Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
File:                     Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft (raw, json)
Hash identifier:          1usZ5Wzv6q2ru+ilJPcZ6EhVFqR5kml40Lfi7akDv/E=
Subject key identifier:   7C:C2:30:55:C8:4E:2F:77:9C:7C:4B:6E:CF:F6:2C:56:5A:E1:CA:AF
Authority key identifier: 4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
Certificate issuer:       /CN=4eec68f7514db22173650088294b0143b377fc23
Certificate serial:       019E2091D241EADB4329D47C1B41B42DA9FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
Manifest number:          098A
Signing time:             Wed 13 May 2026 09:01:27 +0000
Manifest this update:     Wed 13 May 2026 09:01:27 +0000
Manifest next update:     Thu 14 May 2026 09:01:27 +0000
Files and hashes:         1: 6vtHBriDas5-v-LxtPfKhRyXjCw.roa (hash: Sn7hvr2tQ9u8DT+gf3ngvnqmbxpFZXaj4xMVzMp3uHs=)
                          2: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl (hash: eBKkgQNruyqFwoCTLy2XB9JhW4SshA3Ay18yeEKUdMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:d2:41:ea:db:43:29:d4:7c:1b:41:b4:2d:a9:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eec68f7514db22173650088294b0143b377fc23
        Validity
            Not Before: May 13 09:01:27 2026 GMT
            Not After : May 14 09:01:27 2026 GMT
        Subject: CN=7cc23055c84e2f779c7c4b6ecff62c565ae1caaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:92:74:2d:70:18:9d:c5:8c:95:6e:8b:15:07:
                    80:f1:42:49:51:e4:64:be:55:4a:01:c7:a9:f7:5f:
                    81:dd:7f:1b:a0:aa:55:23:38:27:4f:1d:fb:65:3e:
                    9d:e1:83:85:7e:62:39:e3:f1:a9:00:b1:eb:de:b3:
                    6f:80:78:bc:36:a0:23:2b:a1:9c:b6:ea:29:b6:85:
                    02:87:5d:36:ba:69:7c:96:70:86:0e:f6:5f:1d:ef:
                    07:c6:1c:85:e6:2e:2d:43:48:32:4c:62:e3:16:28:
                    e1:1a:dd:4a:09:44:25:a2:8f:7e:c1:63:29:d4:45:
                    fb:c6:56:fa:24:a6:52:0e:1a:72:e9:54:13:51:68:
                    6c:41:75:80:6b:09:48:37:4c:27:6d:f7:c8:0c:d4:
                    f2:9a:b6:b1:a7:ec:a3:20:22:cf:b1:a2:e4:10:69:
                    f7:a7:78:c5:64:52:41:9b:c5:80:00:9c:79:da:de:
                    4d:e3:f8:48:3c:05:a5:8d:87:33:46:b1:01:54:d3:
                    5c:58:8b:70:c2:53:3f:97:98:2f:74:af:e3:93:a8:
                    20:0d:40:68:0e:d4:25:9b:ad:ee:87:53:80:e2:71:
                    e6:39:e4:56:05:e3:13:09:c7:f0:3a:eb:e4:f0:09:
                    60:c1:4e:30:bb:26:76:ee:73:f8:c8:1d:99:c5:59:
                    b6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C2:30:55:C8:4E:2F:77:9C:7C:4B:6E:CF:F6:2C:56:5A:E1:CA:AF
            X509v3 Authority Key Identifier:
                keyid:4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3e:5a:9c:46:8c:f1:77:65:8e:71:a6:25:cf:de:40:05:b1:
         63:e8:7e:c8:02:82:47:e8:d5:77:d2:92:9f:4d:e3:e5:40:ae:
         80:99:49:80:3a:44:9c:2f:e3:91:1f:bf:d3:52:bb:f8:fa:d2:
         40:32:56:36:7a:47:44:29:5c:35:ae:7d:e7:15:58:0c:40:cc:
         3c:b3:5e:d7:fd:ef:a5:d0:89:c7:b2:80:4e:f7:3b:f7:16:e1:
         97:13:48:12:09:8f:fa:13:c2:e1:f1:01:a2:2c:ab:1a:14:25:
         69:bd:39:3f:47:a9:68:ae:2b:83:65:77:85:4f:1f:ad:e3:69:
         1a:4d:d9:8d:44:58:9b:db:9b:14:08:27:9d:29:04:2e:fd:b1:
         fb:2d:4e:cc:d7:02:a9:8d:bd:e7:1d:65:a3:52:3c:46:fa:7d:
         72:45:a1:75:a1:9e:2c:9f:06:fa:74:f4:78:99:8c:a0:c6:ca:
         e4:f9:47:13:53:83:5d:98:8a:43:e3:e0:41:72:24:2f:73:1f:
         96:e9:9c:70:01:fc:2a:c9:7b:af:c1:6e:d2:f7:f6:ff:ab:20:
         50:fc:ae:96:89:63:13:65:cc:40:7e:7c:3d:4f:81:d3:e5:71:
         dc:04:cb:8f:ca:9d:11:37:2f:68:aa:9e:c0:e6:f7:e0:1c:54:
         f0:18:36:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:02 2026 by rpki-client