Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
File:                     njUz1mLD8Na7HmkvP6tte6OCTCg.mft (raw, json)
Hash identifier:          IEkd2+v2LNUl6BOwMhvrKjpf1nGSfoGyXRXvlzPv9zo=
Subject key identifier:   8A:47:FE:B9:9E:3A:E0:01:02:8D:17:C9:9C:FC:3D:82:35:E9:0A:D2
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Certificate issuer:       /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial:       019C98C0966B3A1EE15FCD039EE62AFE3C06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
Manifest number:          17FE
Signing time:             Thu 26 Feb 2026 07:01:24 +0000
Manifest this update:     Thu 26 Feb 2026 07:01:24 +0000
Manifest next update:     Fri 27 Feb 2026 07:01:24 +0000
Files and hashes:         1: 4MZHtrPduvwWZu0hq-_oUYNM5w8.roa (hash: AxdxJvWatT200gvs4axM5PIkBFxSpInVyc3mGSKp8vU=)
                          2: RVVP5PD8dP-43J18hmU2HOb7Ac0.roa (hash: OTrvnZXSq87IsihJgFpcsrD3gfgWtAmyMOFW/2u0mbk=)
                          3: S4jlTESNKuERIhzvefthxqxMjFE.roa (hash: yLIrF9eIEj+kTPaOF2RFGKsApZoPXCZlHEXSS6Q4GZY=)
                          4: njUz1mLD8Na7HmkvP6tte6OCTCg.crl (hash: 2KBDsKjH803E/lb8bl+cJH7o7Pts3qen+usRVq4N/u8=)
                          5: q7lePwAA7tbvwyh9g0diFjxEIEM.roa (hash: fcB9jLCKEftt/YheXWPytPk6jNt6XasOK8ZmMyOLEwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Feb 2026 07:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:98:c0:96:6b:3a:1e:e1:5f:cd:03:9e:e6:2a:fe:3c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
        Validity
            Not Before: Feb 26 07:01:24 2026 GMT
            Not After : Feb 27 07:01:24 2026 GMT
        Subject: CN=8a47feb99e3ae001028d17c99cfc3d8235e90ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:4a:44:5f:d2:50:38:3f:ff:b8:47:ab:27:
                    89:ff:93:19:2e:c1:96:e9:5c:11:fb:5b:5e:09:7e:
                    7b:23:aa:35:02:5e:8a:92:18:80:99:29:d8:65:bb:
                    9e:3c:c4:4d:01:5c:e5:8b:1a:f4:f9:8d:c5:69:ba:
                    65:b9:d4:db:2d:d4:66:a3:75:7c:dc:c5:52:0c:b2:
                    cb:5b:92:fe:a3:c4:96:28:ff:0e:1f:b5:39:3b:4c:
                    a2:9c:1a:a8:28:53:8c:08:2b:45:a3:fa:46:f4:0f:
                    de:ea:35:67:48:83:9b:77:74:e8:9f:d4:c3:d6:f9:
                    59:c1:2e:2b:70:a6:c6:2b:0f:3e:f6:38:08:e3:07:
                    0e:30:2e:87:11:75:23:7b:00:38:61:57:87:65:8d:
                    63:9e:35:db:55:02:dd:79:47:d8:2f:7c:19:6d:fa:
                    11:0a:de:37:8a:c1:8d:78:cf:b0:57:1a:ca:b0:ac:
                    85:71:6f:6e:22:82:82:be:1d:8d:96:aa:c1:b4:9f:
                    7c:10:b7:ef:ba:2b:c8:5a:a8:c6:f4:73:c1:ba:e7:
                    2a:54:f8:dc:09:31:3e:cc:b0:03:9c:f3:67:0e:ce:
                    5c:3c:7c:f3:9f:71:c6:f2:18:4f:1a:37:29:21:92:
                    57:c2:db:aa:32:68:4f:1c:48:f6:ae:d7:dc:36:07:
                    29:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:47:FE:B9:9E:3A:E0:01:02:8D:17:C9:9C:FC:3D:82:35:E9:0A:D2
            X509v3 Authority Key Identifier:
                keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:28:06:50:32:80:71:41:7f:4c:c5:91:b1:0e:8f:df:63:fc:
         ed:88:da:cd:57:fc:84:3e:1d:16:2f:85:55:40:6a:b5:ab:2f:
         85:a7:5b:5f:39:81:5a:f4:ec:20:a9:f1:4a:9c:24:14:c6:d1:
         16:60:6c:35:a4:b7:8a:ec:9b:5d:80:1d:e6:7c:de:fa:02:0b:
         db:78:f4:00:37:13:1a:7a:48:77:b9:77:bf:b4:8e:cf:76:ba:
         6c:ab:44:1f:5b:75:0e:fe:1a:c8:e1:83:81:3c:a7:9f:93:d9:
         75:4e:32:60:14:87:a1:11:9e:98:3b:ae:71:7c:1e:d7:00:96:
         58:20:57:2c:ce:8e:c9:12:21:d8:1b:a1:fd:8f:54:81:84:f5:
         6a:ac:01:8f:aa:4a:c8:d2:db:88:e0:ff:af:33:ef:12:e7:9c:
         5c:74:7a:c4:b2:65:1e:02:92:7d:e5:83:d2:4a:80:6f:65:40:
         06:e2:da:e8:f6:64:74:f5:af:24:c3:1b:64:54:c3:c2:85:01:
         8c:61:43:c3:a3:e0:f1:fb:c3:a2:c6:a2:d3:18:c0:bb:b5:42:
         08:a0:b2:8e:27:5e:64:8d:ce:77:fa:5f:a8:42:1f:12:74:2a:
         d8:27:4c:89:61:c1:4a:bc:8b:5b:b0:b7:d5:f2:c1:0b:6b:fc:
         48:ef:4f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:01:12 2026 by rpki-client