Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File:                     2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier:          J1X8OSKV0f8aVAzSEXx7RCmaL/rmvWSlQY/3ciiiDH0=
Subject key identifier:   74:DC:CE:2A:1F:7D:DF:6E:07:C2:5F:80:60:DE:24:02:AB:7F:67:AA
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer:       /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial:       019C7E5C176BB199C92BE79821BAC160FA7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number:          0FC4
Signing time:             Sat 21 Feb 2026 04:01:30 +0000
Manifest this update:     Sat 21 Feb 2026 04:01:30 +0000
Manifest next update:     Sun 22 Feb 2026 04:01:30 +0000
Files and hashes:         1: 2iDN05uSq0ol30Boqq292O8hl4w.roa (hash: /yvDilMky3xNO6oMx1wmAxjj1Dh8TVWdR92wXw9xSFU=)
                          2: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: Znf+8/KhEqMbIB1Be/tsOnTVIkIMoGQSlj2ChB08jhE=)
                          3: UpZ-DRH2FLqKcZot9WnKKGPDaxI.roa (hash: Z2/3lO45yvIZPeXxsjAynXOHDKVBDLOjLTwLnTbPDbU=)
                          4: YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa (hash: 5xF+3ALjS9ETnu2nZD1BWStkHokbMoA1FcBVvhuzz4g=)
                          5: xlsFyDdwgZeZV5xnjDclge-AA8U.roa (hash: TXOJJRDjmANYnvqhNdlEFYN20qaFGtzeMxtt4daAeOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Feb 2026 00:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:7e:5c:17:6b:b1:99:c9:2b:e7:98:21:ba:c1:60:fa:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
        Validity
            Not Before: Feb 21 04:01:30 2026 GMT
            Not After : Feb 22 04:01:30 2026 GMT
        Subject: CN=74dcce2a1f7ddf6e07c25f8060de2402ab7f67aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:70:c9:93:22:93:92:78:5b:79:a7:c3:e2:21:
                    37:ed:a1:bb:3d:14:e5:a7:37:65:50:e2:f6:6a:cc:
                    f6:b2:bf:93:36:fd:df:ea:be:e2:0c:72:ea:56:5c:
                    b7:3f:a5:81:bb:65:be:b1:6a:ce:ee:3b:9f:2c:47:
                    9d:bd:e1:b5:90:c7:64:78:e5:92:f3:2c:e0:78:87:
                    a6:ab:18:c1:fc:00:9e:7c:13:3e:4a:7f:27:57:25:
                    ab:5f:b2:d9:55:85:e1:42:67:fa:83:5c:a2:58:65:
                    13:93:d2:4a:fb:07:c5:df:14:53:3b:d1:e2:62:a7:
                    c1:d5:3c:ab:f4:e3:56:b0:cb:12:94:cd:43:fa:97:
                    a5:c5:ca:fa:d9:ea:19:b8:a7:41:fb:e0:73:6a:de:
                    09:b4:bf:de:b7:23:cd:1e:1c:b1:aa:1b:3b:7a:17:
                    46:94:00:78:72:73:03:6e:f9:d1:88:05:aa:02:41:
                    42:18:af:36:99:2e:2d:8a:c6:ac:a7:6b:77:8e:ee:
                    67:f9:c2:91:c8:2d:47:2d:e9:e8:6c:e9:aa:a3:b0:
                    34:26:18:e0:ca:c0:f5:84:ae:9a:0f:73:14:26:38:
                    b3:3e:3a:74:9a:e9:ee:0c:68:51:84:c8:d6:da:65:
                    56:ae:4b:7e:e8:57:74:4b:1c:4f:ff:52:1c:6a:e2:
                    9e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DC:CE:2A:1F:7D:DF:6E:07:C2:5F:80:60:DE:24:02:AB:7F:67:AA
            X509v3 Authority Key Identifier:
                keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:46:cb:4a:ac:24:ac:23:b8:7d:60:da:09:1a:b6:c6:c9:91:
         0e:40:8a:82:17:d3:32:f3:be:56:63:a3:f7:21:e6:a1:94:a5:
         b7:9e:cf:78:75:f8:f3:a9:4d:4b:66:5a:33:e8:92:8f:22:8e:
         f7:e5:4e:24:26:e8:bf:e8:04:c7:16:8b:e9:5b:48:28:1e:89:
         46:51:df:79:c8:c3:c7:46:a3:33:b2:e4:66:af:4d:1f:0d:a0:
         95:07:00:40:a4:4e:f8:0c:70:8e:ba:66:ff:4d:e8:22:2c:b8:
         0c:91:3c:41:3a:69:d0:a6:17:8b:06:76:92:b5:60:f4:14:08:
         a9:1f:bf:f1:2c:60:72:48:32:f9:e0:9b:13:08:c0:58:cd:e8:
         35:1c:af:e4:17:e5:0a:99:d6:82:cc:4b:cb:61:c0:d7:96:1a:
         87:d5:e4:83:42:ba:f8:2c:12:92:9a:55:29:73:18:7b:b8:1d:
         bd:a8:09:9d:55:1a:eb:e6:0e:f3:25:2b:d9:92:a3:6d:c4:ed:
         5a:df:76:68:b7:3c:71:15:fb:df:11:19:f6:35:20:3c:5d:c5:
         17:a6:9d:62:26:ea:1b:29:81:ab:71:14:28:bf:2d:58:e1:c2:
         43:ff:53:1c:6d:3b:e3:98:0e:21:78:b7:92:37:23:e4:9c:c6:
         5a:78:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 06:07:25 2026 by rpki-client