Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
File:                     MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json)
Hash identifier:          tpDUviM+tGWDr6+vu9lLFZFsEJLvZ5DMhEH5RQq9GqQ=
Subject key identifier:   1B:48:EC:1B:8C:FB:47:24:34:A6:FC:F0:F0:46:AD:B1:0C:94:99:F7
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Certificate issuer:       /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial:       019EE82010BC4F9979B319B61488EF462006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
Manifest number:          1449
Signing time:             Sun 21 Jun 2026 03:01:15 +0000
Manifest this update:     Sun 21 Jun 2026 03:01:15 +0000
Manifest next update:     Mon 22 Jun 2026 03:01:15 +0000
Files and hashes:         1: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: FelZUHaN7bUtwRQgj1kqSTDFmP/vDZ3nKx00GryGhSs=)
                          2: YTJNsByK31dKM5wguVLetwL3nfw.roa (hash: UMxwu5ZNLao+ppm6r8CZGZ9AMab7Hqrre/Kz6fEyZKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e8:20:10:bc:4f:99:79:b3:19:b6:14:88:ef:46:20:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
        Validity
            Not Before: Jun 21 03:01:15 2026 GMT
            Not After : Jun 22 03:01:15 2026 GMT
        Subject: CN=1b48ec1b8cfb472434a6fcf0f046adb10c9499f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:5c:f5:5b:35:4d:f4:0a:ed:03:64:8f:22:
                    8f:6b:63:e5:1f:46:43:3d:cc:12:93:c5:bd:f5:0c:
                    81:ba:9c:48:c2:c0:79:3e:ee:43:2d:c4:92:cb:1d:
                    e0:e9:aa:38:6f:21:f7:78:57:75:5a:86:83:9b:6f:
                    c6:14:c5:75:a2:7d:94:c3:ff:e2:98:22:ea:4b:3b:
                    3a:19:7d:bd:4b:d6:dc:40:70:fb:9a:64:9f:33:f7:
                    97:22:90:ad:48:61:a4:e6:da:82:2c:bf:2f:61:7a:
                    9a:cc:b0:a5:d5:0f:4b:17:09:7c:3a:56:b0:60:7e:
                    9e:93:31:be:d6:92:36:15:5a:9e:4f:04:ff:0d:88:
                    ae:14:0e:71:0f:54:2d:fb:87:e9:88:25:58:9c:01:
                    15:1e:a6:f0:28:17:c3:1c:a2:16:b0:36:86:09:a5:
                    5e:e7:8e:1c:03:d2:44:47:87:98:dd:5a:9c:a9:0a:
                    2d:13:09:d1:8f:37:63:32:5d:a9:82:bd:64:22:8d:
                    57:31:93:48:54:c2:7e:16:dd:1d:89:9d:c2:71:53:
                    d8:bf:f1:7a:7d:e4:a2:10:0a:cb:c1:0f:28:28:af:
                    0a:fc:3d:29:b9:ba:72:ac:5f:2d:e4:67:ec:4d:00:
                    1b:3c:1f:a9:f8:35:b8:76:e6:56:60:e7:b3:a3:29:
                    88:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:48:EC:1B:8C:FB:47:24:34:A6:FC:F0:F0:46:AD:B1:0C:94:99:F7
            X509v3 Authority Key Identifier:
                keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:32:20:77:67:57:87:1e:32:81:7b:ab:d5:9e:63:61:67:18:
         bc:fd:97:d2:d4:b4:12:70:e5:ff:c5:9e:f2:70:11:31:bb:77:
         7d:3a:19:da:7a:6e:eb:56:b4:bd:7d:48:16:36:ce:1a:1a:e9:
         0f:7e:28:44:fb:ee:e5:02:4d:26:ce:1d:0c:01:43:b0:7e:d0:
         4a:98:e2:a8:44:16:82:18:3a:e1:58:10:7f:bd:9c:48:b6:bd:
         9c:63:00:a9:63:68:51:03:d5:cd:f0:8c:57:1e:18:f5:ad:12:
         65:b0:a3:8d:28:24:70:99:77:f3:06:95:2d:2d:a3:9e:0f:87:
         d3:e1:b0:14:81:cd:6f:62:3b:c8:6d:3d:e6:47:5a:ca:8f:36:
         60:0f:26:4f:dd:88:0d:35:2d:d1:32:20:a7:8b:81:46:c5:22:
         3d:03:ab:bb:74:04:c2:53:19:1a:42:64:dc:f3:5a:08:b8:e3:
         eb:a3:0e:49:6b:2f:81:28:e3:5b:b3:ac:12:59:74:e5:f0:b4:
         99:fd:21:95:c9:07:4e:f0:62:52:3d:d5:90:87:6c:f8:9d:8f:
         c2:82:7b:c1:b6:4d:c4:80:cb:21:81:f2:c6:46:82:11:d8:8d:
         ef:e4:34:7c:ea:ec:0d:4d:83:77:3e:18:a8:29:02:44:94:6d:
         25:b3:77:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:14:14 2026 by rpki-client