Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File:                     00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier:          8fA7UuyuIcfD3uuYgoxncRN9so4QCG6+81TvttGVsKk=
Subject key identifier:   E4:21:6F:92:AF:9D:E7:73:A9:06:73:9A:99:F2:C8:81:33:04:6E:04
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer:       /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial:       019C7DB72FC7A97F6B2160F6CBC924EB1FDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number:          11B4
Signing time:             Sat 21 Feb 2026 01:01:23 +0000
Manifest this update:     Sat 21 Feb 2026 01:01:23 +0000
Manifest next update:     Sun 22 Feb 2026 01:01:23 +0000
Files and hashes:         1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: sNLYm96oCvSeGTwCayNw67bvr1RAnBCexki53iSWX4c=)
                          2: 9cUez0lt6Mmw_B9XzRcaxVFdcD4.roa (hash: nOpET7s1tBcctYg3BftSbHVRYi4Bukh6zTqeOERZX48=)
                          3: KiGqqB6_C_ieZKJBT6I3N4MMdDE.roa (hash: rhV7ftUdpJwNEXvedltkn1lDN8x7VUAPfzQjlu6gj8U=)
                          4: Km329xYl0mWvscl4C7smwLfJLZM.roa (hash: y92Zjmkk3O0mYFiCM2kvamv5Zo1ZKqAX4wwIWsbkyjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Feb 2026 00:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:7d:b7:2f:c7:a9:7f:6b:21:60:f6:cb:c9:24:eb:1f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
        Validity
            Not Before: Feb 21 01:01:23 2026 GMT
            Not After : Feb 22 01:01:23 2026 GMT
        Subject: CN=e4216f92af9de773a906739a99f2c88133046e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7e:57:05:42:81:94:91:42:99:eb:b4:5f:6e:
                    53:19:5e:11:2e:d9:5a:03:fe:3d:f8:0e:6c:e6:e8:
                    fe:a2:28:b8:b9:f4:b3:74:d9:22:93:97:18:99:d8:
                    27:d0:20:08:02:81:38:50:dc:b8:34:2b:fa:cd:24:
                    8b:a2:21:78:59:a0:50:90:30:5c:bd:65:ed:b8:17:
                    5b:50:e0:f3:84:6d:57:a5:6b:b9:06:6e:7e:5b:8e:
                    74:20:14:1f:08:f5:4b:ab:ea:c6:c9:4d:8a:a3:c8:
                    f0:7e:95:ff:33:cd:54:6d:bc:d9:be:ec:db:be:4e:
                    fc:78:4b:5b:db:23:88:12:cc:21:b9:94:9c:5a:21:
                    dd:44:c6:ea:52:e3:d3:de:de:fe:66:dd:c9:a2:3a:
                    69:fc:4e:48:1a:d2:da:ac:4f:ff:61:f9:22:17:aa:
                    6c:f9:2a:43:a5:44:72:10:3a:81:1a:d4:a2:d1:76:
                    6f:87:1d:27:3c:1d:0b:78:fc:36:ea:9e:4a:42:69:
                    6b:8a:c5:86:27:58:b8:91:17:83:59:76:15:8f:dd:
                    4f:e1:4a:6f:54:6c:f1:db:e3:a1:24:48:bf:a5:15:
                    a7:29:ec:96:5c:69:e0:b9:f2:e6:bc:3e:e3:ef:1f:
                    91:8e:af:7f:df:43:69:1f:bf:b0:2e:bb:de:02:4c:
                    c1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:21:6F:92:AF:9D:E7:73:A9:06:73:9A:99:F2:C8:81:33:04:6E:04
            X509v3 Authority Key Identifier:
                keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ee:58:00:b3:97:6b:c9:b6:21:d6:94:45:ff:61:06:e6:fc:
         2d:fd:09:da:3d:d2:b9:76:68:9f:49:1d:a8:ef:01:ed:d8:bf:
         0d:14:50:94:22:96:b1:c6:fd:d8:09:1c:8c:c4:ac:18:2c:da:
         7f:22:dd:e5:71:8e:cc:a6:57:2e:f3:4f:ba:b0:69:86:5f:0b:
         22:69:f8:f2:33:9a:00:84:71:c0:8b:e3:af:69:0c:49:8b:ab:
         5b:29:d1:4c:11:4c:3d:2d:e2:0b:e5:a5:5d:94:b2:e2:2b:3f:
         dd:bf:f1:dd:6a:6b:cc:60:93:36:f4:a1:39:cf:a5:7a:15:ce:
         c6:ab:5b:b3:32:2e:2e:2d:26:07:cc:07:32:a3:9a:94:58:0b:
         64:bd:ee:a7:80:45:08:75:37:ce:16:10:02:72:a8:5f:c5:59:
         e3:fe:ed:f4:56:aa:92:e2:9a:b2:c5:8a:c2:67:17:0f:2f:96:
         20:02:23:8b:94:a2:01:15:ff:8d:fb:19:c1:d0:f2:b9:4d:4e:
         17:00:0c:a6:3d:d4:3b:44:67:c8:ee:9e:07:d2:2b:b0:12:73:
         ee:61:80:0c:95:de:99:87:61:5f:f3:b5:9f:e4:9c:87:0d:48:
         2f:11:17:e7:de:28:51:30:d8:90:ca:70:99:6e:21:b5:43:7d:
         19:f7:bd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 06:07:48 2026 by rpki-client