Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
File:                     r26u_xI8pnRG0OSUAeSVBXB44XQ.mft (raw, json)
Hash identifier:          GOAJ0G8YnKTs8gjljREBbCP5l/6ygnmz8Eee2NCo9v4=
Subject key identifier:   6F:2E:0D:31:0B:84:DD:B1:8D:A3:3F:7A:FF:9D:3E:2A:5B:17:76:B6
Authority key identifier: AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
Certificate issuer:       /CN=af6eaeff123ca67446d0e49401e495057078e174
Certificate serial:       019CAAFD38F2E3321DB61A571769492A1598
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
Manifest number:          0870
Signing time:             Sun 01 Mar 2026 20:00:47 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:47 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:47 +0000
Files and hashes:         1: Toj2MXLv_0tnvaOa8SabyfyAH7M.roa (hash: LJgBJJsZvDC+Ue6FuF++Df+Q+t0hp3VFYM3vhkZt4FQ=)
                          2: liwxDT5LJpIXlKlVZ9n6p87PfOI.roa (hash: BOe25rjjRQ8tqwHFLqCfoig+Bv/rJP70vjeo2DPMR9c=)
                          3: r26u_xI8pnRG0OSUAeSVBXB44XQ.crl (hash: +7psmZBweRUQhaE4WJpJaZNouiwLUWkgkEbawOD8kU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:38:f2:e3:32:1d:b6:1a:57:17:69:49:2a:15:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af6eaeff123ca67446d0e49401e495057078e174
        Validity
            Not Before: Mar  1 20:00:47 2026 GMT
            Not After : Mar  2 20:00:47 2026 GMT
        Subject: CN=6f2e0d310b84ddb18da33f7aff9d3e2a5b1776b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:a3:07:14:49:81:e0:fa:41:17:b9:88:6b:
                    9a:b9:11:01:08:d1:68:30:c7:93:09:af:bc:87:fb:
                    dc:2d:33:66:81:2c:78:b5:0b:75:97:23:7a:2d:6f:
                    47:f7:23:aa:bb:92:f7:09:b9:6d:2e:34:e5:be:16:
                    09:69:e3:5f:0b:a2:3c:9f:96:8d:af:b4:13:df:d4:
                    d1:43:f9:a7:d8:26:38:63:8f:b2:91:2d:91:ae:c0:
                    68:bf:69:02:f2:66:0d:f1:eb:ce:c8:2d:3b:92:e0:
                    4c:63:f0:40:31:68:d6:37:0b:c8:77:fd:bd:36:e1:
                    3b:28:9c:ba:f2:43:3e:aa:c5:08:35:02:f2:1e:48:
                    f0:ca:d4:33:c8:12:40:e8:e8:e3:f6:a6:18:b6:5a:
                    3c:71:57:a8:59:80:bc:c2:ca:e0:b9:fd:4f:69:09:
                    ac:17:d5:6e:af:ec:3b:68:76:82:b6:02:a3:fb:26:
                    b9:f9:f2:b8:ad:1d:32:7b:c3:82:d9:84:ee:88:7b:
                    cd:7b:74:3e:61:23:54:33:98:91:db:4e:60:26:75:
                    94:c1:0e:d4:68:fd:d2:7c:5c:2e:af:e4:1d:f6:7e:
                    b9:00:ef:f7:55:01:63:37:95:b4:9b:e8:2f:53:dc:
                    ea:e8:eb:c9:9d:8b:42:c5:e8:df:57:b9:6e:99:52:
                    c1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2E:0D:31:0B:84:DD:B1:8D:A3:3F:7A:FF:9D:3E:2A:5B:17:76:B6
            X509v3 Authority Key Identifier:
                keyid:AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0d:6d:dd:18:f8:27:9b:ab:99:a5:55:ba:f3:c2:bb:f6:f2:
         82:de:93:da:c5:98:59:f2:03:05:40:18:d3:30:ea:eb:1f:92:
         f9:69:6c:9d:58:f1:62:3c:70:97:b1:a1:7b:d6:1a:6e:0c:57:
         ca:34:8e:2c:40:82:89:d9:e6:ed:45:0b:83:ad:a6:ac:5d:82:
         7d:a6:9c:ee:37:cb:37:ee:63:ae:25:7b:f5:13:87:5e:fc:31:
         39:19:41:51:3f:fb:79:f7:af:64:76:dd:ee:4e:38:03:cc:b2:
         cc:12:7e:98:bb:a7:2c:cd:fb:8c:68:07:d6:4b:f1:7f:4e:0f:
         df:5e:17:f4:5c:80:68:15:a6:d6:02:62:01:d5:f8:88:00:27:
         9c:5e:2b:1d:d5:8b:17:81:3f:74:ae:66:b7:ff:b7:ac:6a:1f:
         fb:94:ab:de:2f:0e:16:c8:e7:c1:ef:a7:ba:66:20:c6:bb:a4:
         56:be:98:2c:31:f3:b7:3e:fd:50:40:ed:81:c5:fd:6b:23:9b:
         15:e9:85:93:c9:59:b8:c1:d2:82:33:5b:26:61:15:90:69:5e:
         4a:c0:ae:96:28:a4:aa:05:92:a2:1a:a4:92:f3:d6:b2:c4:37:
         80:2b:61:16:b2:6f:fb:04:03:67:a6:58:ba:8d:8d:a3:21:0a:
         3e:ea:a7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:42 2026 by rpki-client