Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File:                     2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier:          bnl0dx/r3x8DEx7V9ql04piQmuXDzMLzoczK0tduKD0=
Subject key identifier:   D9:95:27:9C:09:24:15:46:F8:05:F9:E4:65:81:3B:F6:FA:D1:56:44
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer:       /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial:       01A16F495C47BC4A992DB0899A3FD83B99C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number:          1253
Signing time:             Sat 24 Oct 2026 19:00:41 +0000
Manifest this update:     Sat 24 Oct 2026 19:00:41 +0000
Manifest next update:     Sun 25 Oct 2026 19:00:41 +0000
Files and hashes:         1: 2iDN05uSq0ol30Boqq292O8hl4w.roa (hash: /yvDilMky3xNO6oMx1wmAxjj1Dh8TVWdR92wXw9xSFU=)
                          2: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: 8rEQuV8V+218wfr4nWPyewui4LvXFCtveIjQP8SD0SA=)
                          3: UpZ-DRH2FLqKcZot9WnKKGPDaxI.roa (hash: Z2/3lO45yvIZPeXxsjAynXOHDKVBDLOjLTwLnTbPDbU=)
                          4: YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa (hash: 5xF+3ALjS9ETnu2nZD1BWStkHokbMoA1FcBVvhuzz4g=)
                          5: xlsFyDdwgZeZV5xnjDclge-AA8U.roa (hash: TXOJJRDjmANYnvqhNdlEFYN20qaFGtzeMxtt4daAeOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 19:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6f:49:5c:47:bc:4a:99:2d:b0:89:9a:3f:d8:3b:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
        Validity
            Not Before: Oct 24 19:00:41 2026 GMT
            Not After : Oct 25 19:00:41 2026 GMT
        Subject: CN=d995279c09241546f805f9e465813bf6fad15644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d2:5f:33:48:fd:17:85:95:4b:ac:e4:bd:50:
                    0a:03:0b:3d:fe:61:f3:3f:18:25:d7:25:d0:4f:58:
                    c6:a5:cc:94:14:db:c3:9a:e2:5d:cf:54:f7:a4:51:
                    b2:f7:b9:ae:3a:7e:51:7c:2e:9b:0d:29:b7:a5:0b:
                    e3:b5:cb:4f:54:1f:1b:fd:1c:cf:9e:1c:5c:dc:3d:
                    44:1a:4b:f3:b5:a6:c7:c7:0f:75:77:a1:0d:f3:58:
                    a5:41:9d:72:98:53:66:ef:c6:04:5f:2d:df:75:34:
                    ef:c5:2a:af:f7:f1:98:63:3a:15:f5:dd:9c:be:56:
                    5c:f0:b7:25:80:fb:4f:76:6e:90:35:55:53:f2:6a:
                    d5:a0:dc:e3:21:b9:c6:03:a8:70:97:9e:ea:cb:b6:
                    10:f0:1b:92:ac:c2:0e:21:09:20:0b:39:b2:ae:cf:
                    0c:90:2a:7f:d6:fe:c9:54:bd:fd:f9:fa:08:db:65:
                    3e:5a:49:d1:1f:e3:d6:55:cd:70:67:f3:46:4e:78:
                    4b:da:1e:b9:f8:9a:8b:db:7c:8e:18:07:75:80:17:
                    b2:8d:da:c7:71:a3:f0:fd:d4:0d:39:d0:0a:3b:e3:
                    37:47:e8:18:17:0e:7e:57:87:3d:fb:cb:dc:76:0d:
                    ad:b1:f3:aa:83:11:f8:03:e2:66:89:14:68:04:06:
                    98:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:95:27:9C:09:24:15:46:F8:05:F9:E4:65:81:3B:F6:FA:D1:56:44
            X509v3 Authority Key Identifier:
                keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:70:be:da:97:69:0f:50:92:1e:9a:7b:61:75:a1:01:90:69:
         0b:f9:c6:08:54:4a:2e:de:1d:42:35:10:3d:c4:83:32:81:a2:
         3f:33:e5:1d:47:7c:96:9e:4c:be:f8:0b:b3:75:27:de:89:47:
         55:da:9b:fb:21:b5:3d:17:eb:ad:26:46:fd:e6:ab:da:a8:fe:
         44:c4:0f:a3:d3:02:ba:83:04:9f:8e:b5:c7:be:71:2d:18:71:
         32:1e:d7:41:2a:fd:c3:7c:8e:bd:97:73:48:cd:cf:ce:b7:47:
         4d:ed:5c:f2:c6:a7:3f:b5:52:e7:b6:50:00:66:f7:e5:f5:f8:
         24:31:c1:9c:fe:ad:1d:cc:2c:b7:93:e9:05:77:0d:4c:c9:e3:
         2f:e0:c0:e8:c3:8d:26:8e:21:f4:d9:ed:0f:18:47:37:0e:0b:
         85:bd:80:40:2a:92:2b:bc:41:34:6f:44:ec:db:6a:ee:ab:f4:
         33:1c:51:42:84:ba:e2:0f:0a:99:a3:09:93:12:19:7d:82:27:
         d2:7a:4b:dd:33:c9:cf:5b:5c:c5:2f:5f:b8:82:d0:4d:03:8f:
         dd:f6:85:b7:e5:2e:f2:1b:ca:c6:cc:6b:2b:ff:7a:e0:78:1f:
         f0:39:dc:68:d5:66:65:a7:33:a7:8f:24:c0:fa:c5:19:e4:9c:
         73:0b:40:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:05:58 2026 by rpki-client