:bb:
         69:9a:56:2a:95:b4:07:f4:44:b1:d3:3b:c8:50:39:cb:f2:86:
         61:cf:3f:da:c8:f5:e6:49:29:c3:88:38:f3:3b:a5:04:33:76:
         6c:8c:c3:88:58:09:21:f7:fc:5f:be:ee:16:d7:3e:88:4e:a7:
         1c:8f:c4:51:7e:f9:2e:71:6a:c6:c5:2e:ae:c3:b1:62:d3:88:
         65:71:b9:aa:bf:7b:7a:38:e9:fe:fc:62:6c:9f:01:a3:58:1f:
         50:e3:9f:67:38:64:0e:79:a2:91:65:4f:bf:fa:ca:fe:39:c6:
         8b:cd:43:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:04:30 2026 by rpki-client