Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
File:                     mFW4DEXftep6qn3R2O2LFPnB3EU.mft (raw, json)
Hash identifier:          FquVTi+jIcNI+tdVoAZIfH3XuQmVvE37x8yPlj/0ECc=
Subject key identifier:   77:CA:A4:A2:2C:9C:5F:1E:87:78:1E:3C:DD:1F:BB:83:8D:0C:8B:92
Authority key identifier: 98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
Certificate issuer:       /CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Certificate serial:       019C777D6E7F2F4982A3FCC6E8B0A354C0D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
Manifest number:          0315
Signing time:             Thu 19 Feb 2026 20:00:34 +0000
Manifest this update:     Thu 19 Feb 2026 20:00:34 +0000
Manifest next update:     Fri 20 Feb 2026 20:00:34 +0000
Files and hashes:         1: JdrrzB7a1qH9AHo1hI78HQ9vZMk.roa (hash: GTd8cCkoiW0FGNR73NG1lnLnp97HhBUrrNAzm3q5ilE=)
                          2: mFW4DEXftep6qn3R2O2LFPnB3EU.crl (hash: Eu+7IXv2b0Qw69yICJOE5qEcqfWJBEUVGRno87e1His=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Feb 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:77:7d:6e:7f:2f:49:82:a3:fc:c6:e8:b0:a3:54:c0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
        Validity
            Not Before: Feb 19 20:00:34 2026 GMT
            Not After : Feb 20 20:00:34 2026 GMT
        Subject: CN=77caa4a22c9c5f1e87781e3cdd1fbb838d0c8b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:cb:1b:ae:a5:c6:f3:2a:79:c5:93:95:34:
                    a0:3e:67:fe:01:f0:52:5b:cf:b1:db:10:40:07:ea:
                    a3:02:e3:ae:9b:41:90:91:27:45:da:81:0f:0d:9e:
                    10:42:56:47:f2:90:30:6d:91:be:f9:68:7a:9e:48:
                    68:5b:7b:d1:6e:6a:86:21:fb:66:b3:65:96:5d:07:
                    3e:c7:e6:b6:f1:36:9e:40:d4:54:20:c3:8a:95:64:
                    e3:f2:59:4f:61:fb:91:8c:f2:bc:f0:33:9d:5e:6a:
                    67:eb:d0:3a:ee:02:02:df:c8:75:11:e9:8f:be:42:
                    95:07:dc:40:56:50:d8:55:32:32:19:f4:a3:c8:bd:
                    03:52:f1:f9:fc:41:73:a2:35:9c:a9:19:c6:1e:8c:
                    fd:ab:2e:fa:f3:c1:b1:db:39:c2:d4:88:ea:29:6c:
                    3c:6c:74:2f:09:2b:41:04:5c:c2:50:1f:06:09:ac:
                    26:98:24:8d:cf:44:33:79:75:02:62:c1:72:39:51:
                    9c:e5:0e:79:bb:c6:d7:21:5c:4c:22:bf:80:77:cf:
                    76:d0:cf:6f:bb:b3:31:d7:1f:e1:c3:04:75:ac:68:
                    0f:c8:07:7e:7a:f3:b7:ca:8f:de:e9:f7:0f:23:99:
                    cc:e0:b1:2b:87:b9:ab:2b:15:fc:09:8e:29:c2:59:
                    12:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CA:A4:A2:2C:9C:5F:1E:87:78:1E:3C:DD:1F:BB:83:8D:0C:8B:92
            X509v3 Authority Key Identifier:
                keyid:98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ea:df:45:dd:2c:71:9d:d3:98:d1:0f:ad:27:fb:38:89:d0:
         c3:f7:3c:ae:0e:4e:fe:95:16:38:2f:9a:9a:8e:b8:89:73:f5:
         54:33:03:4d:54:c2:4b:0e:cc:51:96:0b:85:e3:e1:92:76:8a:
         f3:44:50:30:04:98:26:56:e0:52:aa:7f:bd:fc:6d:fe:11:6b:
         ad:cc:85:02:2a:d5:03:0f:d5:50:82:e7:06:f5:75:ee:9c:65:
         a1:b9:6c:6d:63:4e:ee:24:79:2c:a7:8f:b6:8a:68:89:a8:f6:
         23:39:7b:ef:fd:96:e0:d9:11:7a:e3:a9:83:75:f1:1b:18:13:
         7e:99:61:f2:c2:ec:f1:ce:71:47:bd:a8:09:c9:f6:cd:bc:66:
         58:a9:26:6f:21:10:2e:77:cd:7f:d0:0b:cb:d3:75:0b:91:79:
         a9:bf:ce:89:ec:1f:7b:a3:84:51:ce:d9:6a:9f:44:29:5c:c3:
         ef:cb:0c:9a:66:66:f5:49:f6:3e:a0:fd:91:6f:c6:48:c9:4c:
         13:f6:91:e7:4f:11:ed:03:4b:56:3a:c2:ea:e3:eb:07:4d:c0:
         86:fa:0a:10:df:51:9a:50:5c:30:10:d5:18:e3:a0:fb:d4:75:
         72:ea:49:c4:c4:d5:c3:ca:fc:ab:a5:3b:e6:dd:ba:71:a7:b9:
         d3:3c:28:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 05:56:19 2026 by rpki-client