Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
File:                     MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json)
Hash identifier:          hUwMBMnqRlzoT2m4do1wo2KuItlUYUNlOvw5M5wCAb4=
Subject key identifier:   34:53:59:5C:58:4B:BD:DC:E4:00:CE:FB:A6:8E:7C:CD:6C:52:1A:DE
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Certificate issuer:       /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial:       01A0EBC1355952DFE6DC4898269A2E53C1DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
Manifest number:          1554
Signing time:             Tue 29 Sep 2026 06:01:42 +0000
Manifest this update:     Tue 29 Sep 2026 06:01:42 +0000
Manifest next update:     Wed 30 Sep 2026 06:01:42 +0000
Files and hashes:         1: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: 0CGYaz+pTSVmdcu6gU8EbGWGigSlLgZkO60YU3RtlqU=)
                          2: YTJNsByK31dKM5wguVLetwL3nfw.roa (hash: UMxwu5ZNLao+ppm6r8CZGZ9AMab7Hqrre/Kz6fEyZKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:c1:35:59:52:df:e6:dc:48:98:26:9a:2e:53:c1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
        Validity
            Not Before: Sep 29 06:01:42 2026 GMT
            Not After : Sep 30 06:01:42 2026 GMT
        Subject: CN=3453595c584bbddce400cefba68e7ccd6c521ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:01:6a:f7:0f:36:91:25:e5:54:b5:41:63:6c:
                    a2:0e:7c:83:62:fa:b4:b3:87:9b:b5:ae:98:bc:0a:
                    44:5f:76:83:4e:a7:fa:82:58:bf:86:19:3d:e3:48:
                    82:16:d5:4e:48:3e:90:55:d1:32:a0:19:aa:7c:89:
                    e4:ac:5f:6c:85:70:be:91:a3:21:23:2e:f9:37:ed:
                    bf:d1:f0:7f:f2:36:6f:5b:7a:49:88:59:19:76:e1:
                    ff:62:ac:e3:d0:94:f3:48:e8:c6:c4:db:ab:72:a9:
                    c8:7a:01:f2:4c:b1:bc:80:51:f2:cc:1d:84:9e:e1:
                    1b:51:b7:9e:66:10:9e:75:4e:00:c7:fa:60:b8:b2:
                    6b:9a:71:55:7f:d5:a7:8d:b3:03:7f:ec:59:b8:4c:
                    3a:e6:7b:11:c9:b3:b5:d4:7a:67:7a:3d:d3:78:5b:
                    6b:20:3f:d0:f9:dc:fd:f8:48:9a:14:de:ca:c4:e8:
                    b9:1b:36:35:d8:d5:ea:8e:69:b3:c4:08:bb:aa:12:
                    28:27:bb:e4:d0:65:94:39:ed:df:f8:7d:20:ed:cf:
                    d7:d0:50:c5:e4:8f:5c:a3:59:ec:11:4a:63:1c:e3:
                    8f:ba:85:65:ef:3f:6d:dd:f3:65:aa:9e:1b:b3:00:
                    eb:8c:2b:8d:d3:b8:d5:be:6f:fa:42:6e:7e:30:8c:
                    d1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:53:59:5C:58:4B:BD:DC:E4:00:CE:FB:A6:8E:7C:CD:6C:52:1A:DE
            X509v3 Authority Key Identifier:
                keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c7:85:d4:00:66:67:14:26:9f:c0:e5:93:86:ab:69:60:aa:
         16:59:b4:d1:cd:38:68:5a:d1:89:83:20:94:88:03:45:11:30:
         b6:f1:e4:cf:4b:7b:6d:fa:39:a9:2a:32:a9:3c:15:e2:70:80:
         6e:b9:5f:c7:2d:28:82:cd:77:df:2f:e3:88:f1:c7:6d:85:a7:
         7a:91:21:8f:9a:ba:39:11:4b:86:9f:e1:76:91:2b:fb:cb:e8:
         f7:cd:1a:6a:29:88:04:a4:b8:8e:31:a6:76:db:ca:ae:15:5b:
         72:18:2a:4a:55:cf:17:94:2e:c9:38:51:52:f3:e7:6c:83:3d:
         d9:46:f6:3b:50:a3:ce:65:1f:7b:f4:5a:5f:e7:d4:43:25:df:
         a2:99:6e:29:08:bc:3b:71:38:68:d9:99:b3:c2:bb:45:66:3a:
         05:42:64:97:5e:4c:98:ca:c4:9d:3c:7e:30:3d:42:0c:7f:f8:
         0f:35:c1:c8:15:49:3a:19:be:50:f4:1f:a4:d4:5f:df:51:40:
         e3:0b:86:b7:4e:80:20:49:39:49:7a:cc:73:c6:6e:63:1b:3b:
         9b:f9:ee:30:6d:63:e8:f8:53:33:12:79:c5:52:aa:8a:68:8c:
         74:cd:02:53:26:03:ae:d7:37:7b:2d:5d:76:0a:fc:3f:c3:c2:
         57:a6:16:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:35:36 2026 by rpki-client