Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
File:                     MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json)
Hash identifier:          eN+QkBtlItRiK8YDSSRLw8xB6gLHCtE3BmkeqhXq0aE=
Subject key identifier:   1B:D3:57:52:DE:0F:44:22:A7:44:7B:A3:A6:29:CB:43:3D:C1:DB:CF
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Certificate issuer:       /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial:       019FAD1B1783AD26CF3D2398D953CFB931A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
Manifest number:          14AF
Signing time:             Wed 29 Jul 2026 09:01:01 +0000
Manifest this update:     Wed 29 Jul 2026 09:01:01 +0000
Manifest next update:     Thu 30 Jul 2026 09:01:01 +0000
Files and hashes:         1: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: jNnsEZdWmucdSoSePewX7W80hZRtiSDQ7vv/pAhnirw=)
                          2: YTJNsByK31dKM5wguVLetwL3nfw.roa (hash: UMxwu5ZNLao+ppm6r8CZGZ9AMab7Hqrre/Kz6fEyZKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 09:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:1b:17:83:ad:26:cf:3d:23:98:d9:53:cf:b9:31:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
        Validity
            Not Before: Jul 29 09:01:01 2026 GMT
            Not After : Jul 30 09:01:01 2026 GMT
        Subject: CN=1bd35752de0f4422a7447ba3a629cb433dc1dbcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7e:0f:7c:4c:69:0b:4b:3a:d3:9c:13:24:c3:
                    82:c4:ae:6a:17:14:67:eb:66:be:e6:2e:a4:59:85:
                    d3:63:41:39:7d:11:fa:24:3a:07:f4:70:d9:d5:a7:
                    a2:dc:2b:6c:3c:e8:2d:53:78:88:0d:37:fd:00:6e:
                    22:3c:28:18:e5:5b:34:16:80:73:84:ee:e1:86:f4:
                    4d:a5:1a:73:b4:cb:da:e2:f5:b7:8d:c6:20:7a:bc:
                    6d:5b:a2:fd:05:6b:a8:b3:d6:4a:fb:71:ee:09:b0:
                    b7:cb:15:ad:54:fd:68:77:ff:3d:c0:41:2f:03:98:
                    72:f8:48:6c:b5:b1:9a:32:45:06:3d:84:87:9f:bf:
                    fd:a4:7d:0d:42:c8:48:d3:20:21:8e:42:ef:6b:a0:
                    ce:c6:5d:e5:ac:e2:e8:96:df:d3:45:b6:e4:ea:fb:
                    21:ac:27:0b:92:19:03:3b:0e:0b:9c:1f:85:da:34:
                    e1:6e:8f:c8:87:0c:d7:a2:13:d0:4b:f4:34:d0:17:
                    7a:ff:c6:cc:22:46:fe:27:31:55:ce:41:4c:3e:1f:
                    6e:63:f6:24:c2:9f:94:90:56:7e:cf:61:86:bd:2f:
                    df:1d:ad:a9:14:fb:eb:2a:52:71:d9:bc:32:46:f7:
                    49:81:de:71:50:3a:95:34:7d:77:40:07:b8:93:fb:
                    eb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D3:57:52:DE:0F:44:22:A7:44:7B:A3:A6:29:CB:43:3D:C1:DB:CF
            X509v3 Authority Key Identifier:
                keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:dd:3a:76:83:47:34:30:11:c7:13:fd:28:2b:09:bb:eb:7e:
         db:97:c8:c7:c8:33:93:ef:af:e0:09:d5:31:ee:e2:38:8b:0f:
         6e:cb:ba:33:46:bc:90:90:0c:3a:74:1c:d2:5f:aa:08:03:de:
         d0:e0:c6:a2:f1:fe:ea:dc:33:f4:ed:25:fe:5d:57:83:f7:3d:
         fd:cf:9f:d4:7b:9f:5b:27:fc:c1:8a:ef:40:3a:ba:a5:2b:1a:
         ee:4f:a8:b7:42:e1:0d:b1:7f:3d:8d:75:75:6e:d4:73:1a:04:
         39:80:28:d8:90:fc:d1:48:e3:e0:2f:0a:03:f4:44:c7:7d:55:
         99:d5:20:e2:7c:18:91:d3:15:eb:b3:e0:88:1d:97:b9:63:22:
         bf:34:21:b3:77:57:88:b2:4e:15:aa:6d:a1:68:45:03:5d:fb:
         4b:40:88:8a:21:3a:8e:81:ad:c6:79:1b:da:e4:f6:70:47:0a:
         5a:c3:d5:e5:c9:5e:25:e3:04:63:24:e7:44:cc:aa:29:0c:c9:
         ea:67:9c:b7:6c:ec:e0:41:27:20:46:89:8f:9b:10:b7:a6:fd:
         bc:a7:99:25:e4:07:68:9b:ea:0e:1c:ef:0a:e0:e5:eb:0c:0e:
         8f:25:61:47:c1:c8:34:98:2c:c5:b5:db:72:da:44:76:d6:85:
         2e:a4:b4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:02:07 2026 by rpki-client