Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
File:                     Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft (raw, json)
Hash identifier:          HhlU00mrRT/Hvwc+M/hFMrRlkkhBpJTKdetBjucevzo=
Subject key identifier:   CD:83:CE:D9:59:3D:37:F6:79:6D:0E:A6:A9:A6:BC:44:50:7A:9A:58
Authority key identifier: 4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
Certificate issuer:       /CN=4eec68f7514db22173650088294b0143b377fc23
Certificate serial:       019F97385B33C242295FF65A3BA9B4659A36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
Manifest number:          0A4C
Signing time:             Sat 25 Jul 2026 03:01:20 +0000
Manifest this update:     Sat 25 Jul 2026 03:01:20 +0000
Manifest next update:     Sun 26 Jul 2026 03:01:20 +0000
Files and hashes:         1: 6vtHBriDas5-v-LxtPfKhRyXjCw.roa (hash: Sn7hvr2tQ9u8DT+gf3ngvnqmbxpFZXaj4xMVzMp3uHs=)
                          2: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl (hash: GUU6pkou+28/j9sSN97hozwdW3599erfixE2IaNpo2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:97:38:5b:33:c2:42:29:5f:f6:5a:3b:a9:b4:65:9a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eec68f7514db22173650088294b0143b377fc23
        Validity
            Not Before: Jul 25 03:01:20 2026 GMT
            Not After : Jul 26 03:01:20 2026 GMT
        Subject: CN=cd83ced9593d37f6796d0ea6a9a6bc44507a9a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f1:bf:3c:12:74:bb:48:33:1c:3e:14:b2:b6:
                    8d:67:04:d3:34:8b:aa:b6:e9:4b:c0:05:76:fe:52:
                    1e:a8:b2:68:37:d9:2f:20:e1:ea:15:c5:f2:95:34:
                    ee:5b:40:16:d6:22:72:c8:e4:1f:1f:25:7e:7f:6d:
                    4d:3c:87:b2:64:e4:71:73:9d:5f:d9:65:44:ef:e6:
                    20:98:76:a2:b7:53:6c:f3:55:6f:f5:7c:33:fe:9c:
                    1c:87:20:41:12:9f:c3:cc:2d:c2:9f:f6:5c:52:5f:
                    17:d9:1d:e6:b5:71:7b:a7:2e:92:f8:5c:bc:bd:2a:
                    1e:04:53:b6:df:64:5c:b7:c6:73:5a:33:6d:33:fa:
                    a1:e0:6b:12:9d:a1:16:6c:0f:f1:35:ca:ce:07:2f:
                    b8:84:c1:40:e8:6a:57:38:ae:64:85:f9:b4:3c:91:
                    13:d6:77:bf:a4:be:f8:d6:56:b8:5f:a7:94:b2:a9:
                    b9:0d:08:a5:51:40:34:e7:19:b3:09:68:b9:5a:fa:
                    b4:ae:43:ac:e4:ab:e5:a4:73:07:97:ff:29:9f:67:
                    46:14:37:d7:26:5c:b6:08:83:55:87:11:55:cb:15:
                    9d:23:d9:8e:98:98:c5:22:dc:39:42:13:da:2d:eb:
                    8e:4e:dd:30:59:11:12:0e:f8:cb:5c:e9:19:3b:da:
                    de:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:83:CE:D9:59:3D:37:F6:79:6D:0E:A6:A9:A6:BC:44:50:7A:9A:58
            X509v3 Authority Key Identifier:
                keyid:4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c5:d3:ce:e4:e1:ef:4c:4b:ea:36:b6:8e:e2:11:15:10:cc:
         4f:c9:b3:3f:1e:4c:c0:08:9c:81:92:94:f6:56:e2:ca:b3:00:
         5f:a0:8b:ac:87:19:4f:a1:63:d6:2e:c8:07:e7:f4:e9:d9:8e:
         13:d2:89:bd:db:ae:06:ef:33:b2:f8:21:36:4f:37:ee:79:50:
         70:06:8d:c8:b3:fa:2b:72:29:da:47:16:85:da:0d:7a:75:09:
         9f:ae:78:80:2b:1d:fb:8f:1b:b3:e9:c4:5a:fd:6a:ea:48:3e:
         4c:23:5c:17:1f:54:77:ad:cd:70:09:ed:9e:2a:1f:49:0f:bb:
         4e:c1:b9:00:fd:e6:67:e3:a4:df:09:47:e9:b8:b3:68:28:4a:
         8e:90:fa:4d:f6:d1:e8:82:98:dd:60:8f:cb:9d:fc:90:fd:6a:
         80:f9:5a:58:33:4e:68:41:d8:b5:15:d8:e7:e7:21:55:a6:0d:
         c9:3b:96:db:5b:7b:4b:22:21:15:7c:33:7d:d8:02:0e:97:f4:
         8c:8b:43:7b:68:1b:3e:5f:55:c9:88:9e:ac:5b:3b:77:57:85:
         f1:0a:88:ff:63:a4:86:c9:db:4e:0f:04:42:1f:27:cf:5e:b3:
         8f:5f:7f:82:c1:e6:30:a6:bb:5a:46:a1:70:c0:f4:89:01:69:
         93:63:e9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 06:35:00 2026 by rpki-client