Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
File:                     3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft (raw, json)
Hash identifier:          VIER2lNXhy0E7gXxLd+bQaw2CBeHMrhYPPxNu8pOeQ8=
Subject key identifier:   C2:7D:BC:61:D1:4F:D6:9A:04:E1:A4:45:86:2C:94:18:3A:1F:17:E8
Authority key identifier: DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64
Certificate issuer:       /CN=dcc50a2b974349948b04ee389b2a99d1754fb464
Certificate serial:       01A0D42692C4398A0C76CD5E88A75F9C249B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
Manifest number:          164B
Signing time:             Thu 24 Sep 2026 16:01:32 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:32 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:32 +0000
Files and hashes:         1: 1pc-CjhLBbFwVf4bOXj3j1DWnIQ.roa (hash: wh1zSA0tpiguUcPRs8vZ6i/k/SdwkoQBM6h8IpNKfLM=)
                          2: 3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl (hash: HsL4IDChgCD9/zqVvrMC5RcsYelVOfj9brhiAW/VUmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:92:c4:39:8a:0c:76:cd:5e:88:a7:5f:9c:24:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcc50a2b974349948b04ee389b2a99d1754fb464
        Validity
            Not Before: Sep 24 16:01:32 2026 GMT
            Not After : Sep 25 16:01:32 2026 GMT
        Subject: CN=c27dbc61d14fd69a04e1a445862c94183a1f17e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:29:1c:d8:04:3f:8e:4a:c5:af:cb:36:48:a7:
                    ae:77:88:e7:10:95:6a:24:e1:e1:52:13:50:79:68:
                    a3:d9:92:95:4f:86:07:1d:f8:00:be:66:96:7e:e0:
                    91:68:6b:6b:78:3f:18:cf:84:99:2b:8a:c6:4a:bc:
                    30:b0:c7:bb:be:ae:fc:05:0c:08:9b:fc:ac:9b:da:
                    f3:02:f8:06:d6:fe:8a:93:ed:53:ce:32:69:1a:95:
                    77:62:93:3a:19:07:2c:c0:97:4c:08:3d:b2:af:a6:
                    37:4c:dd:93:d8:7b:c1:d3:49:a2:95:89:42:e4:84:
                    db:59:17:3c:72:0b:04:85:06:53:e6:02:b1:c4:eb:
                    ef:77:91:fb:72:79:be:5a:a9:00:02:d8:73:ef:63:
                    11:33:b3:28:d3:23:a4:5b:38:26:fc:18:94:8c:0c:
                    a5:37:0a:e9:25:1e:09:9a:a7:7d:88:92:30:0a:cb:
                    fb:4d:67:7e:28:32:5e:75:00:00:cc:b5:9e:e6:3d:
                    71:4b:ec:f3:fd:a5:e8:86:48:cb:53:79:ad:2a:9c:
                    90:93:bc:9d:44:1d:23:98:bb:57:c1:25:3b:d5:6a:
                    8c:f3:b1:50:fb:e3:e4:66:0f:f2:49:c4:dc:07:a6:
                    3b:79:c6:50:e7:e5:de:a5:da:a4:03:4a:d9:0e:62:
                    96:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7D:BC:61:D1:4F:D6:9A:04:E1:A4:45:86:2C:94:18:3A:1F:17:E8
            X509v3 Authority Key Identifier:
                keyid:DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:71:7d:53:55:21:05:13:2d:83:3f:c4:63:bf:4f:b9:4b:98:
         4b:c6:89:1b:0c:da:e4:05:5b:10:00:eb:e3:db:a1:12:48:2b:
         94:de:53:05:01:81:5e:74:24:c2:ec:0a:e3:7e:ff:30:94:d5:
         9b:c2:0a:4f:a0:08:89:f2:47:ae:33:43:bc:25:86:35:77:d5:
         2d:c9:fd:7b:c3:66:bf:81:38:11:d8:6f:37:4d:6e:93:82:bd:
         52:78:3d:32:b8:71:c0:4d:4e:cc:33:ee:3f:04:6a:71:52:81:
         7f:1b:e4:6e:fc:a7:6d:d4:91:fa:92:16:ff:50:07:54:a9:74:
         7b:46:f0:b5:a2:4c:c3:88:46:b2:a6:ab:06:4f:29:5e:7f:6f:
         45:6e:0f:8a:d3:7a:a0:91:3e:8e:29:b8:4d:73:48:ac:3b:8e:
         16:bf:26:e6:0c:a9:77:bb:ef:3a:ca:4b:9e:66:10:2d:31:d1:
         cd:cd:9d:53:5c:c9:b9:cf:01:cc:bc:8f:75:96:0d:60:10:5c:
         88:dd:20:b4:36:9b:36:e2:a8:cd:40:eb:59:df:a8:81:c1:17:
         45:64:68:25:77:a0:97:df:af:76:93:46:fc:d2:cf:87:3c:52:
         1a:00:55:d9:0c:03:b0:09:49:8b:be:5e:4d:26:6b:4e:bc:93:
         02:84:b2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:04:20 2026 by rpki-client