Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          9WMLFrLjks7Q26+TbIoygSN2M0k0kQ4N6NB3Hsmcpc4=
Subject key identifier:   82:43:4F:37:D7:EF:CB:36:C4:B2:5C:FC:31:44:E5:FD:37:DF:6B:31
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       019C7EC95DBB721A6B44A324F6BD14881758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0EF0
Signing time:             Sat 21 Feb 2026 06:00:51 +0000
Manifest this update:     Sat 21 Feb 2026 06:00:51 +0000
Manifest next update:     Sun 22 Feb 2026 06:00:51 +0000
Files and hashes:         1: 1-1nP27bm3gAzWksm3Aa1woQLmTg.roa (hash: 4vMUg/+4aVf6LxIWRfZOUaawIS1qe+jvPE0nds6yR2Q=)
                          2: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
                          3: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
                          4: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
                          5: Z0BON6E806_VujIu13j4rp4udFU.roa (hash: Dg0DZ41kSt9T8YvEtYfHhtMj9H1Pn0HsQ9ZBprqVWR8=)
                          6: alg23em52u81qKf3TWMm9rQtp00.crl (hash: CFD/W6dyvhJV6TXe6pauwsDvHins6jiaSopNmoIDhmo=)
                          7: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
                          8: kEoI4Ub4_OLWE-S0RHTXasx1pZc.roa (hash: bg1mLEhoNQt0f/1o3/ZGweSMPbQj7CpwZeH2NuHMIpw=)
                          9: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
                          10: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
                          11: ydHPynA-WZZzBfRpPoH9bBYJVFI.roa (hash: zUJBbBQ6fg/i/CM/EnQ7Y0w1oc/UoPQfcnnHrN+aTOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Feb 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:7e:c9:5d:bb:72:1a:6b:44:a3:24:f6:bd:14:88:17:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Feb 21 06:00:51 2026 GMT
            Not After : Feb 22 06:00:51 2026 GMT
        Subject: CN=82434f37d7efcb36c4b25cfc3144e5fd37df6b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2b:dd:25:9b:15:3b:0a:f9:c4:c2:18:b0:05:
                    be:ab:90:07:5c:31:d5:f5:3f:c1:06:38:09:e8:69:
                    af:5b:9d:42:14:e8:72:45:50:a9:5c:fa:ad:63:ab:
                    0d:b5:fd:af:e0:82:bd:10:85:8a:89:98:ba:cb:7c:
                    e5:3d:63:58:5c:09:78:f5:58:42:40:ba:47:ce:75:
                    98:ac:66:27:f0:6d:a7:82:84:ef:4d:76:86:f8:f0:
                    1f:3b:0e:68:31:a5:3c:84:a6:4b:84:13:02:ac:84:
                    74:53:5c:7b:cd:21:d6:c9:37:f6:19:0e:03:33:87:
                    0b:55:d9:d3:24:bd:e1:d9:50:bc:bf:cd:c5:1c:35:
                    c8:8c:c6:06:53:fa:77:19:89:9a:86:b8:f7:b8:9b:
                    41:33:de:fa:8a:5a:f4:62:81:bf:08:55:ec:35:00:
                    98:e7:dd:d0:71:1d:43:5e:5f:1a:b9:f9:67:65:f4:
                    fb:33:52:57:ab:e1:4b:b7:8a:a8:8f:28:04:5c:32:
                    3a:09:ae:3b:69:7f:55:86:33:4d:63:c2:b0:80:56:
                    72:50:46:41:01:1d:e7:0b:3c:2d:86:1a:b0:1e:b4:
                    71:25:4e:93:c5:51:95:56:cb:24:48:c4:14:db:e9:
                    0a:1a:73:9e:c9:31:9b:bb:0b:9b:bb:4c:4f:12:25:
                    df:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:43:4F:37:D7:EF:CB:36:C4:B2:5C:FC:31:44:E5:FD:37:DF:6B:31
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b6:5d:1d:bc:87:32:34:47:31:19:d8:18:d2:7a:92:33:6e:
         33:16:fb:2f:77:aa:1b:a0:5c:9b:af:61:d1:e0:91:37:f5:2f:
         28:a9:83:a4:d4:61:2e:68:67:39:df:25:07:a2:aa:a8:4f:6c:
         8e:24:ce:0d:ca:01:0d:de:f0:0e:1f:d0:fd:f6:8f:be:5b:a6:
         6f:03:5c:4d:de:3b:bf:9e:dc:f1:ac:07:04:08:9b:76:7a:d0:
         ef:ed:b1:23:0e:06:4f:9d:5f:99:74:04:55:ac:81:43:c0:8a:
         bb:6f:44:55:71:31:50:0a:8d:fd:48:14:e7:24:ab:2e:75:23:
         a6:d4:c2:ea:8f:5d:8f:37:44:16:df:f5:f9:3d:68:8f:5a:8e:
         ab:4b:ba:44:bb:10:fc:85:05:b8:e7:a1:b1:74:17:47:1c:7a:
         85:dc:25:a1:eb:63:93:f6:77:77:a1:72:1b:84:9f:39:ee:7a:
         be:40:94:90:a7:75:2f:58:65:14:d8:e3:0c:b0:f0:af:25:18:
         d3:e1:3b:07:23:f7:a6:81:eb:0d:c1:65:0a:70:8b:60:35:6b:
         0c:59:39:4e:43:d0:cb:90:75:c2:48:1c:01:71:6f:0c:81:44:
         de:52:79:a3:d3:06:b5:60:f4:be:77:58:fa:31:7d:9c:99:87:
         05:a4:ec:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 13:57:39 2026 by rpki-client