Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
File:                     TWn-EboAGxKm-9GJYpo_sYG9jJs.mft (raw, json)
Hash identifier:          LSGAWQIaCrS4zRVPTYoeg3rqBILq3lYnVE8+0OguHK0=
Subject key identifier:   A8:2F:7E:C9:BE:D5:A5:81:63:BD:F4:05:C0:D0:0C:DE:C3:76:82:D7
Authority key identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B
Certificate issuer:       /CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
Certificate serial:       019A01B5EAF35DC7C2464A064121CF1697D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
Manifest number:          16E6
Signing time:             Mon 20 Oct 2025 13:01:30 +0000
Manifest this update:     Mon 20 Oct 2025 13:01:30 +0000
Manifest next update:     Tue 21 Oct 2025 13:01:30 +0000
Files and hashes:         1: I72vD4clErn-KyL3Il94C9_-wtk.roa (hash: JxiFx7TuP4vOP+SWIC89SDMzWOz23TjJ939/vZhx0JU=)
                          2: TWn-EboAGxKm-9GJYpo_sYG9jJs.crl (hash: GYd3DQuWmosMcgqaoHGdBLD34vTwX0AT7HHBc99jq0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:b5:ea:f3:5d:c7:c2:46:4a:06:41:21:cf:16:97:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
        Validity
            Not Before: Oct 20 13:01:30 2025 GMT
            Not After : Oct 21 13:01:30 2025 GMT
        Subject: CN=a82f7ec9bed5a58163bdf405c0d00cdec37682d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:de:99:e9:ad:39:b9:65:42:6a:e3:d9:b1:74:
                    ac:40:50:40:7e:12:05:3b:d0:16:35:11:04:6a:fb:
                    b8:a8:c0:16:bc:57:d7:64:ec:00:3e:d4:a0:bb:37:
                    48:1c:e3:98:4a:0d:14:0c:34:a8:c9:b4:50:69:5d:
                    0d:1d:cd:c2:0c:89:91:f8:73:b2:5e:0d:c8:d3:a6:
                    2e:8e:2b:91:4e:7a:ed:33:94:44:5a:7a:17:de:b9:
                    e8:da:b0:4e:73:8c:d4:f5:3c:e3:b8:4a:ab:e9:cd:
                    b9:05:13:12:d5:c1:7f:87:90:54:85:12:f7:1b:29:
                    29:c2:4c:d5:ab:96:a5:d3:a6:05:5e:d4:af:0c:82:
                    58:3b:ff:ea:ab:4e:5c:ec:e6:bd:94:a8:42:1a:bf:
                    dd:c2:7f:cd:69:03:fe:90:84:32:9c:7c:b7:41:40:
                    c9:48:b5:b9:85:69:9d:c8:86:bc:c5:5e:f6:36:3f:
                    e7:f1:a0:bf:4b:61:9d:28:38:21:75:8e:b9:4b:64:
                    3a:4b:ed:19:87:31:d3:a0:20:e6:9f:c6:b1:4e:1c:
                    24:69:e7:43:d9:cc:6e:e0:56:b9:93:64:0b:5a:97:
                    68:96:5f:26:8a:d5:89:52:8f:e4:c9:52:6a:e6:e9:
                    f3:35:35:35:4b:e8:a7:14:7f:b9:c8:05:d2:43:fb:
                    f3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2F:7E:C9:BE:D5:A5:81:63:BD:F4:05:C0:D0:0C:DE:C3:76:82:D7
            X509v3 Authority Key Identifier:
                keyid:4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:31:cf:6c:9a:a2:bb:2a:56:5e:37:79:6a:ad:46:54:98:d9:
         f2:b1:fb:73:06:67:64:08:c2:99:07:74:07:92:30:1c:03:21:
         2f:19:82:9e:14:39:de:58:47:9d:ce:92:32:62:76:82:fb:e4:
         33:4f:fe:3a:8f:ee:6b:0b:de:82:5b:ff:da:24:13:88:2a:36:
         33:9b:d0:08:f0:8c:77:b6:75:b0:f2:25:8c:05:9d:8f:88:f2:
         ba:0a:e9:55:64:e9:03:fe:12:ea:3b:58:24:d5:5d:c1:6a:7d:
         fe:aa:85:d8:c2:45:ee:bf:47:d8:29:6e:93:cc:6f:9d:be:5e:
         9d:85:b7:23:a7:07:ee:b0:fa:6b:81:3e:d4:9d:c3:a4:6d:79:
         7d:62:32:fb:a1:35:ab:b8:7d:87:29:74:1c:19:2d:75:67:50:
         22:aa:b0:8d:5e:48:7c:b8:eb:fc:98:8e:65:c6:ea:1a:2e:0e:
         62:6c:68:b0:28:74:1f:c7:ce:e6:a7:c7:e8:05:46:39:90:7b:
         b2:4e:25:cc:fa:25:72:ed:09:99:24:21:dc:17:cd:d5:cd:96:
         42:6f:78:97:85:a9:f4:6c:10:04:84:24:cf:0c:86:3f:dc:2b:
         21:de:c4:89:d7:4d:b2:94:f8:d2:cd:57:4c:49:e1:82:7b:ac:
         ae:44:35:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:43:09 2025 by rpki-client