Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
File:                     Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft (raw, json)
Hash identifier:          6Bl6pfNfNR0AsIbl7h8IB7UxdCdI8VGo4BUK5FnxpeM=
Subject key identifier:   66:1C:CB:4C:C2:FE:F5:26:7A:63:92:8B:21:5F:B8:56:9E:70:20:83
Authority key identifier: 4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
Certificate issuer:       /CN=4eec68f7514db22173650088294b0143b377fc23
Certificate serial:       0198D6298FC1750FADD5CA02A327F9909F1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
Manifest number:          06CC
Signing time:             Sat 23 Aug 2025 09:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 09:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 09:01:44 +0000
Files and hashes:         1: I39FUsGFsmr9SUUDo-UEb6qOXN4.roa (hash: u4zl9OvdC2vc0LELt8+dwM6CALTiKOkmaqaJx/FGR/8=)
                          2: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl (hash: HFYyHhxFonw3RLMefLQDS5+XuCbl6ypIKz7begAwVgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:29:8f:c1:75:0f:ad:d5:ca:02:a3:27:f9:90:9f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eec68f7514db22173650088294b0143b377fc23
        Validity
            Not Before: Aug 23 09:01:44 2025 GMT
            Not After : Aug 24 09:01:44 2025 GMT
        Subject: CN=661ccb4cc2fef5267a63928b215fb8569e702083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:9c:cc:d1:1a:85:d8:64:ca:0f:bb:1a:b8:
                    42:a2:46:7c:b2:22:8f:b2:94:d6:be:46:bf:26:61:
                    b7:e7:40:d0:31:83:35:07:df:c3:cf:32:64:fa:38:
                    44:f4:29:b3:85:e8:59:c8:91:81:0b:3e:23:e6:c1:
                    93:91:db:e0:08:39:10:59:26:fb:41:12:c2:82:57:
                    d4:b6:46:2d:37:e8:ac:63:b4:f2:cd:af:26:53:bc:
                    17:4e:ce:27:f6:e4:35:b8:97:dd:bf:51:04:98:ea:
                    46:49:21:9c:78:95:1c:f1:86:86:7e:0d:8e:1b:c3:
                    7f:9f:43:f7:84:08:b1:0c:b7:6f:59:a0:0c:ad:d2:
                    fd:d1:fd:04:56:cc:ea:82:d3:fb:f4:ec:62:23:e4:
                    f2:be:63:2c:cd:27:82:8f:3e:47:18:d8:fd:fc:15:
                    5c:a0:b9:d3:14:58:c2:cc:6b:5f:3c:4c:f7:b3:6b:
                    47:92:38:12:16:7c:69:f0:f9:6b:19:05:e3:2c:ec:
                    d6:61:ba:9b:42:6a:9a:ad:13:5d:14:e5:49:ea:95:
                    3d:e5:58:3d:e2:bc:8b:5a:da:f8:39:f5:37:2e:25:
                    bd:6c:14:83:9a:3e:ee:f9:e4:ff:26:20:cb:8c:a6:
                    8a:90:08:c4:7b:a3:b7:c8:5d:ac:b7:3d:47:bc:d7:
                    be:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1C:CB:4C:C2:FE:F5:26:7A:63:92:8B:21:5F:B8:56:9E:70:20:83
