Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
File:                     MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json)
Hash identifier:          M42u1bEjHAEJdBMAcVoKdxnSaXXyuLntMKUaL/ohF/I=
Subject key identifier:   90:34:3C:D5:76:B2:7C:E1:D8:55:81:2C:EB:E4:53:AE:84:C7:FF:47
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Certificate issuer:       /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial:       019F94000F275C80365C5C19D9A70B76543C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
Manifest number:          14A2
Signing time:             Fri 24 Jul 2026 12:00:59 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:59 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:59 +0000
Files and hashes:         1: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: js1KuDPEX48PQiVdscnd6AReCNbS4QVM7VOcz964iBg=)
                          2: YTJNsByK31dKM5wguVLetwL3nfw.roa (hash: UMxwu5ZNLao+ppm6r8CZGZ9AMab7Hqrre/Kz6fEyZKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 12:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:00:0f:27:5c:80:36:5c:5c:19:d9:a7:0b:76:54:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
        Validity
            Not Before: Jul 24 12:00:59 2026 GMT
            Not After : Jul 25 12:00:59 2026 GMT
        Subject: CN=90343cd576b27ce1d855812cebe453ae84c7ff47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9f:90:57:8a:70:a2:91:be:83:0e:1a:25:e2:
                    4c:5f:c9:be:42:ec:e2:51:67:f7:74:3b:b7:6e:8f:
                    5a:06:32:61:32:ac:5f:ac:4a:3e:f4:87:9a:db:9c:
                    a4:af:69:91:d8:82:9c:ef:7a:27:fa:16:f9:d4:64:
                    b6:af:5a:dd:98:38:07:88:f0:23:fe:89:9f:b0:bf:
                    c4:95:7c:63:8e:04:bd:05:91:ff:c2:23:46:28:05:
                    1d:11:a0:e5:fe:8a:5b:9c:75:2f:d7:b2:b8:dc:37:
                    3c:7f:31:bc:db:f4:17:75:8f:10:d6:67:09:b0:6c:
                    30:fd:e6:98:be:61:1b:91:cf:ad:09:9e:0d:08:05:
                    79:fe:97:2e:d6:8c:82:40:14:7b:06:4b:7b:a7:78:
                    6e:1e:fd:40:dc:ed:79:ad:99:01:e7:e1:19:99:67:
                    82:23:86:bd:40:5e:1e:ab:e8:08:5b:57:ea:5a:65:
                    20:fa:19:fe:61:65:09:c3:10:ba:e4:59:60:04:d9:
                    2d:13:ae:35:44:b9:b2:b9:65:9e:60:18:28:31:f0:
                    94:5d:51:4d:74:ff:f5:97:63:d0:3f:e7:e5:ae:4e:
                    ae:98:f0:e7:dd:49:06:13:b1:90:72:f5:83:2e:3f:
                    9a:d1:5d:e5:32:6e:5c:56:3d:52:87:61:ae:97:2d:
                    2c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:34:3C:D5:76:B2:7C:E1:D8:55:81:2C:EB:E4:53:AE:84:C7:FF:47
            X509v3 Authority Key Identifier:
                keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:36:3e:8d:86:a4:d8:a3:a6:a7:aa:0a:c2:e0:45:df:d9:cd:
         2f:d5:4c:0a:f9:a9:3d:9c:16:15:08:77:6b:dc:be:0f:3e:17:
         52:cf:46:2b:26:1c:09:0e:99:c6:31:ba:19:f3:11:a0:46:79:
         6a:5d:46:51:d9:1c:4b:e4:c2:13:a3:79:61:08:0b:a6:13:b4:
         dd:8b:89:97:55:f1:3c:98:98:9f:56:5a:97:14:d3:0d:0b:36:
         8e:2b:79:28:e7:c5:af:94:53:a1:7f:6c:cc:80:07:68:ce:4e:
         77:72:4b:6f:f9:79:fa:df:d2:c3:05:de:4d:a7:44:64:7a:32:
         01:16:fc:d4:f4:e6:8c:a8:df:f3:78:3b:16:8a:e2:a6:d2:0b:
         ae:ec:0c:ca:38:b9:60:e0:2a:af:65:99:97:e6:e7:c9:5e:47:
         58:6e:31:c1:dd:8f:02:8d:0b:96:1c:70:34:33:a6:d6:e5:17:
         6f:8f:79:1e:e9:e0:ae:92:be:e1:f2:33:76:80:e4:bb:11:bf:
         65:bc:94:7e:db:57:dc:2c:7b:98:a0:a8:6a:04:75:28:f3:d0:
         66:d9:03:c0:54:94:07:71:48:2c:72:87:e7:ce:76:92:c2:0b:
         04:e4:aa:6c:50:49:03:20:df:61:7b:4c:42:31:74:cf:3b:44:
         56:13:58:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UAA8nXIA2XFwZ2acLdlQ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZTY1ODUxNWIxZTZhNzJiOTlmMzMyNjY5ZTA2OWU2MTU0
ZjcwZGQwHhcNMjYwNzI0MTIwMDU5WhcNMjYwNzI1MTIwMDU5WjAzMTEwLwYDVQQD
Eyg5MDM0M2NkNTc2YjI3Y2UxZDg1NTgxMmNlYmU0NTNhZTg0YzdmZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ+QV4pwopG+gw4aJeJMX8m+Quzi
UWf3dDu3bo9aBjJhMqxfrEo+9Iea25ykr2mR2IKc73on+hb51GS2r1rdmDgHiPAj
/omfsL/ElXxjjgS9BZH/wiNGKAUdEaDl/opbnHUv17K43Dc8fzG82/QXdY8Q1mcJ
sGww/eaYvmEbkc+tCZ4NCAV5/pcu1oyCQBR7Bkt7p3huHv1A3O15rZkB5+EZmWeC
I4a9QF4eq+gIW1fqWmUg+hn+YWUJwxC65FlgBNktE641RLmyuWWeYBgoMfCUXVFN
dP/1l2PQP+flrk6umPDn3UkGE7GQcvWDLj+a0V3lMm5cVj1Sh2Guly0stQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJA0PNV2snzh2FWBLOvkU66Ex/9HMB8GA1UdIwQY
MBaAFDLmWFFbHmpyuZ8zJmngaeYVT3DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzIt
NjdmOGU3ZDExMzdjLzEvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzItNjdmOGU3ZDExMzdj
LzEvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjY+jYak
2KOmp6oKwuBF39nNL9VMCvmpPZwWFQh3a9y+Dz4XUs9GKyYcCQ6ZxjG6GfMRoEZ5
al1GUdkcS+TCE6N5YQgLphO03YuJl1XxPJiYn1ZalxTTDQs2jit5KOfFr5RToX9s
zIAHaM5Od3JLb/l5+t/SwwXeTadEZHoyARb81PTmjKjf83g7ForiptILruwMyji5
YOAqr2WZl+bnyV5HWG4xwd2PAo0LlhxwNDOm1uUXb495HungrpK+4fIzdoDkuxG/
ZbyUfttX3Cx7mKCoagR1KPPQZtkDwFSUB3FILHKH5852ksILBOSqbFBJAyDfYXtM
QjF0zztEVhNYww==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:24 2026 by rpki-client