Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
File:                     vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft (raw, json)
Hash identifier:          jSGeS0peigCQ3Ctq106hzwBm/62iwruVuuOPAmCtWCY=
Subject key identifier:   64:8D:B5:34:64:37:02:A8:65:A9:74:69:1F:B4:9F:10:1D:B0:6B:01
Authority key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
Certificate issuer:       /CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Certificate serial:       019C6B4286454DEF8F09933E0ED21A1AE5EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
Manifest number:          1828
Signing time:             Tue 17 Feb 2026 11:00:47 +0000
Manifest this update:     Tue 17 Feb 2026 11:00:47 +0000
Manifest next update:     Wed 18 Feb 2026 11:00:47 +0000
Files and hashes:         1: vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl (hash: ehXU5Xb6OVln7M9s5Cnmia1dMtDDKWL9A8Uj4cCWDpM=)
                          2: zzDkvJaiRpsmi6O7kaXorv8G2lo.roa (hash: U4Wz/U8KhaG7QlShrJHjPRkbJ49L12u0oJF2UhXulFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Feb 2026 11:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:6b:42:86:45:4d:ef:8f:09:93:3e:0e:d2:1a:1a:e5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
        Validity
            Not Before: Feb 17 11:00:47 2026 GMT
            Not After : Feb 18 11:00:47 2026 GMT
        Subject: CN=648db534643702a865a974691fb49f101db06b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6a:4b:4a:ff:5e:03:34:2f:62:fc:4c:31:7d:
                    10:3b:60:eb:f8:81:09:8e:c5:3b:ca:fe:d8:24:de:
                    8f:85:9c:74:46:a8:c4:7b:82:97:03:e7:68:a2:56:
                    26:f5:06:dd:47:9e:d4:3c:d1:9a:00:5a:21:68:86:
                    3d:ca:44:5b:8f:91:d7:c1:13:78:ae:1e:1a:21:01:
                    56:84:8a:78:1c:ba:1b:cc:9c:e2:cf:5b:d1:70:46:
                    97:21:c4:e0:13:02:19:dc:48:a0:2a:59:0d:4a:f1:
                    b1:54:bf:d9:9e:e5:e7:5e:f7:70:55:df:77:a4:61:
                    c1:3c:48:8e:52:19:87:a2:82:26:a7:1f:5a:90:43:
                    dd:2e:6d:a8:63:9f:f8:31:f1:75:06:d9:df:26:a5:
                    8c:87:8d:7b:35:33:7e:78:bf:d5:ab:7e:21:fb:94:
                    58:18:be:4e:3e:f4:63:e4:bf:18:89:dc:75:b9:70:
                    ec:30:33:1b:82:d1:33:38:fa:e1:ed:0d:9a:08:64:
                    29:91:d8:b8:74:c8:53:da:f2:ec:26:0e:4d:17:2c:
                    f4:b9:45:77:05:9a:5b:bb:db:5e:90:89:51:98:8a:
                    2a:d4:46:68:0d:14:af:dd:9c:11:94:2d:90:6d:13:
                    f9:ac:43:08:94:71:6c:29:b8:cf:20:b6:df:2c:da:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8D:B5:34:64:37:02:A8:65:A9:74:69:1F:B4:9F:10:1D:B0:6B:01
