Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
File:                     I7GUMIfOaWI-drIUWzR5rCBLock.mft (raw, json)
Hash identifier:          w5b/Tdi+w/LTCXUHOY/YzruUpsmWKmpC252oTofothA=
Subject key identifier:   89:9A:51:F4:B4:8F:E5:22:7D:50:9F:4E:DA:AB:25:7F:5A:66:2C:21
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Certificate issuer:       /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial:       019C782205134966B8C0B0C4DD96ADD9814F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
Manifest number:          176A
Signing time:             Thu 19 Feb 2026 23:00:21 +0000
Manifest this update:     Thu 19 Feb 2026 23:00:21 +0000
Manifest next update:     Fri 20 Feb 2026 23:00:21 +0000
Files and hashes:         1: 78v4VJEfw5PVOd7xHPXoIyfNp48.roa (hash: 6qQ8BW5L0oi0uF4TdnOMiqJXcCMSoxgt26+h+J3CUsI=)
                          2: Di79UbTmbpFxSYwbXsMn-pZLrV8.roa (hash: tV65sDjzx9UVZdR97H6FDEjyFBVEvZi4/CVnig4SJ08=)
                          3: I7GUMIfOaWI-drIUWzR5rCBLock.crl (hash: AdtCCmTSaKFlLIuGaxQ+WLrXAXXnuTmopCMO7ek1GaQ=)
                          4: Xy9KAo8RgHqzd9LCgtHpYYSq1Ws.roa (hash: pkyeg5y/UqA2MwW/DbnlFyqNjdMeUTSbZh1g/kjVAXE=)
                          5: fMLivNYCuxdhHtX3Ga7hVSkjoJM.roa (hash: 9AwEnRwEhqte/EFdOWwlxFhd4JAdP6+asha44+p++gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Feb 2026 19:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:78:22:05:13:49:66:b8:c0:b0:c4:dd:96:ad:d9:81:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
        Validity
            Not Before: Feb 19 23:00:21 2026 GMT
            Not After : Feb 20 23:00:21 2026 GMT
        Subject: CN=899a51f4b48fe5227d509f4edaab257f5a662c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a3:80:44:0e:b5:c2:fd:a4:e3:10:02:13:8c:
                    cb:41:f5:19:fe:7f:46:c7:14:40:4b:9e:6a:3f:5c:
                    f1:04:70:b6:6f:de:a2:d8:57:ac:24:0b:39:4d:5d:
                    be:b0:b0:0b:1f:81:2f:f9:6f:eb:47:16:98:53:f0:
                    41:bb:d5:5c:44:bd:de:15:b6:16:94:00:f1:13:17:
                    44:7d:7f:2c:5b:42:f7:fb:29:55:5e:ff:5d:3d:d1:
                    ce:25:74:6b:94:9f:08:7e:68:af:79:02:6e:30:51:
                    9b:ee:92:fa:cd:83:66:5f:b1:bd:51:9f:a2:94:d3:
                    b8:2f:fc:40:b9:f4:ad:84:fa:c4:28:dc:a4:47:07:
                    8b:0a:a6:9d:79:45:38:da:23:98:ad:d6:07:ab:47:
                    78:b8:30:ef:fd:0c:33:c8:3e:f9:33:bc:b3:11:c6:
                    3c:ef:6b:30:29:a3:37:fa:5f:14:1f:5b:df:44:4f:
                    ba:f2:92:78:a1:cc:db:72:b7:25:3e:44:24:2d:d9:
                    f6:e3:34:dd:1a:18:60:7a:a1:9f:18:e0:e2:d9:c6:
                    0e:91:5f:fd:48:3f:a8:88:65:23:87:a2:bc:d2:0e:
                    c7:ac:0d:3d:f8:73:4e:5b:57:84:44:c4:21:f9:bd:
                    00:63:c5:41:81:c1:3f:eb:bc:e3:d6:06:89:1c:0f:
                    60:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9A:51:F4:B4:8F:E5:22:7D:50:9F:4E:DA:AB:25:7F:5A:66:2C:21
            X509v3 Authority Key Identifier:
                keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:37:d2:52:94:4b:de:40:ea:7f:b2:24:79:f1:b5:ff:f5:c6:
         fe:96:96:eb:db:5b:3b:4d:ce:d4:fe:98:c8:31:e6:dc:b5:8f:
         4f:99:9f:cf:74:66:72:e5:52:63:8e:0b:5d:43:66:16:98:25:
         02:42:d2:83:64:77:f1:88:55:c3:18:80:3f:c4:01:3b:21:1a:
         d0:f2:9e:6b:f2:89:d4:53:af:15:7b:c6:92:59:bd:59:9d:63:
         a5:70:78:73:db:9f:90:9a:12:53:28:58:d2:c1:d8:f4:2f:f2:
         24:fe:d1:60:33:a6:c7:d1:77:a5:d1:9e:83:b8:d4:b5:e8:bb:
         3e:ab:e7:b8:8e:2a:23:5f:43:6b:31:16:00:f0:53:de:6c:c7:
         85:81:11:e5:10:cb:55:7b:d6:e5:30:f5:f8:b3:8a:a7:f3:b4:
         68:b7:84:98:ea:fe:1c:8b:6e:52:ed:14:7f:fd:00:ab:88:26:
         6f:78:ee:e2:3a:9c:ff:c0:c2:81:34:0f:36:2e:24:57:49:c2:
         24:2c:8e:6b:c5:c9:a6:b3:c7:ff:eb:7f:8d:89:21:01:1b:ee:
         29:d7:70:08:e8:10:33:86:03:02:f8:d4:e2:ac:96:02:0c:3e:
         54:34:6d:02:0d:7d:af:76:41:18:53:59:fd:d5:2e:74:a9:28:
         99:bb:1a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 04:50:50 2026 by rpki-client