Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File:                     9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier:          Ffl8H+sVP7Pr7QWeZUKmKFp38wkakqoUlMbrtQq5IYU=
Subject key identifier:   27:0A:4D:DB:46:21:17:17:D1:18:A0:3F:D0:0D:B3:56:BA:ED:24:E8
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer:       /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial:       019C788FE775EB9E1B6D45B6ED297C91EF42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number:          17BF
Signing time:             Fri 20 Feb 2026 01:00:22 +0000
Manifest this update:     Fri 20 Feb 2026 01:00:22 +0000
Manifest next update:     Sat 21 Feb 2026 01:00:22 +0000
Files and hashes:         1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: Ek8XgcdMaFavnEdV5xZj5E7lxFXZck5ztLD+ezvKsWs=)
                          2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Feb 2026 19:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:78:8f:e7:75:eb:9e:1b:6d:45:b6:ed:29:7c:91:ef:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
        Validity
            Not Before: Feb 20 01:00:22 2026 GMT
            Not After : Feb 21 01:00:22 2026 GMT
        Subject: CN=270a4ddb46211717d118a03fd00db356baed24e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:67:7a:8b:1f:ae:76:e9:69:3c:d6:9c:30:
                    ac:23:a6:1e:18:c5:e2:be:c9:59:1d:eb:3f:5d:da:
                    a0:8f:c0:ff:33:9f:41:bb:78:ee:d3:8c:b8:96:b3:
                    bf:71:a1:b5:fd:93:9f:1c:f6:57:6c:07:c1:a9:88:
                    b4:4c:49:7c:7b:f9:6c:f8:04:2f:85:8b:16:33:15:
                    03:30:2c:82:e2:3b:d0:de:fd:07:41:02:8d:cf:49:
                    c2:67:0c:98:1f:b6:9a:1b:31:71:c1:7a:29:76:b1:
                    b3:0e:55:83:9c:b6:13:4c:70:b2:27:62:28:be:0e:
                    80:84:a3:be:94:25:c8:0f:7f:fc:01:4f:c5:f8:fb:
                    a6:83:dc:f8:ca:66:92:e1:3b:b5:c1:c6:20:f4:82:
                    f5:94:8d:8e:32:90:fa:2c:71:6b:9a:26:40:3a:db:
                    cc:93:91:3e:6b:2d:96:b5:3c:cb:91:6a:bc:27:4c:
                    72:88:12:d0:22:8c:43:c4:11:71:ed:70:7e:31:b6:
                    03:46:1b:66:7b:62:9e:6b:a2:2a:b5:4d:eb:9a:59:
                    31:ad:1d:e6:82:1c:7a:dd:3e:da:68:69:d4:c3:39:
                    64:b6:16:31:ea:4b:ac:49:0a:f5:f5:9a:d4:78:67:
                    29:90:da:8a:eb:21:e1:ca:d0:35:1f:ea:19:d7:db:
                    1f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0A:4D:DB:46:21:17:17:D1:18:A0:3F:D0:0D:B3:56:BA:ED:24:E8
            X509v3 Authority Key Identifier:
                keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:df:1e:b6:b6:24:9b:00:31:a9:3b:38:9b:ef:22:05:0b:ea:
         43:e4:81:2f:88:9c:e6:e2:51:6f:27:de:60:50:b0:c9:82:d4:
         ec:08:6f:7c:99:2d:bf:7e:98:23:39:53:1d:a9:2d:df:38:3f:
         56:57:84:88:45:6c:4d:48:cc:22:ce:6c:86:b8:3d:a6:eb:b3:
         a9:17:53:4b:56:73:30:be:24:d6:c9:71:f0:cc:bc:7b:92:c2:
         a9:5b:ee:aa:ce:85:b9:81:fc:67:da:c9:fb:fb:c9:eb:94:26:
         7a:e7:a2:67:63:e6:90:9a:9f:a1:56:75:aa:bb:bd:48:b3:6a:
         f9:34:74:9b:bf:af:d4:32:3b:fc:91:50:3c:fc:b7:d4:3d:b6:
         d9:df:1d:c5:85:db:9e:3a:b1:39:d5:43:f2:b2:86:de:25:18:
         cf:38:c3:99:4f:77:cd:bd:bf:fa:80:b2:65:11:d6:e7:9c:74:
         5a:05:e9:91:3a:0a:86:27:24:43:95:c0:8d:b8:33:23:0b:34:
         e1:b9:f5:33:0c:bf:65:dd:bb:5d:e6:d1:dc:fa:2e:6d:e4:59:
         04:25:e2:57:ff:14:c4:40:fc:a3:e2:a8:5c:4c:1b:24:78:dc:
         bd:c9:3c:21:4c:cd:92:5f:1c:c7:8f:43:8b:d9:d4:35:c4:81:
         46:59:a1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 04:42:33 2026 by rpki-client