Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File:                     2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier:          hyzi/Il7u6Jj9oqK+OaKBzrF7smGRz1O1tQ605fCMsQ=
Subject key identifier:   B3:25:1F:1B:C6:90:57:59:6B:3B:E3:8E:3A:C7:A4:B8:50:D0:89:F4
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer:       /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial:       01A1697E1CB9935F11BD748B3B976F9FE12C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number:          1250
Signing time:             Fri 23 Oct 2026 16:00:34 +0000
Manifest this update:     Fri 23 Oct 2026 16:00:34 +0000
Manifest next update:     Sat 24 Oct 2026 16:00:34 +0000
Files and hashes:         1: 2iDN05uSq0ol30Boqq292O8hl4w.roa (hash: /yvDilMky3xNO6oMx1wmAxjj1Dh8TVWdR92wXw9xSFU=)
                          2: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: tMWhWbQvObdRTzcs6+xaEQFNQ4WhHuI0wnGGt/1MeIs=)
                          3: UpZ-DRH2FLqKcZot9WnKKGPDaxI.roa (hash: Z2/3lO45yvIZPeXxsjAynXOHDKVBDLOjLTwLnTbPDbU=)
                          4: YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa (hash: 5xF+3ALjS9ETnu2nZD1BWStkHokbMoA1FcBVvhuzz4g=)
                          5: xlsFyDdwgZeZV5xnjDclge-AA8U.roa (hash: TXOJJRDjmANYnvqhNdlEFYN20qaFGtzeMxtt4daAeOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 11:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:69:7e:1c:b9:93:5f:11:bd:74:8b:3b:97:6f:9f:e1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
        Validity
            Not Before: Oct 23 16:00:34 2026 GMT
            Not After : Oct 24 16:00:34 2026 GMT
        Subject: CN=b3251f1bc69057596b3be38e3ac7a4b850d089f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:30:db:ea:0c:b2:58:35:01:7b:21:85:f2:22:
                    92:2b:a8:9a:f5:0b:67:85:0e:88:20:2d:91:2c:3b:
                    4a:2a:64:5b:78:38:57:cf:0f:b0:fe:66:32:9b:a5:
                    98:df:d5:4e:b5:47:b0:3c:25:ef:0a:f3:dd:c5:bc:
                    64:d7:7d:bf:f9:de:12:4a:d0:ac:c9:85:74:db:22:
                    be:61:78:92:d8:61:05:25:8c:0c:e2:e3:93:64:a0:
                    28:25:b5:79:da:66:3f:0a:eb:1b:af:df:c0:ac:86:
                    d9:a0:19:d8:cb:f6:8d:e7:cd:43:0b:15:67:fd:c6:
                    f6:a3:95:1e:fc:2c:59:8e:69:4e:b2:08:2c:df:4c:
                    b0:f4:53:9c:d4:cc:fc:c1:57:66:61:2c:1f:62:c6:
                    a7:82:11:95:a8:cd:8f:8b:1d:8e:43:f2:0c:ac:e2:
                    65:7b:43:8e:81:20:c1:14:96:02:ae:c0:2f:5c:cb:
                    69:ea:8b:6e:ca:bb:a8:95:db:57:8d:55:c4:50:5e:
                    e4:64:92:7d:6d:5f:38:c8:92:c6:a3:4e:62:b6:4f:
                    36:6c:fb:99:62:dd:7f:82:78:df:31:97:4b:bd:6e:
                    2c:d8:73:c3:cc:94:8b:5e:2c:a2:7f:3a:cf:d2:8a:
                    d8:e4:98:37:00:28:39:3c:34:dc:b4:f6:11:b6:8d:
                    d2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:25:1F:1B:C6:90:57:59:6B:3B:E3:8E:3A:C7:A4:B8:50:D0:89:F4
            X509v3 Authority Key Identifier:
                keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ef:37:3d:ee:17:1e:98:65:f8:35:e0:78:41:e3:c4:8e:e5:
         17:ad:b6:e9:62:cd:69:b0:96:00:2a:90:b8:85:c5:8b:16:42:
         df:08:33:b4:be:2a:5f:f6:03:bd:78:ad:51:ef:ac:f7:25:b3:
         3e:d2:47:f1:85:e3:17:ad:bb:3f:ab:ea:c4:33:05:08:ec:f5:
         a7:a2:cd:27:5a:e5:d3:55:ac:04:19:f0:55:b8:82:8f:e9:36:
         a4:8d:dc:a6:d9:d3:39:9c:07:a1:e9:68:69:82:af:92:67:3c:
         57:c9:d2:70:f3:98:cb:18:b9:aa:e0:5e:3a:1a:59:80:f2:43:
         87:2d:0e:79:19:93:2e:86:d5:b0:8f:88:a5:0e:aa:7c:99:43:
         f8:41:f0:01:fe:06:77:08:84:cc:8b:82:ba:41:d8:45:61:24:
         8f:e0:58:7f:ee:ae:c1:97:6b:36:8a:52:1c:cb:70:d9:64:02:
         56:0b:84:c4:cf:33:ad:95:a8:e1:67:29:e0:57:90:bf:27:10:
         0b:75:2e:57:c8:41:43:d5:a4:d2:98:fb:e7:d8:07:b2:13:e3:
         e9:24:46:9a:e6:cb:5b:a3:b0:76:5b:d6:2f:23:fc:f5:6c:97:
         2f:06:16:7e:28:90:50:ac:0e:08:0c:3a:09:40:a6:b3:b2:fc:
         36:d4:5b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:35:23 2026 by rpki-client