Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
File:                     pszH03YZ_dof84uT_s5gq9SYq4Q.mft (raw, json)
Hash identifier:          RA876B/mzFJNWytWfQkg/xPjGX12KxoYwEN4tvnkcho=
Subject key identifier:   DD:59:FD:8A:17:02:E4:21:FC:E5:24:E1:75:FE:7A:67:59:AA:6C:5D
Authority key identifier: A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84
Certificate issuer:       /CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
Certificate serial:       019C7633BC610F365B586C88506E2B1DE289
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
Manifest number:          0124
Signing time:             Thu 19 Feb 2026 14:00:27 +0000
Manifest this update:     Thu 19 Feb 2026 14:00:27 +0000
Manifest next update:     Fri 20 Feb 2026 14:00:27 +0000
Files and hashes:         1: cNWWHlQTLoBnWDX0Cr-HJhDwkyQ.roa (hash: RBDJxnmtcnqGTkRo8S/I5iM/CbwoBW03aRJgb8eIgr4=)
                          2: pszH03YZ_dof84uT_s5gq9SYq4Q.crl (hash: e1Axk5y/UvpK1DeJ6pt519cpN6Ryv52iTZgbEmJiaI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Feb 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:76:33:bc:61:0f:36:5b:58:6c:88:50:6e:2b:1d:e2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
        Validity
            Not Before: Feb 19 14:00:27 2026 GMT
            Not After : Feb 20 14:00:27 2026 GMT
        Subject: CN=dd59fd8a1702e421fce524e175fe7a6759aa6c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:f5:8c:67:12:96:ae:94:75:39:dc:20:fd:
                    32:1c:1a:7e:39:34:6f:9c:ef:e0:9f:24:89:0c:dd:
                    65:29:6a:87:03:85:a2:dd:54:9c:f0:58:c8:1b:ae:
                    f2:1f:a7:6c:fa:54:b4:3d:e8:95:0b:60:b1:d9:ae:
                    9c:7f:a7:d4:5c:e2:00:52:65:81:f7:7d:bd:b0:e9:
                    a7:43:43:c2:e1:14:b5:86:26:cd:39:eb:93:e9:05:
                    59:d6:46:77:1a:26:77:ac:a1:32:0d:ae:45:f6:36:
                    4d:0c:32:35:6a:8b:57:58:31:26:e0:0b:32:0c:f7:
                    65:29:96:0a:96:0b:bd:55:94:c5:17:33:9b:c3:e1:
                    89:c1:1f:35:f8:3b:75:52:cd:2d:e8:8d:6a:b0:73:
                    e4:0f:2e:ef:93:a7:91:0c:dc:34:79:eb:dd:82:4f:
                    d8:27:8c:49:b7:72:39:a9:71:2a:40:a0:ca:18:55:
                    85:59:a8:bc:52:b4:12:59:a0:d4:c8:0e:d7:40:60:
                    50:10:7e:e2:be:37:db:b7:d0:65:20:64:eb:78:d2:
                    85:32:27:ad:0e:68:81:ff:29:6d:37:0a:30:53:8b:
                    6b:3c:ab:47:5c:8f:94:2b:71:d4:19:bd:07:b4:19:
                    5a:66:1d:00:fd:94:6b:74:f7:c8:9c:24:40:30:a1:
                    ab:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:59:FD:8A:17:02:E4:21:FC:E5:24:E1:75:FE:7A:67:59:AA:6C:5D
            X509v3 Authority Key Identifier:
                keyid:A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:4a:d5:f3:11:f0:42:ee:59:9c:82:ee:49:31:0d:ae:ac:48:
         31:ce:d2:52:1d:3c:26:03:e2:19:3c:71:a9:b9:b2:d6:85:96:
         58:18:02:82:4b:d8:2d:3a:47:7a:38:85:f3:ce:ed:e2:39:19:
         10:45:7a:18:02:5a:bb:63:cc:78:61:86:c4:64:e8:48:76:4b:
         42:13:ee:77:5b:6e:d7:bd:b1:53:30:77:7a:fd:34:2a:11:85:
         c0:ab:28:74:dd:b3:21:b0:dd:c3:69:f0:c0:2f:a3:6a:08:ac:
         98:29:b2:7d:81:07:c6:65:7c:cc:7a:70:31:58:65:51:67:f3:
         0f:a1:e7:fb:2c:d0:ff:df:28:4a:4a:83:6b:43:25:82:7e:cf:
         bb:d7:da:79:26:0a:f9:9b:b7:3f:a8:2f:ae:b0:67:ea:86:f2:
         16:a6:e2:9f:3f:31:79:f0:8f:b8:e5:f2:9c:79:a6:af:f2:2b:
         32:15:66:ed:6c:30:b1:db:42:12:23:bf:bd:0b:fb:b1:b8:f3:
         25:18:c0:6f:54:6b:60:0b:fc:be:22:53:85:c0:f5:78:ed:72:
         37:dc:4a:16:7e:74:54:5e:d2:ad:d0:f6:a9:83:00:da:9e:00:
         09:79:c8:21:33:2d:a7:d3:88:5e:68:e7:4e:25:d4:c1:af:b5:
         50:4c:95:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:18:26 2026 by rpki-client