Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File:                     2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier:          Z+V8WwKf5xleKS/OqLvhV7Ma5cAysTl/+6nErFxpFMc=
Subject key identifier:   34:52:78:D4:F3:18:44:25:81:B6:AE:27:86:50:16:D1:28:E7:D1:FA
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer:       /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial:       019F90599C03170237B58003C1218C2FFCD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number:          115B
Signing time:             Thu 23 Jul 2026 19:00:19 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:19 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:19 +0000
Files and hashes:         1: 2iDN05uSq0ol30Boqq292O8hl4w.roa (hash: /yvDilMky3xNO6oMx1wmAxjj1Dh8TVWdR92wXw9xSFU=)
                          2: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: KP0dL3gClCNSiA/4A5PmLNj6MUjnKvAey3ECLBbLFq4=)
                          3: UpZ-DRH2FLqKcZot9WnKKGPDaxI.roa (hash: Z2/3lO45yvIZPeXxsjAynXOHDKVBDLOjLTwLnTbPDbU=)
                          4: YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa (hash: 5xF+3ALjS9ETnu2nZD1BWStkHokbMoA1FcBVvhuzz4g=)
                          5: xlsFyDdwgZeZV5xnjDclge-AA8U.roa (hash: TXOJJRDjmANYnvqhNdlEFYN20qaFGtzeMxtt4daAeOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:9c:03:17:02:37:b5:80:03:c1:21:8c:2f:fc:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
        Validity
            Not Before: Jul 23 19:00:19 2026 GMT
            Not After : Jul 24 19:00:19 2026 GMT
        Subject: CN=345278d4f318442581b6ae27865016d128e7d1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:31:34:cc:8d:2a:6d:fe:3b:32:95:98:64:
                    fa:c4:59:57:29:6e:43:33:36:22:4d:02:22:49:92:
                    4a:a0:f9:27:f7:32:eb:92:4b:f1:e5:88:b0:71:91:
                    e6:ab:fc:1d:23:44:0a:9f:e6:1b:2a:0c:04:50:43:
                    e2:4e:be:c7:d5:53:6b:e1:2e:19:80:b9:7f:9e:73:
                    80:a1:3d:44:1b:af:d4:31:ea:56:09:79:a1:23:c7:
                    3b:aa:4d:83:c3:0c:ce:e7:20:87:7c:d4:de:fc:b6:
                    60:16:6a:c5:97:0c:6c:d3:f9:e4:fc:7e:b7:9a:c1:
                    dd:b1:28:48:5d:61:b1:08:00:3a:ef:7c:52:3f:93:
                    cb:8d:cb:be:c6:95:84:a1:6b:e2:a8:f8:e5:65:f7:
                    6f:b0:22:3f:59:d5:a9:0d:8a:43:15:c5:4d:62:b2:
                    69:ed:f0:84:f1:d6:c7:5f:86:79:08:7a:e1:1a:65:
                    67:ed:8c:f3:d3:db:74:43:b5:50:6c:cc:cf:75:a1:
                    5c:8b:60:ba:b3:66:62:9c:42:c7:8c:b4:e8:e1:b9:
                    5b:7e:9f:eb:99:62:d1:32:83:bc:a7:68:92:19:80:
                    c4:1e:ea:d4:85:af:44:c6:19:fd:6a:3f:67:50:56:
                    b2:1f:85:bd:1b:a7:6e:c2:6d:b5:6b:b6:c5:70:17:
                    b4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:52:78:D4:F3:18:44:25:81:B6:AE:27:86:50:16:D1:28:E7:D1:FA
            X509v3 Authority Key Identifier:
                keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:62:f9:99:60:cb:34:9f:c6:6a:b6:49:7b:36:3b:00:c3:20:
         f5:35:89:cc:26:96:7d:92:e0:c8:1f:cf:09:5c:d4:68:86:f2:
         7d:90:99:34:f6:97:fa:d4:21:78:66:de:84:c5:19:11:0d:b8:
         7e:7a:fb:de:76:92:43:a3:fd:96:b7:0b:70:67:ff:42:45:b5:
         52:6f:ac:3d:a4:9d:23:f3:8d:3e:54:aa:9e:c8:4a:e7:7c:d0:
         a0:77:63:dc:32:97:10:cd:bb:73:ec:30:92:21:9b:79:9c:84:
         6d:24:09:1b:e7:f7:f2:f3:82:7f:35:33:5a:bb:7e:89:10:04:
         05:5d:7d:c2:5c:7b:36:7d:7c:22:a6:3c:21:14:0d:15:ee:ae:
         5c:da:ac:10:06:f9:23:4d:a1:16:25:d5:2f:2c:1c:99:c5:f9:
         05:06:db:cb:a0:f5:77:93:42:d3:fe:db:5a:9c:4c:ac:a6:1d:
         e2:e1:7e:e8:22:03:f7:f0:10:05:ec:de:08:4e:e0:de:47:9a:
         54:67:fa:70:83:1b:55:1e:e3:fb:be:be:f8:37:4b:11:d3:27:
         f4:be:50:92:77:6d:3e:2d:9c:20:bd:e7:54:60:27:36:bd:1c:
         36:06:79:11:a8:19:76:1b:5b:dc:1e:7d:3a:21:0d:0c:d5:6e:
         be:9e:29:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:11 2026 by rpki-client