            X509v3 Authority Key Identifier:
                keyid:4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:8a:bb:88:2c:b8:b0:de:9b:d7:66:b2:a6:fa:99:2d:48:42:
         69:ab:8d:cf:71:60:cd:d2:e3:b5:f2:9a:60:38:cb:86:35:b1:
         83:d1:a9:6d:ca:44:d1:e4:cb:b1:e8:93:42:4b:fa:f7:80:29:
         2e:3d:cb:51:82:c4:3c:97:dd:f4:e7:74:83:a3:f6:60:bb:b0:
         a1:16:75:a1:f8:e1:d7:1f:95:f4:66:21:c5:be:b2:30:34:df:
         4e:a9:11:13:f1:cf:4b:49:5e:06:54:45:26:ee:12:6c:1b:0a:
         bc:60:9e:43:aa:03:db:fa:d8:04:31:60:09:73:f7:84:ea:7e:
         33:ce:b6:81:5b:f2:36:4f:99:3b:ec:a9:02:84:a0:ac:cb:e9:
         f2:c5:74:86:5b:76:76:1b:57:bf:40:e4:8a:06:2a:3a:eb:c5:
         c8:1f:a4:4b:85:ab:bd:a9:96:68:cb:12:8c:07:70:98:92:4e:
         b7:35:5d:02:57:ce:91:27:39:71:10:86:96:88:ef:66:d9:4d:
         b1:03:0a:bc:68:4c:20:10:41:5c:01:98:2e:32:e4:cd:ba:70:
         17:70:81:bf:11:64:5e:73:4e:ba:0d:85:f9:8c:d9:f2:a6:ec:
         5c:de:0d:f7:2c:7c:94:52:e2:92:94:a7:b0:38:3b:60:92:bd:
         70:48:5c:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWKY/BdQ+t1coCoyf5kJ8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZWM2OGY3NTE0ZGIyMjE3MzY1MDA4ODI5NGIwMTQzYjM3
N2ZjMjMwHhcNMjUwODIzMDkwMTQ0WhcNMjUwODI0MDkwMTQ0WjAzMTEwLwYDVQQD
Eyg2NjFjY2I0Y2MyZmVmNTI2N2E2MzkyOGIyMTVmYjg1NjllNzAyMDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPqczNEahdhkyg+7GrhCokZ8siKP
spTWvka/JmG350DQMYM1B9/DzzJk+jhE9CmzhehZyJGBCz4j5sGTkdvgCDkQWSb7
QRLCglfUtkYtN+isY7Tyza8mU7wXTs4n9uQ1uJfdv1EEmOpGSSGceJUc8YaGfg2O
G8N/n0P3hAixDLdvWaAMrdL90f0EVszqgtP79OxiI+TyvmMszSeCjz5HGNj9/BVc
oLnTFFjCzGtfPEz3s2tHkjgSFnxp8PlrGQXjLOzWYbqbQmqarRNdFOVJ6pU95Vg9
4ryLWtr4OfU3LiW9bBSDmj7u+eT/JiDLjKaKkAjEe6O3yF2stz1HvNe+OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYcy0zC/vUmemOSiyFfuFaecCCDMB8GA1UdIwQY
MBaAFE7saPdRTbIhc2UAiClLAUOzd/wjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHV4bzkxRk5zaUZ6WlFDSUtVc0JRN04zX0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MzIwNjUtNjE1MS00Y2UwLWFjNmIt
NWQzNGM4NTc1YmVhLzEvVHV4bzkxRk5zaUZ6WlFDSUtVc0JRN04zX0NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81MzIwNjUtNjE1MS00Y2UwLWFjNmItNWQzNGM4NTc1YmVh
LzEvVHV4bzkxRk5zaUZ6WlFDSUtVc0JRN04zX0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoq7iCy4
sN6b12aypvqZLUhCaauNz3FgzdLjtfKaYDjLhjWxg9GpbcpE0eTLseiTQkv694Ap
Lj3LUYLEPJfd9Od0g6P2YLuwoRZ1ofjh1x+V9GYhxb6yMDTfTqkRE/HPS0leBlRF
Ju4SbBsKvGCeQ6oD2/rYBDFgCXP3hOp+M862gVvyNk+ZO+ypAoSgrMvp8sV0hlt2
dhtXv0DkigYqOuvFyB+kS4WrvamWaMsSjAdwmJJOtzVdAlfOkSc5cRCGlojvZtlN
sQMKvGhMIBBBXAGYLjLkzbpwF3CBvxFkXnNOug2F+YzZ8qbsXN4N9yx8lFLikpSn
sDg7YJK9cEhcyw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:21 2025 by rpki-client