Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
File:                     muJTTfUJyW7LgRvIXXbWK6rfPSk.mft (raw, json)
Hash identifier:          cF0g0Pi0rUhmvYFmqP8ovqZ9wJ/5QW69DvuS956TFg0=
Subject key identifier:   47:CF:2A:66:FE:B8:F6:BD:95:24:02:8F:09:F1:44:DF:13:17:AC:6B
Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
Certificate issuer:       /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Certificate serial:       019D97E27DB5DB84A9C00A3E5EF0EFE5C6D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
Manifest number:          0CE3
Signing time:             Thu 16 Apr 2026 20:01:36 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:36 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:36 +0000
Files and hashes:         1: 4x1TKBz_BI-V4dj9yOWPflsgBy0.roa (hash: AEyQ4d3oKadVqU+q8qpPHgCbs4RI3Y80TBihfli8Oxo=)
                          2: muJTTfUJyW7LgRvIXXbWK6rfPSk.crl (hash: ivanh3ubL1q92c4rc8cEBWgcQ4wH43H7s0xCE9l3nkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:7d:b5:db:84:a9:c0:0a:3e:5e:f0:ef:e5:c6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
        Validity
            Not Before: Apr 16 20:01:36 2026 GMT
            Not After : Apr 17 20:01:36 2026 GMT
        Subject: CN=47cf2a66feb8f6bd9524028f09f144df1317ac6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:44:a5:a5:69:60:54:b6:81:e1:6b:36:20:72:
                    88:2f:49:af:c1:9f:19:53:24:91:ad:d0:b1:9c:e9:
                    50:a7:20:7b:33:85:8a:1a:b9:b7:3c:ad:f0:3f:ee:
                    d3:f0:e4:9d:06:3f:23:c5:e5:19:9e:ee:2d:b7:03:
                    cd:d8:92:a9:8f:27:06:77:3e:55:87:4c:14:51:45:
                    06:c9:84:2f:4c:ad:e4:3b:a7:cf:f6:e0:40:a6:f3:
                    de:f9:3e:c1:00:90:af:22:48:4e:2d:8a:1a:ec:eb:
                    dd:a5:b1:47:31:34:80:10:64:8f:20:1f:c5:08:2c:
                    4d:2b:39:6a:06:23:62:ca:9a:a3:ef:2e:f8:0f:d4:
                    96:45:84:c7:d3:d5:72:8f:da:10:05:4d:0e:2e:55:
                    c6:f0:10:8e:1a:df:e5:10:fc:b4:d3:f3:c9:7b:df:
                    e5:05:e4:9e:70:dc:1d:a8:bd:8c:7b:22:47:f0:6c:
                    5c:31:86:f2:1f:3f:35:c8:ac:9b:e5:12:ba:a5:88:
                    39:2b:4e:1b:e9:19:5c:6e:28:7e:db:b4:91:01:1c:
                    90:c5:42:79:bf:6e:bd:40:b9:10:19:60:45:8e:65:
                    a3:63:14:e4:6e:c0:16:32:d2:2b:fe:0d:ad:b8:0a:
                    3c:73:c7:87:82:a4:7b:9f:e3:4c:d8:0d:fb:11:d5:
                    2b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CF:2A:66:FE:B8:F6:BD:95:24:02:8F:09:F1:44:DF:13:17:AC:6B
            X509v3 Authority Key Identifier:
                keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:79:3c:ba:13:19:e4:3c:44:45:15:cd:98:b6:98:fe:2f:ba:
         11:ce:03:bb:1d:0b:d4:87:20:ef:d7:c2:f0:d9:78:8c:ae:8e:
         c4:c1:92:a9:90:df:d4:02:04:04:1c:ea:88:40:65:df:4c:c6:
         5c:db:c4:17:1c:92:b6:af:88:e0:24:36:39:8a:68:5f:af:9b:
         6f:f9:33:b5:e5:d0:73:04:19:09:eb:16:a6:b7:c1:f1:11:3f:
         fc:b9:e1:02:27:0f:3d:b3:47:32:b2:5b:32:cb:1c:39:8f:27:
         8f:10:dd:0f:65:5e:ba:ef:c8:f9:40:f7:16:79:c5:0f:97:ed:
         64:ba:c7:cd:e2:1a:aa:34:93:66:dc:de:be:8e:1b:bc:0c:61:
         1c:f4:7c:1c:24:54:03:1a:f6:1a:48:f1:a0:90:89:90:12:4d:
         d3:6c:f5:92:da:60:fb:39:a2:a0:17:10:8c:63:74:48:18:1e:
         df:d3:07:af:7d:05:91:82:d0:2a:af:9a:59:ff:bf:2d:6f:49:
         69:da:25:3e:bc:95:4c:d4:43:39:15:82:74:96:59:9d:d2:74:
         93:a5:7a:7d:f6:68:f6:63:49:2a:46:10:b0:4e:db:64:76:ae:
         2a:cd:f5:fc:c6:53:d2:3b:0f:0a:42:10:95:fd:14:9f:7f:53:
         7e:c0:90:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:12:53 2026 by rpki-client