Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft
File:                     FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft (raw, json)
Hash identifier:          OebgdMFf522mylJigZmxJJvgzmKVX/VqwZOa4kR24WM=
Subject key identifier:   20:19:0E:AB:1C:8E:1E:31:28:23:F3:CC:00:06:2C:07:CA:0B:93:8F
Authority key identifier: FE:F3:4F:B0:18:75:09:5E:DA:56:E1:55:47:46:D2:A5:EC:1E:CE:54
Certificate issuer:       /CN=FEF34FB01875095EDA56E1554746D2A5EC1ECE54
Certificate serial:       2781737761A22FBEEF11425077E15B33518A81B3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft
Manifest number:          2E
Signing time:             Mon 23 Feb 2026 01:05:12 +0000
Manifest this update:     Mon 23 Feb 2026 01:00:12 +0000
Manifest next update:     Tue 24 Feb 2026 01:25:12 +0000
Files and hashes:         1: 326131343a373538303a666130303a3a2f34342d3438203d3e20323134333434.roa (hash: UqCNzDGtU5aD3Sfhq0hDlqQDB4EqJwXqpH7M/ZgJ89U=)
                          2: 326131343a373538303a666134303a3a2f34342d3438203d3e20323134333434.roa (hash: D26rbX3psrVmaD+T/bDXuaJV8uOWmhZNX1TYvDQmeqo=)
                          3: 326131343a373538303a666131303a3a2f34342d3438203d3e20323134333434.roa (hash: t0fyMS70w2sKbXm+rw7xWIunJVCWcYTOkdarqGuSj1I=)
                          4: FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl (hash: kQ7ItV6l+NUE1/BXOEN+myoN5RQOmrUcUcFNv1VhLwY=)
                          5: 326131343a373538303a666132303a3a2f34342d3438203d3e20323134333434.roa (hash: q8V2y9WUGOeaflB9on/TGNr/ZKQwKQK7OMK/V1fxCUE=)
                          6: 326131343a373538303a666133303a3a2f34342d3438203d3e20323134333434.roa (hash: lZi2rz69yJ2BC+doYbaqrHrJGm4sWCLa8BxeQ92G0Hs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 24 Feb 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:81:73:77:61:a2:2f:be:ef:11:42:50:77:e1:5b:33:51:8a:81:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF34FB01875095EDA56E1554746D2A5EC1ECE54
        Validity
            Not Before: Feb 23 01:00:12 2026 GMT
            Not After : Feb 24 01:25:12 2026 GMT
        Subject: CN=20190EAB1C8E1E312823F3CC00062C07CA0B938F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1c:e8:c3:b4:f1:82:c6:4b:4c:2e:ed:60:21:
                    90:08:86:ca:e9:34:f1:b9:40:25:af:9a:c6:30:93:
                    d8:96:4b:4a:4c:7e:d1:0e:77:55:25:10:75:24:29:
                    67:bf:81:bc:ed:97:24:8e:06:31:e2:cb:06:98:8f:
                    14:10:24:6e:b8:3a:07:15:b4:5e:28:a3:6f:7d:f6:
                    83:a8:1a:29:d1:b3:96:40:33:b3:7f:94:a3:8f:8d:
                    4d:29:bf:0b:5e:a1:e9:0d:2f:a3:e4:74:c2:41:cd:
                    5f:ae:94:6d:72:06:d9:90:f9:99:50:04:8f:92:0b:
                    96:b3:64:34:ba:63:78:35:f5:92:fb:5b:9a:76:aa:
                    76:50:f3:3e:a9:f0:b8:b7:81:16:c6:6d:d2:f6:03:
                    0c:92:a8:5e:0a:de:63:f2:65:c9:87:30:69:73:83:
                    a8:16:9f:87:8e:f5:fc:d2:8f:7b:a7:3f:a0:53:4b:
                    b8:0b:ef:9a:13:52:b5:3e:7d:4e:11:d7:57:1c:9a:
                    23:dd:2f:e4:b4:a8:2a:49:94:81:ea:78:8e:d0:bb:
                    2b:59:c0:80:79:5c:ce:3b:9a:21:e5:ae:87:ad:48:
                    4c:75:f6:71:70:b0:d5:5e:ee:7b:a0:c1:29:49:f5:
                    db:b4:1d:b0:e1:ca:56:ed:cc:52:a0:2f:c2:89:80:
                    37:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:19:0E:AB:1C:8E:1E:31:28:23:F3:CC:00:06:2C:07:CA:0B:93:8F
            X509v3 Authority Key Identifier:
                keyid:FE:F3:4F:B0:18:75:09:5E:DA:56:E1:55:47:46:D2:A5:EC:1E:CE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ac:b3:f8:9b:25:c4:5b:a1:8b:ba:e7:29:59:c7:23:5e:52:
         22:fa:fd:46:a4:c3:c8:00:dd:2a:7b:12:5c:54:29:f1:4a:2f:
         21:e0:46:1a:06:65:19:2c:63:9c:1e:62:21:b9:bf:1b:d3:0f:
         60:3c:e8:c7:a9:76:43:f3:56:3c:50:d6:05:40:39:ef:a6:b9:
         aa:d7:13:0c:1a:b4:78:1d:4d:d6:11:36:d9:42:67:a4:4e:1f:
         d7:3a:45:e6:8f:41:d0:79:a8:ab:67:59:6d:0d:56:c5:6e:cd:
         a3:f9:e3:b7:30:ac:08:b8:eb:2e:86:e4:61:b6:35:1f:41:24:
         6e:bd:9e:9b:1d:3a:b2:ad:73:8c:1c:e1:96:79:92:07:43:75:
         5f:cb:85:80:ad:87:04:08:4a:86:d7:c3:1d:82:0d:73:19:83:
         61:4c:c2:c1:48:a4:3f:a4:6b:63:e2:79:41:7b:82:58:1d:80:
         be:3f:9c:c9:e1:83:08:87:39:fa:f0:ab:d2:0b:ed:03:ef:5d:
         c9:2a:09:b6:bc:44:f6:11:7f:c2:e8:a0:fa:a0:cc:de:00:4d:
         1c:96:3c:26:92:50:9a:39:82:11:2c:bc:5b:e5:9f:a8:c5:11:
         9d:87:38:f6:51:c3:84:33:a3:40:bc:87:40:46:2b:05:e1:71:
         42:3b:64:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 07:34:41 2026 by rpki-client