Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File:                     y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier:          cUnfoF3uy/pV+LLQAU6Oke3fSSJLjBqKAOevIfLPpRg=
Subject key identifier:   45:36:92:DD:2B:04:51:22:74:4D:AC:BC:58:E2:28:D8:02:0C:3D:24
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer:       /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial:       019C777D7D4866845E281F663837770DAB43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number:          12C9
Signing time:             Thu 19 Feb 2026 20:00:38 +0000
Manifest this update:     Thu 19 Feb 2026 20:00:38 +0000
Manifest next update:     Fri 20 Feb 2026 20:00:38 +0000
Files and hashes:         1: Qt8hBCMlNLI8nIk_LiMf9y2OnJw.roa (hash: GjRUGfRDG86hd7K9wU5XQ1rme8zCmD1Q06yAXGf5F6Q=)
                          2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: 7Prl+wyOrE3p1ttRPjD2QujQoCMfVHjJNLfonuq7OP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Feb 2026 19:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:77:7d:7d:48:66:84:5e:28:1f:66:38:37:77:0d:ab:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
        Validity
            Not Before: Feb 19 20:00:38 2026 GMT
            Not After : Feb 20 20:00:38 2026 GMT
        Subject: CN=453692dd2b045122744dacbc58e228d8020c3d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7c:d5:7e:7d:bb:ea:72:9a:e8:40:db:46:aa:
                    dd:53:e1:30:7e:1e:f3:db:30:71:30:fa:8a:7b:65:
                    9a:11:fb:16:da:3e:45:14:54:2b:e8:f9:a9:06:fa:
                    91:9f:c2:31:95:ba:16:03:63:ad:29:68:f7:0d:34:
                    63:66:2b:e6:5a:44:a5:6d:ff:0d:fc:9a:37:d0:c4:
                    47:79:5b:00:84:48:38:5d:04:2b:bf:5c:7e:5e:ca:
                    7e:33:1a:9c:12:5e:42:0a:76:7a:0b:50:51:cc:dc:
                    15:65:5b:65:09:c6:63:7c:e8:f1:de:52:bc:a6:4e:
                    ed:01:ee:0a:e1:24:f5:59:ff:33:52:95:77:0b:0a:
                    c9:7a:3c:5f:1a:60:49:15:7c:4b:26:e4:4d:aa:a2:
                    fb:a1:6e:bf:04:d6:17:43:c5:5d:fa:29:bd:ae:bb:
                    8e:1d:67:75:6c:89:3c:27:60:5b:2d:53:73:c4:d8:
                    f6:b8:83:b3:32:58:f5:be:fc:35:f0:4f:69:b5:45:
                    9d:30:99:32:6c:ec:9e:0e:53:9a:74:f5:bc:44:61:
                    dc:2a:16:99:2e:b3:2e:79:ea:87:4b:8d:9d:33:38:
                    14:20:a8:39:cc:69:96:f0:3c:ff:b1:26:16:f7:cf:
                    56:fb:79:97:47:7f:97:e8:95:b5:73:6d:41:1c:55:
                    d0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:36:92:DD:2B:04:51:22:74:4D:AC:BC:58:E2:28:D8:02:0C:3D:24
            X509v3 Authority Key Identifier:
                keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:4c:34:61:47:93:2e:77:fd:ab:f3:de:10:b0:d7:b5:50:47:
         7a:65:3d:42:eb:8f:bb:e0:d7:1d:aa:c3:51:79:f0:40:f2:5e:
         44:6f:3b:3e:54:e8:43:99:dd:21:40:6a:e3:e2:f9:f0:69:89:
         0a:f1:40:9c:57:0d:9a:53:b5:3c:a1:92:8f:cc:e4:47:67:35:
         47:7e:34:0b:6d:e4:37:2b:30:2f:2c:47:27:b1:82:39:df:45:
         10:2c:cd:c6:c0:c3:a4:9d:a1:7d:58:34:57:83:43:c4:b5:0e:
         17:ab:9b:80:d4:1a:6c:4d:90:fd:df:b4:60:dd:27:50:ec:db:
         2e:e2:4b:94:c6:0b:c5:d4:01:a0:09:e4:27:8e:b1:96:c2:13:
         66:3a:0c:4f:ee:b6:16:eb:11:e5:2b:67:d7:ab:10:86:f2:30:
         cf:83:28:26:22:af:8e:78:17:99:45:3b:97:2e:5a:69:57:1f:
         29:24:1b:6d:ae:e4:f1:1d:1a:b7:20:c7:d6:80:35:bd:e6:a9:
         05:86:7f:41:5a:78:10:fe:3b:a3:15:75:06:73:4c:78:cd:30:
         34:b3:3b:77:60:f6:f6:c1:ee:77:94:31:46:8c:bd:9b:c7:a7:
         46:79:2a:95:d9:e9:32:e5:10:78:83:c8:2e:a7:99:d3:3b:81:
         2f:55:cc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 04:43:08 2026 by rpki-client