Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
File:                     TWn-EboAGxKm-9GJYpo_sYG9jJs.mft (raw, json)
Hash identifier:          bmsgdUq9DjOZSBQ5SVx6Oa/lKvWi3+BcLEpexUAS7Dc=
Subject key identifier:   50:58:7E:5E:42:24:0E:3A:4F:03:52:0F:DB:AE:FC:A6:4B:9F:60:75
Authority key identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B
Certificate issuer:       /CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
Certificate serial:       0197B8905E8A33BB448CD17F2BD3D3060EAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 22:02:38 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:38 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:38 +0000
Files and hashes:         1: I72vD4clErn-KyL3Il94C9_-wtk.roa (hash: JxiFx7TuP4vOP+SWIC89SDMzWOz23TjJ939/vZhx0JU=)
                          2: TWn-EboAGxKm-9GJYpo_sYG9jJs.crl (hash: VHWZil6SQ07H37oIQL/7YMWy3F1FvOl7sIwCjWJO4Zw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:5e:8a:33:bb:44:8c:d1:7f:2b:d3:d3:06:0e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
        Validity
            Not Before: Jun 28 22:02:38 2025 GMT
            Not After : Jun 29 22:02:38 2025 GMT
        Subject: CN=50587e5e42240e3a4f03520fdbaefca64b9f6075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:92:74:94:69:9a:c5:a0:6c:f2:6e:43:b1:22:
                    63:09:09:25:af:2f:3d:16:59:34:bf:2a:ac:09:ef:
                    e0:a0:b1:27:f1:b5:82:a0:d3:b4:d1:b1:76:b2:00:
                    28:0b:33:7e:35:89:7b:e2:3a:61:7d:9d:89:cb:a2:
                    0c:6e:eb:21:80:a0:b3:39:8f:e3:2e:f5:eb:15:2f:
                    fe:de:0b:66:3b:47:38:6a:c2:55:6a:be:de:d3:5a:
                    e8:3e:82:22:a1:e9:ea:df:44:d6:6a:e1:59:47:f0:
                    b7:1b:43:03:e7:48:74:ee:aa:a5:9f:9b:9c:29:c5:
                    0d:e9:33:cd:88:ff:19:90:e3:52:86:c4:39:06:f0:
                    91:a4:03:c6:ea:2f:5b:79:a5:93:6b:ad:04:15:12:
                    b6:59:f5:3f:b0:40:f3:30:b6:db:02:a0:7d:79:f3:
                    bc:2d:5d:9a:78:ee:b8:66:48:9e:f6:38:1a:88:29:
                    4a:73:c0:74:c5:0c:2c:a3:d9:c5:b9:c4:f4:aa:5f:
                    1c:0d:6c:46:0d:4d:f7:da:55:e7:1c:ba:87:90:f0:
                    21:a8:3d:cb:a8:36:59:26:2b:8e:60:02:2c:bd:c8:
                    f8:a5:62:91:d5:1e:a9:89:ad:fa:92:24:ec:3d:ab:
                    8a:cd:0a:68:1d:41:f6:dc:e1:53:f2:2d:52:9e:7a:
                    d8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:58:7E:5E:42:24:0E:3A:4F:03:52:0F:DB:AE:FC:A6:4B:9F:60:75
            X509v3 Authority Key Identifier:
                keyid:4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e0:ec:fe:0b:45:dc:98:da:54:80:08:4d:e8:37:0f:72:f0:
         52:30:a7:1d:04:f8:1a:ec:48:6d:99:90:ee:20:e9:3d:7b:24:
         a1:cd:57:d4:da:ae:50:46:fc:52:91:1d:48:2b:02:cd:ce:a2:
         59:79:4c:a9:8b:61:5e:85:f0:ca:f4:b4:33:07:da:ad:56:5c:
         52:af:88:6c:b8:91:5c:a9:70:f9:55:4a:f0:3a:af:53:32:13:
         27:33:3e:bb:c9:e6:86:77:56:f3:16:53:eb:5a:e1:3d:68:08:
         08:74:d8:2c:d0:40:b8:fb:25:68:63:f2:5b:0e:5f:df:e1:66:
         11:16:de:1b:ef:9b:9d:94:0a:dc:c3:cd:e9:67:74:90:3b:e6:
         52:f4:ab:82:10:b7:31:14:12:64:06:34:42:40:1c:f1:f0:3f:
         a7:d2:23:ae:db:35:9d:7c:5e:e0:e5:1c:28:d0:0f:c1:cb:b8:
         f5:06:df:9c:e7:4c:e8:af:5f:b6:a7:83:a4:38:8e:e2:50:be:
         17:6f:a7:c8:99:e5:0d:a3:55:2c:59:df:79:13:aa:a3:b5:99:
         d4:ca:94:32:cd:fc:88:00:f5:ce:37:a7:94:69:58:49:bf:3a:
         c1:81:4a:ea:e1:ec:95:29:a6:24:0e:9c:5d:9f:77:49:03:96:
         4e:a6:50:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kF6KM7tEjNF/K9PTBg6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNjlmZTExYmEwMDFiMTJhNmZiZDE4OTYyOWEzZmIxODFi
ZDhjOWIwHhcNMjUwNjI4MjIwMjM4WhcNMjUwNjI5MjIwMjM4WjAzMTEwLwYDVQQD
Eyg1MDU4N2U1ZTQyMjQwZTNhNGYwMzUyMGZkYmFlZmNhNjRiOWY2MDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pJ0lGmaxaBs8m5DsSJjCQklry89
Flk0vyqsCe/goLEn8bWCoNO00bF2sgAoCzN+NYl74jphfZ2Jy6IMbushgKCzOY/j
LvXrFS/+3gtmO0c4asJVar7e01roPoIioenq30TWauFZR/C3G0MD50h07qqln5uc
KcUN6TPNiP8ZkONShsQ5BvCRpAPG6i9beaWTa60EFRK2WfU/sEDzMLbbAqB9efO8
LV2aeO64Zkie9jgaiClKc8B0xQwso9nFucT0ql8cDWxGDU332lXnHLqHkPAhqD3L
qDZZJiuOYAIsvcj4pWKR1R6pia36kiTsPauKzQpoHUH23OFT8i1SnnrYZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBYfl5CJA46TwNSD9uu/KZLn2B1MB8GA1UdIwQY
MBaAFE1p/hG6ABsSpvvRiWKaP7GBvYybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQt
M2I2OGE4NGNkMmI4LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQtM2I2OGE4NGNkMmI4
LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhODs/gtF
3JjaVIAITeg3D3LwUjCnHQT4GuxIbZmQ7iDpPXskoc1X1NquUEb8UpEdSCsCzc6i
WXlMqYthXoXwyvS0MwfarVZcUq+IbLiRXKlw+VVK8DqvUzITJzM+u8nmhndW8xZT
61rhPWgICHTYLNBAuPslaGPyWw5f3+FmERbeG++bnZQK3MPN6Wd0kDvmUvSrghC3
MRQSZAY0QkAc8fA/p9Ijrts1nXxe4OUcKNAPwcu49QbfnOdM6K9ftqeDpDiO4lC+
F2+nyJnlDaNVLFnfeROqo7WZ1MqUMs38iAD1zjenlGlYSb86wYFK6uHslSmmJA6c
XZ93SQOWTqZQQQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:06 2025 by rpki-client