Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          HMW5YzWd4jlojZS0dKSaeb7xmyfq5wlzIZvBpziwz9M=
Subject key identifier:   35:2B:23:05:B9:FC:7A:D6:B1:15:09:86:DB:E6:CC:47:71:E5:AA:91
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019C85A724A5A21E00E3C2FD209095EB0F77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          1627
Signing time:             Sun 22 Feb 2026 14:00:49 +0000
Manifest this update:     Sun 22 Feb 2026 14:00:49 +0000
Manifest next update:     Mon 23 Feb 2026 14:00:49 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: SPgJ6/AFa6jq+3Bu4NiSCJhwOYhQ6Mxv1/0LnLCPWuI=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Feb 2026 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:85:a7:24:a5:a2:1e:00:e3:c2:fd:20:90:95:eb:0f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Feb 22 14:00:49 2026 GMT
            Not After : Feb 23 14:00:49 2026 GMT
        Subject: CN=352b2305b9fc7ad6b1150986dbe6cc4771e5aa91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:f4:3e:e7:31:e2:c9:7b:81:04:82:43:01:
                    32:e7:b3:e0:46:30:be:0d:b7:90:bc:3a:bb:1b:18:
                    2f:46:45:ec:f8:0a:8d:ef:bc:b0:67:8c:fc:d0:c8:
                    78:1e:d4:94:29:52:7d:91:1f:27:f9:28:fd:61:ca:
                    ca:c7:b1:40:76:9c:1d:f9:28:41:e9:2c:e4:8b:36:
                    06:f3:dd:77:f5:37:29:fc:76:9d:9a:26:cd:3a:81:
                    72:b1:f9:20:04:71:0d:d3:52:71:a4:7a:36:81:8d:
                    9e:e4:02:4c:15:53:2d:f1:f6:39:f1:12:bb:38:e7:
                    ec:98:a9:4d:eb:87:4b:79:55:d0:10:e2:76:2d:5f:
                    4a:10:33:13:77:7f:b5:eb:72:b2:38:c8:88:b7:39:
                    b7:55:5b:90:49:e6:ef:ad:98:cf:e7:a3:99:dc:6b:
                    78:6a:a3:00:5d:cb:b0:2f:46:3f:f6:de:c3:ed:6c:
                    a6:ba:19:04:d1:1e:19:2c:45:5a:65:7b:7f:77:24:
                    7c:ac:cb:e2:5f:b3:e7:6d:81:aa:55:d0:70:de:b3:
                    1e:38:2f:c3:7d:95:32:5f:e9:c4:bf:4b:22:b9:b7:
                    ba:1d:db:d6:0a:03:05:2b:a1:33:05:08:16:69:d2:
                    67:0f:4c:84:20:65:1b:61:80:ad:50:27:51:ee:60:
                    5d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2B:23:05:B9:FC:7A:D6:B1:15:09:86:DB:E6:CC:47:71:E5:AA:91
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ba:91:32:5f:8b:94:c6:ee:28:48:a7:58:8a:1c:d6:8f:2b:
         5c:45:f7:cf:f8:b6:fd:46:fe:6b:62:51:2b:1a:5a:71:1d:3e:
         ca:37:18:df:86:7d:b3:d1:36:c1:39:1e:81:dd:83:63:37:30:
         4f:4b:39:13:7c:d4:bb:f3:b4:24:13:dd:ab:cf:eb:19:ef:6b:
         b5:08:8a:c8:f9:cf:e2:33:5a:e7:ff:6f:fe:35:5f:b9:37:55:
         68:8c:16:cd:c6:61:65:27:dc:f5:57:09:6f:4a:79:97:9b:68:
         b5:25:57:66:1d:12:cf:e3:41:45:17:b6:81:9a:19:c5:e9:55:
         4d:5f:58:f0:8d:3a:6e:a3:be:d9:d6:08:28:4f:35:e7:0a:9b:
         e4:7e:92:65:d1:57:ad:b4:9b:91:84:0d:82:f4:da:b3:da:6a:
         f9:c4:67:e3:74:b4:78:c3:66:98:32:35:08:e8:07:5c:47:d4:
         b2:dc:43:00:aa:28:1d:89:ac:94:d5:e0:a5:cb:25:3a:22:cc:
         23:e3:46:8e:e2:f0:20:d1:2a:43:4c:df:64:23:ab:cd:b4:81:
         40:c1:41:aa:70:3a:91:cc:33:bf:17:51:fc:89:0c:08:9f:01:
         16:51:21:d9:29:f9:c7:0b:76:b5:84:8b:be:76:bc:66:e4:0e:
         f8:2b:65:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 20:26:48 2026 by rpki-client