Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          h1vg2j5CNULy6EX77AZh2pX62YLOK8zAPNeuu8YJbSQ=
Subject key identifier:   A9:A1:FB:0F:07:11:CD:2C:8A:C7:45:79:5D:0A:A0:9E:41:CD:98:31
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019C680A4D90660F0FC97256C3A8CA4EB4ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          1039
Signing time:             Mon 16 Feb 2026 20:00:31 +0000
Manifest this update:     Mon 16 Feb 2026 20:00:31 +0000
Manifest next update:     Tue 17 Feb 2026 20:00:31 +0000
Files and hashes:         1: BER7jGO8I5iYjkTrcND0slZ5a14.roa (hash: zBr5jX84fYtYB5VXfo1ZqvBELNbpywjIMLIB4xZ1YIs=)
                          2: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          3: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: gyvZnOfRO9egHBZCxH+ekvfKr0rmq8L97EeyP/cVGf4=)
                          4: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          5: wnQxwp_lBcwaYlV8R_aLBhYHQ_4.roa (hash: +gVljvgpDov6yW4C4I3llwkta8lISO5nE4TcWGYyKfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Feb 2026 20:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:68:0a:4d:90:66:0f:0f:c9:72:56:c3:a8:ca:4e:b4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Feb 16 20:00:31 2026 GMT
            Not After : Feb 17 20:00:31 2026 GMT
        Subject: CN=a9a1fb0f0711cd2c8ac745795d0aa09e41cd9831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:42:2f:0c:88:ca:62:7c:0c:7e:a3:1a:a5:c0:
                    29:fc:51:5f:80:ef:82:a6:d0:c7:63:bf:bf:92:16:
                    2a:4e:86:c1:3e:44:9f:88:ea:64:7b:41:a1:29:b1:
                    34:c8:86:42:9d:8c:15:15:be:40:e8:7e:d5:36:c1:
                    db:03:9c:23:44:ff:2d:4d:52:df:7d:04:c3:ad:e2:
                    b8:fb:ed:a4:ff:53:89:57:f5:e3:c6:73:d5:fc:3d:
                    9b:97:9c:85:d7:9c:8f:16:51:15:23:08:ad:b5:0e:
                    00:9c:be:b0:64:9c:f5:67:db:6c:3e:d5:e4:dc:f7:
                    c7:46:9b:dd:8b:0b:b7:fe:bb:68:89:70:82:e3:12:
                    02:fc:50:89:8a:11:92:ef:bf:dc:66:84:8d:78:1e:
                    cb:ad:91:63:4a:90:26:db:02:30:30:05:e9:bc:b1:
                    59:83:54:44:46:ef:0f:1c:1b:f8:8c:1e:33:ba:58:
                    fa:43:69:a8:9c:57:81:24:0b:33:9a:25:77:a2:97:
                    ba:a7:d9:28:2a:ed:70:67:a8:d9:d1:5a:8d:23:23:
                    74:27:f5:bc:72:1d:c4:ea:95:78:f6:48:9c:88:b5:
                    6e:f4:6a:c9:45:c4:86:c5:6a:b5:fb:06:ec:89:06:
                    0d:d2:f0:c6:1a:11:19:20:ea:24:b9:0a:79:2a:54:
                    8e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A1:FB:0F:07:11:CD:2C:8A:C7:45:79:5D:0A:A0:9E:41:CD:98:31
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:28:a8:ed:25:33:02:56:d4:7b:b8:28:64:46:b2:49:db:52:
         82:46:3a:8e:ec:9d:3c:94:43:bb:32:ef:b2:c5:70:66:0d:02:
         68:f2:eb:07:17:8f:e8:53:11:5b:c8:a7:75:a9:28:fc:1b:61:
         fd:ce:39:5f:18:3e:f9:19:9a:8d:48:6d:68:f6:7d:e7:16:e2:
         3b:c3:2e:f8:57:bb:42:bc:3d:b7:02:7f:84:30:8c:dc:c7:b2:
         25:f9:fe:6d:a2:2a:09:43:57:6f:78:aa:21:54:0a:58:e1:05:
         eb:0f:ec:3d:cd:ef:16:07:77:c5:8d:8b:ff:e5:85:f2:82:3e:
         c0:9c:14:c1:d7:77:cc:8d:40:79:71:c2:e6:02:5a:63:9d:4f:
         87:98:02:2a:29:8b:be:84:9a:cf:9b:0d:10:f8:65:95:12:9b:
         44:8d:c7:69:33:3c:b9:e3:ac:65:e0:f0:8f:29:a2:43:76:1e:
         79:f7:cb:de:96:c0:ca:97:c2:33:cd:e1:7a:60:00:8f:fa:88:
         d9:26:f5:d2:35:61:48:bd:df:07:82:84:e8:fd:71:90:e5:3d:
         04:ae:05:c8:56:05:b1:19:dd:a8:a6:97:31:ab:e9:f7:a3:22:
         cc:dc:8a:25:50:37:df:45:89:d5:72:af:d8:7b:3a:d8:25:1b:
         55:e9:56:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 03:59:32 2026 by rpki-client