Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
File:                     MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json)
Hash identifier:          A71tLW23s2nK9HzcS7Ed1RcfHd0kyga3Z2su/eIXzoU=
Subject key identifier:   61:7B:C9:12:88:26:3B:B7:95:A8:6B:C0:8D:A6:6E:E0:E0:56:5C:DD
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Certificate issuer:       /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial:       019D9818562874760D1B32ABD1F9E341E170
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
Manifest number:          139B
Signing time:             Thu 16 Apr 2026 21:00:24 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:24 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:24 +0000
Files and hashes:         1: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: LL9One+4PEGMZMhavRmOAwnxToDhPlHFxPQBwb528kE=)
                          2: YTJNsByK31dKM5wguVLetwL3nfw.roa (hash: UMxwu5ZNLao+ppm6r8CZGZ9AMab7Hqrre/Kz6fEyZKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:56:28:74:76:0d:1b:32:ab:d1:f9:e3:41:e1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
        Validity
            Not Before: Apr 16 21:00:24 2026 GMT
            Not After : Apr 17 21:00:24 2026 GMT
        Subject: CN=617bc91288263bb795a86bc08da66ee0e0565cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8d:e8:3f:b6:6a:1b:7e:3d:e8:a5:53:3b:19:
                    80:4a:47:32:ee:49:ed:5c:33:5e:3e:66:4e:5e:4d:
                    51:92:cd:4b:4e:b0:bb:88:59:5f:99:37:4b:88:63:
                    ab:b9:34:c9:c1:a9:9f:39:88:07:22:18:2f:ca:93:
                    7b:b5:91:15:9c:9c:c9:0e:1e:fb:5c:75:89:1c:45:
                    32:39:bd:fb:e3:c6:6b:df:43:3f:fe:93:5f:d4:52:
                    d0:3b:07:ea:d1:f8:22:1a:b6:70:f2:7e:48:8a:57:
                    6f:b4:08:40:54:eb:50:4e:02:76:83:81:9e:39:f4:
                    2b:bd:d3:c9:68:c2:2c:d1:ef:f4:c7:9e:2f:47:e4:
                    0e:fb:b5:4c:86:01:fd:87:88:df:6e:0b:86:8d:26:
                    ba:2e:e6:42:ac:7f:a9:8c:da:ba:0b:3c:63:fc:9b:
                    88:33:60:b1:d5:ce:31:e2:0d:d0:b2:12:85:80:9e:
                    9f:98:4f:60:77:42:6b:a8:46:34:17:9b:d5:51:d0:
                    fc:0f:87:e5:61:c3:1a:60:c4:e2:7b:51:d7:bf:5e:
                    06:4e:1c:cd:cf:8a:de:d5:bb:6f:03:3d:75:85:86:
                    71:6d:da:ce:a2:ce:4f:01:c8:dc:5d:4b:42:b1:b8:
                    cb:07:f6:43:87:d2:8c:7b:25:73:59:df:e1:8d:ac:
                    99:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7B:C9:12:88:26:3B:B7:95:A8:6B:C0:8D:A6:6E:E0:E0:56:5C:DD
            X509v3 Authority Key Identifier:
                keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ee:57:24:eb:f4:6f:07:2b:72:44:d9:86:a2:d6:da:fc:95:
         8f:ca:4f:2a:8a:2f:d0:7a:14:9d:71:66:f8:ae:ad:ed:61:af:
         4c:65:36:cb:18:80:87:85:2f:95:f5:f6:4c:07:51:33:fe:32:
         36:ca:b0:4c:7e:30:bd:b0:87:f5:8b:f8:94:b4:ca:34:58:bf:
         8c:59:09:83:2f:da:bc:2e:04:62:ce:44:3d:a9:c3:f8:3b:c8:
         da:f0:a7:b6:3e:3a:68:0b:92:44:4b:59:8c:af:b3:8e:20:0b:
         c2:40:b8:0a:12:b7:24:1e:95:ca:d2:19:58:b8:d1:c7:f6:d1:
         e4:69:e5:30:1b:f0:65:c4:81:7c:d4:8e:ec:01:3b:01:c7:6c:
         ad:09:5a:dd:06:59:eb:e4:97:d4:90:3d:be:c0:05:c7:2b:7d:
         d1:a6:23:e1:0b:84:4d:a4:2f:95:b4:35:26:b3:ff:b6:ff:cf:
         54:0c:a8:0e:70:5c:6a:57:14:c4:d8:fd:47:34:29:45:05:ba:
         e5:55:27:94:79:85:29:6d:82:be:6c:8e:67:04:00:55:86:dc:
         7c:8e:bc:26:62:71:89:71:e2:d1:ab:ed:4b:9c:cf:63:22:fc:
         83:e9:96:b8:48:e2:3f:75:3e:a7:fb:d7:96:1d:28:82:06:0c:
         32:d4:42:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:53 2026 by rpki-client