Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
File:                     Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft (raw, json)
Hash identifier:          4y3Szl77xBIKW7JDqH2qzXL3gpj2RkaOgI+uHLkVvzY=
Subject key identifier:   4A:D0:AA:E5:31:FF:46:FC:AD:9F:32:28:DC:70:85:07:C4:76:7C:C3
Authority key identifier: 4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
Certificate issuer:       /CN=4eec68f7514db22173650088294b0143b377fc23
Certificate serial:       019748F9D8D117991408D8D14B238FCAE022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
Manifest number:          05FE
Signing time:             Sat 07 Jun 2025 06:00:22 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:22 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:22 +0000
Files and hashes:         1: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl (hash: Rex/Z3OC1y60yaCwBKbOtJ3nTDgxsee9eFdvPu4jU94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:f9:d8:d1:17:99:14:08:d8:d1:4b:23:8f:ca:e0:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eec68f7514db22173650088294b0143b377fc23
        Validity
            Not Before: Jun  7 06:00:22 2025 GMT
            Not After : Jun  8 06:00:22 2025 GMT
        Subject: CN=4ad0aae531ff46fcad9f3228dc708507c4767cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:e5:b6:51:bc:4a:65:a0:d2:2a:7f:5d:39:
                    36:06:58:83:82:90:09:ac:2b:46:d9:51:df:35:a7:
                    b7:a0:3a:88:54:cc:10:70:18:fa:d4:4c:32:a0:16:
                    32:5c:ac:a0:81:37:96:30:0a:0b:9e:c7:17:3d:62:
                    e6:df:16:a9:3f:ed:ad:64:b5:62:0a:a3:33:fc:75:
                    0f:97:b4:e5:2e:6c:7f:9c:f8:ea:8b:2b:31:22:5f:
                    1b:08:55:23:4a:dc:b8:91:a8:06:0a:c8:6a:8d:91:
                    41:61:b4:f6:3a:47:35:09:03:2a:06:5d:23:07:09:
                    cf:61:fa:67:a0:d7:e1:cf:db:5b:23:d2:69:89:3a:
                    49:02:5e:a6:88:30:f4:f7:d7:59:7c:55:73:9e:f6:
                    d1:ee:ad:65:de:6e:a1:84:7a:9e:89:11:7f:6a:1b:
                    50:8a:47:2b:9a:ef:75:3c:4c:1a:90:14:87:3d:b2:
                    b5:60:b9:6d:86:a5:18:5b:74:30:8c:31:c6:5d:43:
                    1b:99:dd:c5:f3:0e:9e:52:2f:8b:1d:23:76:1d:5f:
                    cc:ba:85:5d:72:7e:4a:83:ed:aa:16:00:a4:7f:a0:
                    3e:3a:83:e9:3a:83:d4:31:a7:2f:75:18:61:ec:be:
                    90:bc:ca:2c:68:df:a3:47:c0:93:99:ef:fa:4d:f7:
                    ae:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D0:AA:E5:31:FF:46:FC:AD:9F:32:28:DC:70:85:07:C4:76:7C:C3
            X509v3 Authority Key Identifier:
                keyid:4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d2:8c:f4:09:5f:e0:6b:fa:aa:b6:2c:82:82:01:fb:a3:e0:
         fc:4e:6b:91:67:af:f0:ad:c8:7e:17:d1:e6:33:b5:ff:1c:10:
         db:28:fc:2f:d0:5e:9f:7f:4d:59:29:1f:c4:5b:e1:c9:43:f1:
         fa:f1:4d:80:89:13:f1:8d:5c:08:e6:b7:18:1c:84:0f:30:f9:
         50:6e:17:4d:ad:f7:bc:27:cb:0a:5c:9c:48:00:38:b5:f1:ba:
         2e:14:bd:73:75:7f:67:70:76:3b:4b:49:44:f9:02:6f:2b:d1:
         a9:51:3b:73:b8:9e:24:93:17:bd:74:ea:c3:c1:6d:fc:5e:b7:
         4a:98:f3:05:90:ec:66:db:ea:2e:c9:1e:30:87:fa:a0:ea:57:
         e9:46:37:18:2e:60:73:11:69:3e:b9:be:ad:2d:09:44:52:d3:
         d9:a9:97:c1:6c:ff:08:be:23:11:f8:52:b3:7c:4e:c8:03:f0:
         e8:d0:da:ad:1a:ae:43:3b:c6:2b:41:ac:79:20:f9:76:e0:9b:
         f6:bb:94:bc:72:3f:af:82:9e:84:f3:d0:07:48:3e:d6:47:40:
         91:77:bc:0d:4a:45:0b:3c:b6:49:4d:7c:1e:66:3f:b9:ab:83:
         43:08:ae:83:0f:4e:fc:43:c3:b4:1d:27:22:1c:38:83:c3:8f:
         f7:ca:aa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:10 2025 by rpki-client