Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
File:                     wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft (raw, json)
Hash identifier:          dNg8Ve4O2ODU4YOEsl+3ylalSLqfn5J2nX6bY2OXFnU=
Subject key identifier:   E3:95:CD:72:6A:BD:20:CD:05:7E:A6:BA:C0:EE:94:97:91:E9:22:B4
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Certificate issuer:       /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial:       019C7CDB44BEA4BCCE68CCDC7A7B3B9D6771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
Manifest number:          1837
Signing time:             Fri 20 Feb 2026 21:01:10 +0000
Manifest this update:     Fri 20 Feb 2026 21:01:10 +0000
Manifest next update:     Sat 21 Feb 2026 21:01:10 +0000
Files and hashes:         1: U4zW5QS2curvW1WWlXvfaZ-FFgE.roa (hash: urvPIf0emVxN+h0vEZuEnLmYIlJrl/akSOeGv1xVrhA=)
                          2: ctn8OcjHsscIiuWYKmIzKXk2VTM.roa (hash: MIK/LTNuaSONUvFAQ4mc503oI5bKuGPz3d2eDJ+oDhw=)
                          3: nqeAxh-Zvj9N-HZ0Z_oqfMzPECY.roa (hash: EA0w8mnUHsfVGiJBXY9XWwK4qgczfc6YuAq1VlWZzqM=)
                          4: vpaPc9gcyQc1zzzbJkF9n75zDFw.roa (hash: 8O4KfD0Ddn9u3Kh4fXZU6pj1hG4jVkxChi5IINDrduI=)
                          5: wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl (hash: vxtvQsFs6K4Ec8YxOr6G+sEu11b66PjMq0d46zQs5es=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:7c:db:44:be:a4:bc:ce:68:cc:dc:7a:7b:3b:9d:67:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
        Validity
            Not Before: Feb 20 21:01:10 2026 GMT
            Not After : Feb 21 21:01:10 2026 GMT
        Subject: CN=e395cd726abd20cd057ea6bac0ee949791e922b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3e:61:d6:7e:10:0a:74:d3:24:d5:d6:49:f3:
                    1f:29:02:2b:8a:a0:bd:a7:2d:45:9a:fb:9c:65:d7:
                    4c:56:fb:f5:7f:83:42:4d:7d:5e:60:ec:cd:36:9f:
                    58:14:5e:7b:5b:aa:ee:22:a6:dc:7c:cc:55:72:6c:
                    68:b3:8a:fd:ae:c9:e2:65:44:88:e3:57:5c:49:ee:
                    81:79:1a:b3:0b:14:05:1d:9d:25:c3:f1:5b:ff:26:
                    0f:ba:cf:6c:57:c4:c0:16:61:1e:ce:e7:88:b5:7a:
                    98:a8:b8:c4:f3:74:27:51:49:58:3e:b8:95:f5:51:
                    df:55:68:92:e8:94:df:23:5d:cc:a4:ab:49:f7:83:
                    1d:ca:f0:71:42:5a:37:0c:78:ec:37:ca:e6:27:47:
                    c9:b3:9d:e4:23:d2:14:0c:52:df:19:72:cc:a0:0d:
                    59:47:e4:63:99:98:b3:a0:e9:aa:83:9f:63:bf:79:
                    e1:12:aa:7a:93:23:13:a1:72:48:20:26:a5:41:44:
                    fc:3d:a2:be:21:c8:80:e0:a7:b6:42:ea:61:16:f8:
                    c1:8f:cc:db:b2:74:e6:46:55:3b:87:7c:e0:c3:34:
                    9f:66:10:59:91:23:f6:c2:a8:da:fd:a4:cc:49:8b:
                    03:c3:62:fb:ff:45:aa:0c:72:6d:09:7c:ea:9b:3f:
                    91:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:95:CD:72:6A:BD:20:CD:05:7E:A6:BA:C0:EE:94:97:91:E9:22:B4
            X509v3 Authority Key Identifier:
                keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e2:4d:f5:1b:d2:b1:88:8e:3e:4e:16:d5:1b:34:9c:a4:b9:
         cd:e1:a2:e6:1b:0c:30:7a:5f:9e:5f:79:f6:1c:b4:3b:15:cb:
         88:29:62:07:4f:2c:92:66:04:ad:d4:2f:b4:4f:d5:7d:3a:54:
         bb:9b:19:7c:d5:78:b5:a7:64:82:96:8b:11:eb:0e:76:6d:15:
         d7:bc:42:5e:ca:5f:41:e0:43:5b:df:a7:51:f5:a5:28:52:50:
         fb:e8:b9:76:8b:de:c7:a5:b9:21:f9:73:da:bb:bf:a5:fa:10:
         cd:e5:b7:14:81:11:3c:d3:40:2b:50:c7:eb:13:26:29:cc:78:
         2d:ba:5f:b1:2c:b8:76:a1:7d:83:a9:cb:2f:b4:f4:03:4c:43:
         ad:df:9c:0a:fc:ed:18:d1:b1:df:6f:0e:71:ab:9b:41:7b:02:
         0b:49:08:d9:84:fa:af:53:fe:55:a4:5d:b2:71:aa:84:d8:27:
         57:15:0c:28:64:0e:3b:fb:f2:39:42:f8:00:26:bd:2f:ec:9d:
         fa:9d:72:70:9d:fb:c6:9b:27:42:6f:5b:3e:a9:a9:b1:ad:06:
         56:b5:7c:ee:8b:0e:67:36:66:30:83:f2:a5:64:e6:43:97:9c:
         6f:db:f4:61:20:de:0a:be:8f:f8:c7:05:83:f8:83:86:b8:96:
         f8:7a:98:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 06:08:45 2026 by rpki-client