Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
File:                     UAm8siUutkaQLMv9TJhssMK5E5g.mft (raw, json)
Hash identifier:          LbNWVmtoCy8FVmh+Yr3Gjfv5VttJ/qnRH6th6z38F5Q=
Subject key identifier:   69:11:16:85:6E:41:61:EE:2A:93:DE:79:1C:FD:98:D3:8C:F5:95:FA
Authority key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
Certificate issuer:       /CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Certificate serial:       019C6A9E26A70ED4315417733CAF0DFA88DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
Manifest number:          0332
Signing time:             Tue 17 Feb 2026 08:01:15 +0000
Manifest this update:     Tue 17 Feb 2026 08:01:15 +0000
Manifest next update:     Wed 18 Feb 2026 08:01:15 +0000
Files and hashes:         1: UAm8siUutkaQLMv9TJhssMK5E5g.crl (hash: dpUn6WxvNkl3GH9TW5kAx26iUT5Ncil/+OE8FvFErtw=)
                          2: s2NzqhDpn_MIzIu3sU4Nnz5OdmI.roa (hash: gFIZdnfNAaCxSgU4XX/5DvqZKxy3vUU3BhECHFZPGJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Feb 2026 08:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:6a:9e:26:a7:0e:d4:31:54:17:73:3c:af:0d:fa:88:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
        Validity
            Not Before: Feb 17 08:01:15 2026 GMT
            Not After : Feb 18 08:01:15 2026 GMT
        Subject: CN=691116856e4161ee2a93de791cfd98d38cf595fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:21:05:33:25:fc:5a:85:e4:0d:7b:da:6b:32:
                    d5:e8:b0:3d:f9:f3:ec:b3:29:3f:d9:24:3d:c5:b2:
                    a0:b8:46:c7:9d:49:43:96:8a:6f:bf:66:2a:e0:23:
                    e2:2b:2a:ec:1f:4e:ee:3b:ec:af:44:f5:7a:f0:7a:
                    36:b6:28:24:d7:be:8a:c9:87:97:fc:da:ed:0f:da:
                    6c:18:ed:9e:30:f8:c3:30:60:69:0a:55:9a:1d:9a:
                    96:e8:24:d2:85:69:ef:43:7b:3c:b1:07:7d:8d:29:
                    4f:10:e3:28:91:29:a7:83:09:9b:82:cc:4a:76:38:
                    7d:3a:65:6c:ca:46:b7:76:7b:7b:9c:b2:3c:e7:db:
                    11:bc:ae:dd:26:af:77:69:76:14:c8:79:4b:ff:cf:
                    4b:2e:7f:69:f6:14:bd:43:12:63:ff:4d:d4:8b:57:
                    cf:3b:09:2d:6b:c2:f7:96:cf:36:ed:aa:b1:52:41:
                    6e:3e:51:37:45:8e:83:60:2f:19:bc:35:80:83:91:
                    f6:9f:d8:2e:5a:0f:d5:d1:14:8d:76:38:8d:2e:69:
                    08:69:8d:0a:5b:40:a8:1b:a4:e6:a5:f8:d5:52:e0:
                    35:2e:f9:71:2d:1b:f3:e5:86:08:b7:1c:97:e3:17:
                    fb:0b:d0:d8:58:e2:94:b4:52:c0:12:b2:e6:bb:5a:
                    a9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:11:16:85:6E:41:61:EE:2A:93:DE:79:1C:FD:98:D3:8C:F5:95:FA
            X509v3 Authority Key Identifier:
                keyid:50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:05:c5:4f:80:e3:05:0e:d5:3e:8c:c2:32:2a:e2:b4:3e:7f:
         1f:5d:6d:2c:90:a6:37:cd:1b:b0:84:e8:60:21:e5:29:7e:ec:
         ad:3a:5c:46:c1:7c:18:41:3d:04:52:a6:fe:9b:4e:a3:e7:c9:
         fc:b3:ee:83:0b:ee:a8:96:1a:9e:25:fb:e6:13:94:39:a6:33:
         c4:4f:de:c8:9c:c8:1e:18:b5:95:bb:fd:fa:db:70:02:0f:a7:
         8f:8b:a7:37:1d:41:bd:05:ef:cf:ce:31:c7:13:e8:93:0c:db:
         b9:96:97:b1:d9:25:0d:b3:00:3b:c6:a6:be:37:93:31:de:df:
         6a:12:26:b6:ab:2e:8f:c9:d3:57:b4:f8:83:d4:7e:da:f5:de:
         f8:83:3c:5e:33:61:50:e6:59:9d:0a:76:76:c7:63:45:29:50:
         5e:08:e2:50:4e:6a:6b:89:e2:c6:a6:cc:f5:ea:cb:46:c2:af:
         bf:5b:9a:00:c4:b9:2c:87:c4:6f:94:80:3a:fd:d0:5e:31:5d:
         6e:83:8a:23:9e:37:02:b2:e0:07:b3:70:69:ce:05:59:b2:bd:
         19:4b:6c:be:95:b2:19:52:b8:01:bf:5f:b3:76:73:63:9f:92:
         82:cb:91:e5:1e:7f:b3:9a:93:ca:a6:88:3f:7a:21:ae:3c:aa:
         3b:0a:e3:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxqnianDtQxVBdzPK8N+ojbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMDliY2IyMjUyZWI2NDY5MDJjY2JmZDRjOTg2Y2IwYzJi
OTEzOTgwHhcNMjYwMjE3MDgwMTE1WhcNMjYwMjE4MDgwMTE1WjAzMTEwLwYDVQQD
Eyg2OTExMTY4NTZlNDE2MWVlMmE5M2RlNzkxY2ZkOThkMzhjZjU5NWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SEFMyX8WoXkDXvaazLV6LA9+fPs
syk/2SQ9xbKguEbHnUlDlopvv2Yq4CPiKyrsH07uO+yvRPV68Ho2tigk176KyYeX
/NrtD9psGO2eMPjDMGBpClWaHZqW6CTShWnvQ3s8sQd9jSlPEOMokSmngwmbgsxK
djh9OmVsyka3dnt7nLI859sRvK7dJq93aXYUyHlL/89LLn9p9hS9QxJj/03Ui1fP
Owkta8L3ls827aqxUkFuPlE3RY6DYC8ZvDWAg5H2n9guWg/V0RSNdjiNLmkIaY0K
W0CoG6TmpfjVUuA1LvlxLRvz5YYItxyX4xf7C9DYWOKUtFLAErLmu1qpFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkRFoVuQWHuKpPeeRz9mNOM9ZX6MB8GA1UdIwQY
MBaAFFAJvLIlLrZGkCzL/UyYbLDCuROYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2Mt
ZDVkYTg1OGUxNWZiLzEvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2MtZDVkYTg1OGUxNWZi
LzEvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHgXFT4Dj
BQ7VPozCMiritD5/H11tLJCmN80bsIToYCHlKX7srTpcRsF8GEE9BFKm/ptOo+fJ
/LPugwvuqJYaniX75hOUOaYzxE/eyJzIHhi1lbv9+ttwAg+nj4unNx1BvQXvz84x
xxPokwzbuZaXsdklDbMAO8amvjeTMd7fahImtqsuj8nTV7T4g9R+2vXe+IM8XjNh
UOZZnQp2dsdjRSlQXgjiUE5qa4nixqbM9erLRsKvv1uaAMS5LIfEb5SAOv3QXjFd
boOKI543ArLgB7Nwac4FWbK9GUtsvpWyGVK4Ab9fs3ZzY5+SgsuR5R5/s5qTyqaI
P3ohrjyqOwrjww==
-----END CERTIFICATE-----
Generated at Tue Feb 17 15:22:54 2026 by rpki-client