Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File:                     2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier:          2N7mkETL/jCE4v4liCotNwEjVkfoydbw0sfrIf53N90=
Subject key identifier:   CB:A5:DD:3C:6B:8E:AF:51:C1:7B:27:D0:48:BE:B3:48:36:30:AE:77
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer:       /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial:       019EBFC85328C05267EC892EC1ACAED94852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number:          10EF
Signing time:             Sat 13 Jun 2026 07:00:37 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:37 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:37 +0000
Files and hashes:         1: 2iDN05uSq0ol30Boqq292O8hl4w.roa (hash: /yvDilMky3xNO6oMx1wmAxjj1Dh8TVWdR92wXw9xSFU=)
                          2: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: yBWtoG/laTxhxGZPZZT1XHBqHEsWhHglMlL5yU/tDDE=)
                          3: UpZ-DRH2FLqKcZot9WnKKGPDaxI.roa (hash: Z2/3lO45yvIZPeXxsjAynXOHDKVBDLOjLTwLnTbPDbU=)
                          4: YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa (hash: 5xF+3ALjS9ETnu2nZD1BWStkHokbMoA1FcBVvhuzz4g=)
                          5: xlsFyDdwgZeZV5xnjDclge-AA8U.roa (hash: TXOJJRDjmANYnvqhNdlEFYN20qaFGtzeMxtt4daAeOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:53:28:c0:52:67:ec:89:2e:c1:ac:ae:d9:48:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
        Validity
            Not Before: Jun 13 07:00:37 2026 GMT
            Not After : Jun 14 07:00:37 2026 GMT
        Subject: CN=cba5dd3c6b8eaf51c17b27d048beb3483630ae77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:f6:db:2c:b1:0b:37:1c:30:1c:b7:ed:93:30:
                    c5:10:57:40:e9:5f:ec:5d:60:00:5b:7a:55:78:70:
                    b7:26:39:e7:e4:4d:5d:22:39:fb:1c:10:1f:be:e1:
                    ac:3a:f3:0c:76:85:e5:f7:76:85:e2:93:86:da:28:
                    b2:63:c1:d9:8c:d7:82:58:d6:a9:08:e7:f8:73:5b:
                    02:9b:d0:bb:6f:91:d7:38:e7:25:b8:c4:d7:b1:a2:
                    3d:58:03:de:5c:a6:78:6c:57:19:57:b5:74:20:e8:
                    7f:3f:f5:43:a9:87:52:29:93:74:96:a7:cf:91:af:
                    c9:4c:0f:32:3b:3d:dd:bd:24:6f:16:37:8b:9b:e6:
                    17:8b:9e:ec:fd:ab:ec:9f:e5:d1:64:37:65:49:97:
                    78:5f:9f:87:13:7e:43:96:f6:20:73:4b:98:5b:78:
                    db:4f:97:1b:c7:53:48:dc:2a:6b:cd:cf:90:c0:0c:
                    81:a2:05:78:44:60:fd:72:7b:6b:33:a6:a8:49:0b:
                    29:70:51:02:84:ae:5e:b3:14:d8:60:c7:a5:ad:98:
                    9e:d2:b1:ef:3f:d0:74:cd:f6:e9:9b:54:2e:77:35:
                    9a:b6:66:2b:2a:f0:25:b9:44:5e:9a:25:58:8d:de:
                    f5:dd:67:51:3d:8f:a0:8d:0f:c6:06:0b:42:67:d0:
                    e5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A5:DD:3C:6B:8E:AF:51:C1:7B:27:D0:48:BE:B3:48:36:30:AE:77
            X509v3 Authority Key Identifier:
                keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:88:47:24:c6:38:f5:e7:eb:31:d3:9a:32:52:bb:08:88:48:
         6c:60:fa:8d:a6:00:93:88:72:77:56:03:e4:b1:5c:e0:4c:a5:
         f9:6b:26:86:43:f7:cc:26:5f:9c:ff:4c:40:9c:11:9f:e1:59:
         26:45:64:76:ed:a3:dc:89:34:97:bd:7b:55:6b:d2:37:8c:c7:
         5a:bb:25:24:7d:8a:8b:d6:4b:6d:90:f4:1e:a8:91:d2:13:84:
         7d:9c:1c:66:d6:4f:c5:f4:9a:78:9a:51:cc:e4:66:77:33:76:
         52:c7:10:0f:2e:25:ca:22:ce:d9:74:fd:73:64:cf:52:bd:3a:
         47:49:2a:d6:da:64:ae:37:c4:d1:0e:a2:7c:d9:13:97:69:c5:
         8f:1a:24:e1:e7:6b:73:2e:2e:13:92:46:16:0d:f3:32:3c:64:
         a9:01:28:25:c1:5d:72:13:f3:9b:8a:28:61:45:c4:f7:cb:7e:
         30:39:b0:44:0c:41:a5:cd:9a:52:81:c0:60:ed:3d:6f:45:6f:
         d1:22:aa:02:5f:fe:69:2b:70:76:d0:f9:a2:27:ed:6d:73:c4:
         20:7e:c9:d3:8c:48:62:32:92:64:48:31:2b:a3:77:03:38:f7:
         0b:1e:4c:bf:89:32:ca:a4:8e:7d:13:69:0d:2a:84:3e:73:58:
         f3:3d:66:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yFMowFJn7Ikuwayu2UhSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzMyNjMyYWE5MTU0MjUzYzZkY2QyMzMxZTlhZDY5MjBi
NmJkY2MwHhcNMjYwNjEzMDcwMDM3WhcNMjYwNjE0MDcwMDM3WjAzMTEwLwYDVQQD
EyhjYmE1ZGQzYzZiOGVhZjUxYzE3YjI3ZDA0OGJlYjM0ODM2MzBhZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+/bbLLELNxwwHLftkzDFEFdA6V/s
XWAAW3pVeHC3Jjnn5E1dIjn7HBAfvuGsOvMMdoXl93aF4pOG2iiyY8HZjNeCWNap
COf4c1sCm9C7b5HXOOcluMTXsaI9WAPeXKZ4bFcZV7V0IOh/P/VDqYdSKZN0lqfP
ka/JTA8yOz3dvSRvFjeLm+YXi57s/avsn+XRZDdlSZd4X5+HE35DlvYgc0uYW3jb
T5cbx1NI3Cprzc+QwAyBogV4RGD9cntrM6aoSQspcFEChK5esxTYYMelrZie0rHv
P9B0zfbpm1QudzWatmYrKvAluURemiVYjd713WdRPY+gjQ/GBgtCZ9Dl0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMul3Txrjq9RwXsn0Ei+s0g2MK53MB8GA1UdIwQY
MBaAFNrDJjKqkVQlPG3NIzHprWkgtr3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2Mjct
MjQ2NTRlOTQxYzEyLzEvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2MjctMjQ2NTRlOTQxYzEy
LzEvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYhHJMY4
9efrMdOaMlK7CIhIbGD6jaYAk4hyd1YD5LFc4Eyl+WsmhkP3zCZfnP9MQJwRn+FZ
JkVkdu2j3Ik0l717VWvSN4zHWrslJH2Ki9ZLbZD0HqiR0hOEfZwcZtZPxfSaeJpR
zORmdzN2UscQDy4lyiLO2XT9c2TPUr06R0kq1tpkrjfE0Q6ifNkTl2nFjxok4edr
cy4uE5JGFg3zMjxkqQEoJcFdchPzm4ooYUXE98t+MDmwRAxBpc2aUoHAYO09b0Vv
0SKqAl/+aStwdtD5oiftbXPEIH7J04xIYjKSZEgxK6N3Azj3Cx5Mv4kyyqSOfRNp
DSqEPnNY8z1mzw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:17:50 2026 by rpki-client