Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File:                     vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier:          QMvo77d1en3A6xIfDiv2hqbqQ4PQdYuvvVJLv9fo7xc=
Subject key identifier:   42:6E:54:3D:92:F3:76:52:1F:77:C2:EF:9E:C6:FD:0B:CD:E2:69:5A
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer:       /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial:       019C7D122C78721A04A25957DA29EFCB9739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number:          182A
Signing time:             Fri 20 Feb 2026 22:01:08 +0000
Manifest this update:     Fri 20 Feb 2026 22:01:08 +0000
Manifest next update:     Sat 21 Feb 2026 22:01:08 +0000
Files and hashes:         1: Q2LlNZpjm7QSfpQ8SxDMKPen6fs.roa (hash: +LvudqksRpkI5ThHyJo6o0SESZrwUB4lFuLcKBfvGGo=)
                          2: lb9dWd03BfnM72HsEUOqMfSXM5c.roa (hash: RJsPG6DuVrowjWLhY1jcZaBG3s9HD98PpDetQPQtNn0=)
                          3: n8D_NKCQjks2jeuzf-VmDEGhJy0.roa (hash: BxlSKmYiJSjve5WPsQ9b002bw4r8+dfXErMK1Yu3iW0=)
                          4: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: RZVOMHezr+S575kVyPv8uNg/OU8nsOu+3bPAkrtoFwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Feb 2026 22:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:7d:12:2c:78:72:1a:04:a2:59:57:da:29:ef:cb:97:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
        Validity
            Not Before: Feb 20 22:01:08 2026 GMT
            Not After : Feb 21 22:01:08 2026 GMT
        Subject: CN=426e543d92f376521f77c2ef9ec6fd0bcde2695a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:91:3c:8c:14:be:cc:17:90:81:cb:33:0a:
                    f8:c0:8a:39:6c:80:e6:58:fe:da:73:d6:f3:eb:ba:
                    94:bf:a4:f6:e5:6a:45:6c:4b:ed:09:56:b2:3c:08:
                    56:e5:97:da:01:85:08:f8:7a:f7:99:77:2b:de:75:
                    f3:34:6c:69:cc:19:50:09:30:31:1f:f6:51:1e:77:
                    52:33:6c:44:44:66:c6:bc:4b:73:2e:07:e4:1a:e4:
                    67:ff:82:0d:3b:de:34:78:8c:f9:83:e5:ca:43:9f:
                    6e:f9:e4:06:c2:c5:b8:a5:b7:32:92:96:f6:55:fb:
                    fd:76:a4:c8:2d:7a:98:aa:92:9a:49:f3:42:6f:2a:
                    01:a5:fa:f9:c2:db:63:a6:7d:95:b6:93:87:fa:92:
                    af:4b:2f:aa:84:99:df:d2:a7:aa:a6:7d:8c:17:22:
                    42:b5:9f:d6:7b:5a:71:90:6f:9e:96:5e:a0:9b:ae:
                    0a:cc:f2:c7:a3:46:c3:cb:0d:b4:63:a4:6d:77:9d:
                    c8:10:98:ca:4e:09:c3:69:9a:6a:50:b9:5b:8e:a9:
                    48:5a:7f:ec:ae:4e:02:bd:99:39:5c:fc:c2:81:9c:
                    e3:de:1b:8a:39:f6:1b:13:5e:90:71:0d:7a:21:ea:
                    d7:dd:40:c0:cf:9d:2a:9f:08:f3:41:29:fe:a8:dd:
                    d5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6E:54:3D:92:F3:76:52:1F:77:C2:EF:9E:C6:FD:0B:CD:E2:69:5A
            X509v3 Authority Key Identifier:
                keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a4:30:ab:46:ae:b1:68:e4:1f:c7:2f:b5:52:7c:31:66:d1:
         a9:bd:35:2c:71:84:3a:ce:b1:49:30:ec:87:04:df:81:48:2e:
         b0:ef:13:8e:60:7c:fb:f7:67:c1:48:18:60:90:35:2f:8f:20:
         6d:e1:b8:a8:f3:0c:cd:f4:31:5d:d1:1a:16:6b:f9:8f:9a:7c:
         ae:7e:18:6b:4c:64:00:3e:79:b3:98:e8:71:b4:11:9b:2b:60:
         fc:54:83:e5:18:d3:42:02:96:24:7d:8a:bc:6a:5b:0d:71:36:
         b3:f7:e5:5b:5f:25:0d:02:d0:69:47:4d:80:c2:05:ff:0f:18:
         46:76:ed:57:b6:a5:ee:3f:93:35:85:f8:c6:b3:75:ae:5b:2a:
         72:a6:fc:47:30:36:d2:0c:a1:12:b5:a9:f7:38:72:4e:95:4d:
         20:1b:96:e4:5f:68:84:ae:b3:e3:e9:54:8a:5b:dd:12:ad:f3:
         d3:69:8b:ff:18:35:79:99:15:89:9d:db:68:50:1f:b4:51:e2:
         b2:3a:81:b6:17:3a:11:e1:4d:bb:1a:d8:dc:1a:e9:d1:0a:7c:
         ed:20:f7:56:12:e2:32:55:69:f2:81:36:76:fd:0a:df:76:23:
         29:c6:53:94:9a:02:3c:f2:3f:1f:ec:f6:2a:d3:fc:bc:50:07:
         37:1f:1a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 06:07:22 2026 by rpki-client