Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft
File:                     tucewFWW3EmUEGcP8hk_MJT6pqc.mft (raw, json)
Hash identifier:          IX1p16fyTJXtCg9Eu8Fd17rM2dAmZUQ0OnxBifzw3Rw=
Subject key identifier:   90:C8:5D:2D:83:24:2A:1C:7A:3E:23:3A:04:D3:6F:30:82:51:45:9C
Authority key identifier: B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7
Certificate issuer:       /CN=b6e71ec05596dc499410670ff2193f3094faa6a7
Certificate serial:       019E0DAFB64F44B498978D3CCAB58BEBFC10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft
Manifest number:          02E3
Signing time:             Sat 09 May 2026 17:01:19 +0000
Manifest this update:     Sat 09 May 2026 17:01:19 +0000
Manifest next update:     Sun 10 May 2026 17:01:19 +0000
Files and hashes:         1: tucewFWW3EmUEGcP8hk_MJT6pqc.crl (hash: W9TfX5SvRzXfeWxP+4RMmVtDXL7Ec3IBLDKM5SdoO5o=)
                          2: wFdwl3GPZJGJpXxabTkhX-gww84.roa (hash: 1a0mdIaHaosCkhFYntZmxOwmIiA+NPlXeJT6rqJ3578=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 May 2026 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:0d:af:b6:4f:44:b4:98:97:8d:3c:ca:b5:8b:eb:fc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6e71ec05596dc499410670ff2193f3094faa6a7
        Validity
            Not Before: May  9 17:01:19 2026 GMT
            Not After : May 10 17:01:19 2026 GMT
        Subject: CN=90c85d2d83242a1c7a3e233a04d36f308251459c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:04:03:62:09:4a:9c:c1:40:ef:c9:32:83:f0:
                    5f:80:60:83:f7:b0:77:10:f3:2b:d2:c8:f4:db:9f:
                    8c:2b:54:26:08:14:22:df:34:55:39:83:b9:47:3a:
                    a5:ec:a3:ba:44:bc:e3:fc:cc:84:23:e8:71:a2:c3:
                    80:89:06:51:0f:37:f4:95:1a:e7:e5:d1:3f:68:b1:
                    2a:ed:2f:54:74:b9:2d:ab:ee:ed:7f:c9:a0:b7:5d:
                    5a:f0:e8:01:0c:d9:4f:80:73:67:1c:04:6c:c0:19:
                    f5:9c:a1:2e:e2:19:f9:d9:db:3a:04:52:01:28:62:
                    86:31:68:cf:53:1d:39:84:85:34:1b:de:63:02:6a:
                    50:ce:9c:01:2f:3d:4a:49:c2:7a:64:ff:b1:92:66:
                    79:78:06:42:94:f2:4d:2b:65:31:fa:34:a7:ea:e5:
                    d8:7d:a6:c4:93:c1:66:b3:4a:48:27:c5:21:ea:93:
                    c4:1a:43:67:ff:a9:a5:ad:7b:a9:69:21:08:52:90:
                    7f:c0:7b:11:06:6c:06:0f:14:7d:d6:96:76:35:66:
                    1b:fe:a8:f8:d8:21:ff:c1:88:12:21:71:ac:e1:96:
                    49:57:dd:7a:1f:41:3d:da:7f:fb:e3:a3:32:86:0f:
                    0a:ed:b9:44:a0:f2:67:39:27:ee:91:ba:48:c9:03:
                    b1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C8:5D:2D:83:24:2A:1C:7A:3E:23:3A:04:D3:6F:30:82:51:45:9C
            X509v3 Authority Key Identifier:
                keyid:B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:55:12:e3:21:bc:bd:dd:06:ba:0a:b3:2d:7c:6d:8f:e7:41:
         d7:8b:7a:0b:54:eb:ab:6f:43:1b:33:a4:fd:02:f4:ce:8c:ad:
         e3:c5:bf:0b:ab:38:69:2c:7e:55:fc:f1:23:5f:3a:85:28:35:
         4d:1b:90:8b:d4:8a:77:49:a2:5c:9f:4c:91:49:91:08:2d:6f:
         44:45:da:66:29:e5:c3:d1:8e:08:55:24:4e:71:4b:f9:fc:79:
         84:af:df:2e:48:3c:97:84:16:97:10:bf:76:e3:75:46:7a:f2:
         b1:94:e0:dc:b2:00:a4:cc:ca:33:72:d6:c6:89:0e:cd:8a:93:
         c2:6c:61:81:bd:5a:6a:f8:6d:8f:de:88:cc:f8:c2:a6:e7:33:
         3b:d9:6c:22:10:11:55:59:65:49:8f:ea:56:ba:1e:46:1a:46:
         6a:32:90:78:db:67:22:d4:ab:7f:f9:02:c8:57:92:7d:d1:61:
         8f:db:e8:e7:e4:20:e0:eb:9b:c4:9a:09:a1:71:3d:d1:b3:2d:
         93:4d:b2:88:d5:26:b7:fa:5b:aa:2b:e7:ec:d7:3c:73:d9:ff:
         55:cd:58:ab:c6:be:7b:08:9c:05:fb:6b:6b:3c:97:8d:85:01:
         29:23:17:e9:8d:0e:96:96:aa:d1:44:59:80:f4:90:d6:5a:e4:
         a5:df:7b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 21:22:29 2026 by rpki-client