            X509v3 Authority Key Identifier:
                keyid:BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:9b:db:5b:18:4e:e7:ef:2e:1e:0b:c2:71:9a:2f:11:03:99:
         a4:7d:a2:ec:49:4c:23:ae:b6:41:82:21:45:86:64:b8:1a:6f:
         e8:44:cf:1f:8a:9d:08:52:d0:ec:9d:cd:66:57:b0:8f:ed:99:
         bf:e4:e2:9e:ec:e8:7a:b4:46:87:0c:69:c9:f1:f4:45:71:9d:
         ac:7f:74:ee:70:a3:70:aa:25:4b:ce:60:e3:75:26:74:82:47:
         91:35:3a:ae:6b:1f:b3:42:51:2d:a5:5e:f4:08:15:f1:f4:e4:
         1d:a0:8a:57:1f:58:8a:2a:36:74:b1:c4:1c:81:67:8f:a3:3a:
         61:b4:92:74:f3:f4:7d:0b:60:fe:0f:61:9e:7f:4a:0c:cb:2e:
         17:8d:df:b9:0e:c6:90:2d:44:1d:b1:cf:1e:8f:f1:62:d0:f4:
         c0:bf:99:78:e5:8f:a6:1c:2d:96:85:73:ff:71:24:07:ce:85:
         f8:2b:82:c3:1a:52:87:06:22:d0:b6:a8:98:63:01:38:3c:75:
         03:a0:ff:32:80:71:5e:c0:51:c3:10:6c:fe:a5:f8:b8:18:51:
         ac:fb:03:eb:54:57:75:a8:86:c2:98:46:d9:6e:0b:67:b4:d1:
         b2:65:7f:78:c7:14:d7:ed:66:3d:6e:f2:f8:ca:23:51:fd:90:
         62:92:e1:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxrQoZFTe+PCZM+DtIaGuXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWQ3YzQyZTkxNzg0NGNiYzJkZTRhOTFjNmMxNzAxZGU1
OTcxYjUwHhcNMjYwMjE3MTEwMDQ3WhcNMjYwMjE4MTEwMDQ3WjAzMTEwLwYDVQQD
Eyg2NDhkYjUzNDY0MzcwMmE4NjVhOTc0NjkxZmI0OWYxMDFkYjA2YjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mpLSv9eAzQvYvxMMX0QO2Dr+IEJ
jsU7yv7YJN6PhZx0RqjEe4KXA+doolYm9QbdR57UPNGaAFohaIY9ykRbj5HXwRN4
rh4aIQFWhIp4HLobzJziz1vRcEaXIcTgEwIZ3EigKlkNSvGxVL/ZnuXnXvdwVd93
pGHBPEiOUhmHooImpx9akEPdLm2oY5/4MfF1BtnfJqWMh417NTN+eL/Vq34h+5RY
GL5OPvRj5L8Yidx1uXDsMDMbgtEzOPrh7Q2aCGQpkdi4dMhT2vLsJg5NFyz0uUV3
BZpbu9tekIlRmIoq1EZoDRSv3ZwRlC2QbRP5rEMIlHFsKbjPILbfLNqMWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSNtTRkNwKoZal0aR+0nxAdsGsBMB8GA1UdIwQY
MBaAFLydfELpF4RMvC3kqRxsFwHeWXG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOWFlYTItYjZjOC00YWY5LWFkODQt
MDNmYjU0MTg3ZWUyLzEvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yOWFlYTItYjZjOC00YWY5LWFkODQtMDNmYjU0MTg3ZWUy
LzEvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5vbWxhO
5+8uHgvCcZovEQOZpH2i7ElMI662QYIhRYZkuBpv6ETPH4qdCFLQ7J3NZlewj+2Z
v+TinuzoerRGhwxpyfH0RXGdrH907nCjcKolS85g43UmdIJHkTU6rmsfs0JRLaVe
9AgV8fTkHaCKVx9Yiio2dLHEHIFnj6M6YbSSdPP0fQtg/g9hnn9KDMsuF43fuQ7G
kC1EHbHPHo/xYtD0wL+ZeOWPphwtloVz/3EkB86F+CuCwxpShwYi0LaomGMBODx1
A6D/MoBxXsBRwxBs/qX4uBhRrPsD61RXdaiGwphG2W4LZ7TRsmV/eMcU1+1mPW7y
+MojUf2QYpLh0w==
-----END CERTIFICATE-----
Generated at Tue Feb 17 20:26:18 2026 by rpki-client