Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
File:                     TWn-EboAGxKm-9GJYpo_sYG9jJs.mft (raw, json)
Hash identifier:          o/iUiBvsQzS58+SibxF8RaICV0nHw9XCAeBWz+qCM6c=
Subject key identifier:   44:7A:35:B7:2D:2D:59:80:0D:7A:E0:83:78:C8:F3:AB:D4:3B:74:5B
Authority key identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B
Certificate issuer:       /CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
Certificate serial:       01A0DCBC1F4A9BA8B68656FEFAE71D1DC369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
Manifest number:          1A73
Signing time:             Sat 26 Sep 2026 08:01:51 +0000
Manifest this update:     Sat 26 Sep 2026 08:01:51 +0000
Manifest next update:     Sun 27 Sep 2026 08:01:51 +0000
Files and hashes:         1: TWn-EboAGxKm-9GJYpo_sYG9jJs.crl (hash: CQOujijjfO5drjp+EfA2ScWtQsW+2KN0AGsqUGozSPg=)
                          2: d0gc-bfZVZ_wvr1zHWcpz3THoUw.roa (hash: omEL790d2ktapnfeuHtd9b9rxp1D6UXPaEs4yrE6gFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 08:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:bc:1f:4a:9b:a8:b6:86:56:fe:fa:e7:1d:1d:c3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
        Validity
            Not Before: Sep 26 08:01:51 2026 GMT
            Not After : Sep 27 08:01:51 2026 GMT
        Subject: CN=447a35b72d2d59800d7ae08378c8f3abd43b745b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:38:a9:93:b6:31:2e:0b:32:4d:55:2a:cb:33:
                    d5:3c:d9:79:07:d0:1d:d7:f8:a9:48:22:72:ac:13:
                    99:f5:23:52:a5:00:20:d5:47:80:b3:5a:77:dd:73:
                    62:e0:e5:b3:d0:32:3d:ec:09:84:b5:7f:bf:76:e6:
                    ba:7b:37:33:7b:d1:25:0f:a8:aa:a6:32:dd:ff:bd:
                    d1:b2:1d:43:c2:f3:d9:2f:7b:9f:1f:95:e6:85:cd:
                    32:a5:d8:98:a0:0d:47:df:7f:cd:58:91:78:7d:ed:
                    05:85:f3:8f:08:65:46:0c:f0:cc:71:61:02:f0:be:
                    4c:c7:d8:6f:28:e8:4a:30:17:bf:07:d6:6e:6b:e9:
                    af:9c:38:b0:26:4f:64:fc:3d:3c:41:bc:ef:9a:a8:
                    6a:8d:55:a8:29:a7:5e:69:30:81:10:7e:8b:5c:2e:
                    31:dd:bc:25:08:eb:8b:94:e5:2b:18:4f:d4:d0:89:
                    ad:8e:19:36:cc:87:c4:ed:d0:f4:5a:39:22:98:d6:
                    cf:2d:b4:bc:d3:4f:8a:61:33:89:89:69:cc:1f:a5:
                    29:57:51:d0:51:7c:0e:cb:b0:b1:ba:64:f2:b1:7e:
                    50:1f:7d:e3:ed:d3:b7:bb:91:40:1f:28:d1:11:dd:
                    32:1e:84:73:42:59:2c:90:ac:da:5a:fc:5b:6a:ba:
                    70:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7A:35:B7:2D:2D:59:80:0D:7A:E0:83:78:C8:F3:AB:D4:3B:74:5B
            X509v3 Authority Key Identifier:
                keyid:4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:5a:3f:8f:65:0a:ca:0d:61:49:7f:3a:17:ed:9e:a3:2f:4d:
         a7:5b:3e:de:e3:80:f6:92:d9:c6:ec:90:eb:f9:6d:75:02:fc:
         0b:b6:d4:ec:70:b2:76:7c:05:52:bb:94:8b:5d:0b:2d:91:5e:
         70:ce:1c:fc:d8:fa:05:92:f3:8c:8a:6d:69:98:9b:5c:f7:0f:
         45:d5:5a:e4:6d:f5:fa:bb:88:49:e2:4e:6d:e4:cc:db:f9:a8:
         66:0d:cb:47:6a:f8:99:af:ba:9a:a3:15:8d:b6:c7:99:eb:48:
         51:5e:2b:96:1d:b2:57:55:6c:4b:dc:18:f0:a8:d0:b9:0c:2e:
         82:0c:ef:69:a6:f3:f6:c7:a6:db:30:f7:3a:a1:79:b9:56:f7:
         d8:57:12:81:a9:7d:fc:b4:d4:3d:58:98:0a:44:bf:14:bd:d9:
         3f:2c:39:b0:e1:b6:b1:24:eb:ad:47:1d:cc:24:8f:12:e8:b3:
         c7:1c:9c:00:0b:f8:56:3a:76:9b:8a:bf:46:7a:8f:b0:bb:07:
         fe:38:3c:c4:f5:dc:89:f8:01:5c:f3:08:90:d2:e5:84:ef:35:
         47:21:94:21:23:42:1d:9e:f8:bf:a6:78:38:5f:c2:bb:ef:9f:
         29:71:08:a6:6b:cd:99:e3:8c:51:78:7f:cb:b9:94:ed:23:f6:
         d1:a3:4b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:17:18 2026 by rpki-client