Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
File:                     3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft (raw, json)
Hash identifier:          GExAkwiuB4v8bVbfV9Lfe2yZRA/DBonwVEw9HP+GWZI=
Subject key identifier:   F0:F3:A5:AC:1C:7E:D4:60:FE:EE:D3:5A:98:98:97:18:D7:1F:F3:35
Authority key identifier: DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64
Certificate issuer:       /CN=dcc50a2b974349948b04ee389b2a99d1754fb464
Certificate serial:       019EBF236292004D9D7426303EFA76BEAF46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
Manifest number:          1537
Signing time:             Sat 13 Jun 2026 04:00:27 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:27 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:27 +0000
Files and hashes:         1: 1pc-CjhLBbFwVf4bOXj3j1DWnIQ.roa (hash: wh1zSA0tpiguUcPRs8vZ6i/k/SdwkoQBM6h8IpNKfLM=)
                          2: 3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl (hash: uc5XiYWoLfkJqrL9F/TNHQWyGlTau0JSNk3hsZzf2CA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:62:92:00:4d:9d:74:26:30:3e:fa:76:be:af:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcc50a2b974349948b04ee389b2a99d1754fb464
        Validity
            Not Before: Jun 13 04:00:27 2026 GMT
            Not After : Jun 14 04:00:27 2026 GMT
        Subject: CN=f0f3a5ac1c7ed460feeed35a98989718d71ff335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:da:3f:36:47:97:08:a9:9f:98:f6:13:c9:ba:
                    65:4e:07:a3:b9:91:18:80:ef:44:3b:3d:a3:05:03:
                    3b:9b:85:03:19:dd:2c:9e:f3:ec:94:07:93:56:bd:
                    7f:6f:f2:2b:6c:cf:60:fc:4c:8c:2d:b1:7d:20:35:
                    9f:74:a2:12:d7:46:18:ec:00:1b:e8:4b:ab:85:5b:
                    58:57:37:50:55:5d:d9:58:3d:17:5c:30:36:2b:78:
                    6a:c2:95:8b:35:60:87:25:64:05:e3:c5:f3:9d:3c:
                    c6:04:db:d5:1b:82:93:ec:7c:91:32:95:07:33:ab:
                    df:d4:4a:7e:6e:f4:d2:51:7a:57:b0:ea:94:0d:ed:
                    96:4d:91:68:63:c5:79:27:3f:dd:bc:d6:db:c8:74:
                    97:47:95:ce:0e:45:2b:e0:08:6e:23:8c:14:36:3a:
                    73:cd:63:5a:61:69:dc:d5:eb:3e:d6:a5:de:47:bb:
                    5d:bd:3b:24:53:72:fa:14:ff:3b:c9:cd:2b:a7:9f:
                    04:de:2b:bf:11:ef:d0:1d:8b:ab:1a:4e:85:8d:33:
                    32:be:04:27:f7:18:0b:18:97:75:1b:6f:aa:9e:52:
                    63:e2:a8:93:5e:b4:1a:95:f8:43:cc:31:1a:ee:15:
                    e3:a1:78:aa:8b:32:69:a7:b3:33:2a:f2:d4:0f:06:
                    39:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F3:A5:AC:1C:7E:D4:60:FE:EE:D3:5A:98:98:97:18:D7:1F:F3:35
            X509v3 Authority Key Identifier:
                keyid:DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:de:5e:58:70:e1:91:fd:b7:fd:bf:28:fa:90:87:f8:d0:68:
         12:f0:8b:1b:c6:9c:c5:52:a1:d2:b5:0b:86:c3:13:e0:04:27:
         79:67:5a:06:76:cc:cd:2d:32:03:fa:1c:80:ee:1a:30:44:16:
         45:7a:68:5a:ee:c1:6c:14:40:79:c9:7b:d2:19:eb:fe:f4:80:
         93:b1:c6:43:8c:fd:b0:aa:23:05:72:7d:d0:95:05:24:86:31:
         c0:20:c7:c8:31:50:26:47:eb:6e:9b:37:df:df:23:4f:c9:f6:
         34:cb:2f:3b:54:52:ab:70:46:6d:d3:f4:b7:62:c0:48:5e:13:
         da:4c:0e:54:ce:44:56:81:c4:db:a3:73:d5:e3:cc:7f:5f:99:
         8d:7d:86:57:74:51:f2:21:0e:30:00:fc:5c:10:a7:45:c0:da:
         1a:f0:3b:b0:8a:08:6d:84:b7:74:c9:1d:c9:5c:1c:99:a7:c3:
         5b:a8:83:ac:e8:1a:52:e9:e1:d3:01:86:04:3d:7b:67:c1:75:
         49:cd:f7:c2:ea:e8:fd:d9:5b:42:62:d9:11:d5:32:84:90:12:
         ef:18:0d:26:6d:ca:02:7b:e2:fe:7c:81:78:79:a0:e9:99:d9:
         5d:73:bb:91:9d:43:2b:77:93:9f:4c:1e:fe:7d:da:3d:70:46:
         2b:f1:7e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:01:08 2026 by rpki-client