Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
File:                     3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft (raw, json)
Hash identifier:          3hvRg06ddteQA9XF4Q8njwpzY727AKjz1A2SH89MnV4=
Subject key identifier:   A8:A7:22:E1:82:D6:2F:37:AE:3C:F2:F8:DD:3D:FE:BE:F2:54:32:04
Authority key identifier: DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64
Certificate issuer:       /CN=dcc50a2b974349948b04ee389b2a99d1754fb464
Certificate serial:       019D265F75711281293B80A5392C40AD6970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
Manifest number:          1462
Signing time:             Wed 25 Mar 2026 19:01:23 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:23 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:23 +0000
Files and hashes:         1: 3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl (hash: cq+ZUxkqk7KWPpT76m5Q1U9QwIRjYsq28qthdvIYLAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:75:71:12:81:29:3b:80:a5:39:2c:40:ad:69:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcc50a2b974349948b04ee389b2a99d1754fb464
        Validity
            Not Before: Mar 25 19:01:23 2026 GMT
            Not After : Mar 26 19:01:23 2026 GMT
        Subject: CN=a8a722e182d62f37ae3cf2f8dd3dfebef2543204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4f:e3:fa:51:45:80:80:65:36:03:7b:c8:20:
                    a8:96:41:3d:84:30:7c:e6:47:bd:d7:b9:a5:55:6d:
                    3f:12:73:3c:6e:7a:ba:f8:84:75:c1:78:33:ce:b7:
                    30:4f:25:04:ff:06:ba:20:db:ec:3b:64:0b:05:59:
                    0e:33:80:50:ec:e6:2c:25:55:fc:2d:78:ad:9b:27:
                    f6:12:58:b7:27:6c:d9:4d:be:01:5e:f2:4f:6a:ed:
                    b2:3a:2d:f3:90:30:92:2f:43:d9:01:1f:93:e1:09:
                    04:23:69:98:c8:de:93:ae:2a:c5:79:9e:0c:34:b0:
                    e8:8a:7b:22:d0:35:46:27:40:b6:01:20:5c:7f:e2:
                    14:d3:c6:0e:3a:f1:ce:13:6c:5b:51:5d:fa:29:3e:
                    de:73:9b:73:e6:e3:f9:92:86:61:40:e3:d5:6b:f4:
                    3b:9e:7d:88:42:d0:5c:46:97:e6:e9:20:d9:09:27:
                    0b:57:67:ea:3e:d8:42:a8:f2:fd:29:e0:79:ec:f8:
                    05:f4:8d:e1:5a:80:99:88:1a:2a:76:89:28:21:e8:
                    49:a8:5d:0f:5e:87:c8:a3:ea:99:5d:a7:f5:e2:4d:
                    de:cb:2a:03:13:b8:d4:99:bb:3a:e4:bb:4e:3b:dd:
                    27:55:8d:e2:5c:62:2f:dd:37:01:a9:9a:02:9b:6b:
                    c1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A7:22:E1:82:D6:2F:37:AE:3C:F2:F8:DD:3D:FE:BE:F2:54:32:04
            X509v3 Authority Key Identifier:
                keyid:DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:de:2d:2a:4f:de:de:62:6e:c4:3c:5d:58:a1:4b:00:d9:46:
         60:9d:11:51:82:ff:6d:b3:1c:55:78:ed:0f:8b:13:dc:44:15:
         db:45:11:f5:dd:df:b5:77:52:6e:4d:61:46:3c:69:94:06:27:
         fb:eb:74:2d:95:88:86:0a:1b:72:7e:e7:4f:5e:f8:32:49:f9:
         fc:31:73:32:6b:bc:94:cd:6a:cd:e7:db:56:f9:8f:99:f0:21:
         cb:68:8e:1c:95:b0:3d:a4:1c:f4:ca:84:03:e7:2e:a2:f2:d6:
         b7:32:bc:79:41:d3:e4:30:59:21:41:5e:2b:b5:db:5c:1c:3b:
         6a:cd:1e:d2:eb:65:be:a7:34:0f:c3:56:31:5e:f8:92:7a:40:
         24:70:b5:8a:66:06:1b:4f:65:8b:9b:27:85:c0:e3:57:72:dc:
         6e:06:d1:7e:af:47:b9:3f:05:71:42:3d:17:bc:d5:b6:f8:a5:
         76:de:e0:cd:91:af:b9:96:84:00:53:f0:da:49:73:43:f1:58:
         43:21:cf:84:91:ca:22:42:56:7d:e5:ab:bf:8a:45:1f:88:fa:
         91:19:bc:bd:24:fb:d7:34:89:ee:d0:37:1e:6c:99:ca:aa:74:
         69:fa:bb:60:ff:9d:8d:66:ba:f0:e6:0b:4e:ac:69:47:d0:30:
         c2:24:ad:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX3VxEoEpO4ClOSxArWlwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYzUwYTJiOTc0MzQ5OTQ4YjA0ZWUzODliMmE5OWQxNzU0
ZmI0NjQwHhcNMjYwMzI1MTkwMTIzWhcNMjYwMzI2MTkwMTIzWjAzMTEwLwYDVQQD
EyhhOGE3MjJlMTgyZDYyZjM3YWUzY2YyZjhkZDNkZmViZWYyNTQzMjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU/j+lFFgIBlNgN7yCColkE9hDB8
5ke917mlVW0/EnM8bnq6+IR1wXgzzrcwTyUE/wa6INvsO2QLBVkOM4BQ7OYsJVX8
LXitmyf2Eli3J2zZTb4BXvJPau2yOi3zkDCSL0PZAR+T4QkEI2mYyN6TrirFeZ4M
NLDoinsi0DVGJ0C2ASBcf+IU08YOOvHOE2xbUV36KT7ec5tz5uP5koZhQOPVa/Q7
nn2IQtBcRpfm6SDZCScLV2fqPthCqPL9KeB57PgF9I3hWoCZiBoqdokoIehJqF0P
XofIo+qZXaf14k3eyyoDE7jUmbs65LtOO90nVY3iXGIv3TcBqZoCm2vBWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKinIuGC1i83rjzy+N09/r7yVDIEMB8GA1UdIwQY
MBaAFNzFCiuXQ0mUiwTuOJsqmdF1T7RkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM01VS0s1ZERTWlNMQk80NG15cVowWFZQdEdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83MDcxNTgtZDFlMi00ZmNiLTgxY2It
NTk3OWQwMDQ4NmZlLzEvM01VS0s1ZERTWlNMQk80NG15cVowWFZQdEdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi83MDcxNTgtZDFlMi00ZmNiLTgxY2ItNTk3OWQwMDQ4NmZl
LzEvM01VS0s1ZERTWlNMQk80NG15cVowWFZQdEdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB94tKk/e
3mJuxDxdWKFLANlGYJ0RUYL/bbMcVXjtD4sT3EQV20UR9d3ftXdSbk1hRjxplAYn
++t0LZWIhgobcn7nT174Mkn5/DFzMmu8lM1qzefbVvmPmfAhy2iOHJWwPaQc9MqE
A+cuovLWtzK8eUHT5DBZIUFeK7XbXBw7as0e0utlvqc0D8NWMV74knpAJHC1imYG
G09li5snhcDjV3LcbgbRfq9HuT8FcUI9F7zVtvildt7gzZGvuZaEAFPw2klzQ/FY
QyHPhJHKIkJWfeWrv4pFH4j6kRm8vST71zSJ7tA3HmyZyqp0afq7YP+djWa68OYL
TqxpR9AwwiStRQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:21:28 2026 by rpki-client