Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          G1uC0HqjPed1cxXGvSMaeSISYH/Qyo4v8MXOGWU5oaI=
Subject key identifier:   02:30:AD:2A:3F:DD:73:5D:6C:77:83:19:51:5B:17:AF:DA:BF:FB:3E
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019C7FDBEE48959B8E80237B0B9FCFFAFAD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          1624
Signing time:             Sat 21 Feb 2026 11:00:45 +0000
Manifest this update:     Sat 21 Feb 2026 11:00:45 +0000
Manifest next update:     Sun 22 Feb 2026 11:00:45 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: +HEZWxSJwkLIrVSwLf4SnHsYGyN21On7nMzu24cNrq4=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Feb 2026 09:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:7f:db:ee:48:95:9b:8e:80:23:7b:0b:9f:cf:fa:fa:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Feb 21 11:00:45 2026 GMT
            Not After : Feb 22 11:00:45 2026 GMT
        Subject: CN=0230ad2a3fdd735d6c778319515b17afdabffb3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3e:29:16:5d:03:cc:c7:7a:06:d2:95:cc:b6:
                    ec:6e:fc:d7:97:00:a5:eb:76:29:8b:d6:ec:6a:63:
                    d2:f2:47:63:e1:ff:9c:eb:00:e2:34:eb:f5:e9:91:
                    01:ba:f0:0c:2f:e2:81:ef:f7:3a:17:9e:19:db:83:
                    1b:a4:c3:fe:92:ff:3c:40:38:67:3f:4b:16:1b:ba:
                    13:f7:da:69:c6:35:a8:95:dd:fa:76:88:5e:04:93:
                    a8:95:35:a4:0f:a3:a5:a1:64:25:ec:92:0e:b6:72:
                    a1:07:4a:68:04:a2:b1:b2:1a:93:a0:99:46:94:95:
                    68:05:00:99:94:55:f9:06:14:9c:e2:6e:ed:e3:4b:
                    e5:9e:e8:f6:3f:a9:e1:68:ec:e6:27:66:bc:7e:2a:
                    94:85:5d:66:a9:14:6d:9d:c7:8f:97:71:22:79:bd:
                    d3:b9:65:03:7e:6f:be:a4:19:a1:97:96:bd:3f:f2:
                    74:4f:3b:50:dd:2c:aa:e0:17:cc:4c:9c:76:b1:94:
                    27:cc:41:11:4b:12:08:f4:f9:6c:a9:a3:27:70:13:
                    10:c2:ff:86:c0:5b:1a:af:fd:fe:ca:31:e0:b2:f2:
                    e6:54:26:91:b4:70:95:4f:a9:21:2d:70:95:60:46:
                    56:63:28:ca:96:e5:33:7a:8d:ba:4a:79:ba:d3:cb:
                    77:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:30:AD:2A:3F:DD:73:5D:6C:77:83:19:51:5B:17:AF:DA:BF:FB:3E
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e1:77:6a:7d:83:97:d1:c5:32:9a:d6:39:9b:8c:f9:e4:2b:
         cb:dc:42:42:bf:b0:da:68:cb:e8:09:d9:e6:88:6a:c1:ee:26:
         a4:a7:40:3c:fc:a3:c3:b1:b6:61:28:98:a6:d5:25:83:49:6c:
         ce:32:af:81:e3:9a:9b:89:ed:70:1c:79:fe:fe:48:f8:64:7f:
         cd:fd:44:56:45:2d:46:9f:f4:3a:98:0b:47:f3:e1:0a:ef:51:
         11:4d:36:e1:4b:d5:d8:94:f2:7b:4f:37:4e:15:9a:fb:de:8c:
         73:3d:ff:c9:00:65:fb:a1:af:04:27:a9:5f:40:59:23:02:b7:
         7b:5b:60:52:b9:ed:16:62:0d:ea:92:f4:86:f6:0f:53:80:c7:
         a5:99:52:8f:94:7f:7d:af:47:04:81:5c:5e:66:05:63:ba:53:
         f4:07:a5:67:da:0e:dd:c1:b2:95:ae:24:77:b9:4c:74:df:7e:
         23:59:ba:6b:7a:41:3c:0f:18:b8:b3:e1:a4:92:dd:8e:6e:e0:
         70:46:07:fd:1d:b7:d5:90:6f:1c:b9:32:63:c2:5d:ab:0b:13:
         f2:98:ff:32:32:2a:7a:34:1d:07:c8:a8:54:c3:47:fc:99:8a:
         96:14:3c:b5:80:9e:ca:e6:53:fb:77:74:41:22:21:a8:4c:a4:
         ac:37:9d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 20:00:04 2026 by rpki-client