Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
File:                     E-KBR1t7-ND6H2adWtLeFjXowE8.mft (raw, json)
Hash identifier:          UbSsv0Vpwib/6SDhZxXlfwd8177I2HvuM0cirNsIoFE=
Subject key identifier:   7A:22:C0:31:90:D1:83:E2:40:C7:64:4D:F5:AD:62:65:CE:78:71:68
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Certificate issuer:       /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial:       019C85DE4D9C359E0A90DE2B84B1D5BEA03E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
Manifest number:          1401
Signing time:             Sun 22 Feb 2026 15:01:04 +0000
Manifest this update:     Sun 22 Feb 2026 15:01:04 +0000
Manifest next update:     Mon 23 Feb 2026 15:01:04 +0000
Files and hashes:         1: E-KBR1t7-ND6H2adWtLeFjXowE8.crl (hash: +vxknckiTmDbtW+08s+C7Y2YIyE8Vsxxlmm0myKZD4A=)
                          2: J_Si888mTIUXmJzVcE29O7uvG1U.roa (hash: VmGywc+NvwZVzJ1wiqrPqs8vYg44e/VGLRIHOp7zQZE=)
                          3: MhLZWTXS4S3zmEURdP_TdxvNgJY.roa (hash: 9rV4NDo4H6diAwu7rDUdqQOfSLYPartWt7sMtwpYVzY=)
                          4: d01OZQ1h5yd4zGfVbRIIarVh3s4.roa (hash: Xg/0ZNy0ArMdMbPyTvAy9IQ+pjsxh8KiRBOhFT7eW1Q=)
                          5: kviMEyCZuerPbRSjjOAweNUOX9M.roa (hash: XkVxdbAObzQecFi8jNeAZta/hKgnPT5nn3X0mpt80lw=)
                          6: rxoDYFpq8vIo4tsEseR7hW-PJWw.roa (hash: fCuVig3kLTHc4MXvnEsk4nmU3uAS7Jg8f43kLxgMMuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Feb 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:85:de:4d:9c:35:9e:0a:90:de:2b:84:b1:d5:be:a0:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
        Validity
            Not Before: Feb 22 15:01:04 2026 GMT
            Not After : Feb 23 15:01:04 2026 GMT
        Subject: CN=7a22c03190d183e240c7644df5ad6265ce787168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ea:88:4f:49:27:62:26:1c:4c:bf:8f:5d:4d:
                    cb:66:2a:ab:96:91:ff:49:02:b7:32:3a:3d:c6:a0:
                    9b:e4:80:4f:31:9c:34:2b:c1:94:bc:1d:27:92:00:
                    fd:25:88:8c:37:cd:5b:a2:8f:6e:4c:ed:b1:49:bf:
                    07:ec:c4:f8:06:2e:98:eb:98:12:fb:4e:87:d2:9f:
                    ed:47:6f:33:9b:65:6d:c6:6b:ce:50:35:6b:fa:5f:
                    dc:41:12:30:7f:0e:54:45:2e:2c:4c:0e:22:a2:c0:
                    51:f5:e9:fa:a7:b4:66:66:f6:95:a6:eb:e1:5a:e4:
                    a4:43:03:7e:e3:84:e8:2a:4a:e3:3f:88:5c:14:1f:
                    2d:17:84:84:1d:7e:94:18:5a:1f:04:8c:6c:91:97:
                    1e:47:92:06:17:b9:7f:2f:c9:1b:a0:47:8f:b4:35:
                    c1:6d:0e:49:a3:a5:11:d4:d4:ce:cb:77:9e:26:35:
                    38:fc:e1:98:b9:d6:a9:d6:49:87:bd:85:b9:5c:6a:
                    94:5e:d2:e9:93:b4:61:e9:ca:4d:df:c1:0a:91:25:
                    a3:73:d7:e5:d7:24:59:02:15:ef:4e:51:30:1d:b2:
                    d4:70:22:76:aa:e9:1f:14:74:40:3e:33:52:c5:ad:
                    25:63:85:46:fe:98:cd:0c:f6:0f:66:51:fa:8a:91:
                    0d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:22:C0:31:90:D1:83:E2:40:C7:64:4D:F5:AD:62:65:CE:78:71:68
            X509v3 Authority Key Identifier:
                keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:0f:7c:c3:8c:12:fb:72:59:b6:2d:8b:f5:e5:85:c2:f5:2a:
         62:03:2a:7d:95:6f:bd:59:f9:55:e9:bd:e4:c7:bb:15:82:4b:
         b7:35:7a:8f:7b:d8:79:f7:03:cd:d2:70:0e:cb:af:f5:d5:f5:
         25:db:32:41:df:96:69:70:9d:19:56:0a:33:54:15:ad:be:8d:
         a3:12:1e:51:d6:b6:05:38:b3:a2:55:4b:5c:57:b5:71:7c:b3:
         e5:fe:f1:ae:7e:79:52:70:11:13:3f:ae:7d:f0:22:00:23:2d:
         8c:b1:ce:34:3c:35:07:ac:fd:5b:d1:3a:b9:9f:34:cf:28:d7:
         ae:d1:a1:06:04:e9:d5:4e:ab:4f:58:8f:86:5f:18:da:a0:75:
         cf:59:f4:ce:a9:93:2e:34:dc:63:91:51:72:07:d7:62:38:e2:
         3e:b1:7d:ca:28:1b:88:0c:e2:04:c5:7c:73:4a:1e:0a:b9:f8:
         b1:e9:59:13:d6:57:db:14:9d:12:23:4c:bb:98:a9:a5:91:a1:
         f8:9f:34:e1:9d:ae:16:ad:0c:7d:6d:37:db:b3:4b:d9:46:6b:
         9f:a8:e2:d0:a6:d0:9f:58:ff:23:1d:67:a8:9e:ca:cd:e4:1b:
         0c:c7:f7:6a:86:c7:70:05:26:8e:77:c9:03:65:b5:5c:5a:98:
         ab:20:8f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:45:09 2026 by rpki-client