Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
File:                     C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft (raw, json)
Hash identifier:          rS0x39S1kxoiQSzSZlCbWSdEO1ZBF2KAWt2OFKudBXk=
Subject key identifier:   A2:74:55:51:7B:EE:5B:6C:88:14:73:C6:40:FA:16:C4:BA:C0:75:21
Authority key identifier: C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF
Certificate issuer:       /CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF
Certificate serial:       0776080327F1158CCA66D4F3C79C3762AE34914D
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
Manifest number:          02
Signing time:             Sun 22 Feb 2026 16:18:25 +0000
Manifest this update:     Sun 22 Feb 2026 16:13:25 +0000
Manifest next update:     Mon 23 Feb 2026 16:47:25 +0000
Files and hashes:         1: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl (hash: J1YYCE8zeluJrtxtfbBM5sNRGooiKUt2AYGdxrA2sWI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Feb 2026 16:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:76:08:03:27:f1:15:8c:ca:66:d4:f3:c7:9c:37:62:ae:34:91:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF
        Validity
            Not Before: Feb 22 16:13:25 2026 GMT
            Not After : Feb 23 16:47:25 2026 GMT
        Subject: CN=A27455517BEE5B6C881473C640FA16C4BAC07521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b1:32:6f:fa:04:b5:56:f1:a3:87:3b:cc:3f:
                    38:c0:bc:f5:5f:ab:e1:aa:21:3f:5e:b9:46:11:73:
                    7e:fb:e5:41:48:1e:16:8e:ac:6e:74:48:e4:02:7f:
                    e9:b8:25:de:25:24:bd:f8:34:f2:15:a3:f5:a6:8d:
                    e0:5d:cd:17:ab:26:3e:b4:3d:d5:3a:02:61:a5:d7:
                    9a:98:68:80:08:87:73:48:e4:53:7f:30:cd:1e:8a:
                    99:31:db:97:6a:7c:4b:71:3a:2c:19:98:8a:b6:19:
                    ec:11:fe:33:d3:3b:22:80:8e:ef:13:eb:85:a3:c5:
                    8a:3c:72:f9:32:88:61:c5:cc:2c:e5:7b:6c:ea:6c:
                    9a:be:14:02:0c:2c:94:b2:f8:f0:b3:28:10:02:c0:
                    6a:2c:21:3e:38:54:d9:40:7b:a2:37:bf:3c:22:b7:
                    e8:54:cf:44:d4:75:6e:55:69:e8:79:86:84:03:bc:
                    17:65:59:5d:0f:03:3b:f4:3f:57:7e:9b:5f:2c:8b:
                    4b:d6:1c:79:10:04:ae:2c:63:55:2b:c3:f2:f1:8b:
                    a0:3a:e7:d7:c0:f0:77:82:79:9d:5a:95:7f:66:6d:
                    f8:ec:0d:65:f4:b9:cb:c5:f9:31:00:5e:ae:e4:fd:
                    a2:08:43:f9:10:d3:8c:11:3f:54:fd:b8:77:32:a9:
                    d8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:74:55:51:7B:EE:5B:6C:88:14:73:C6:40:FA:16:C4:BA:C0:75:21
            X509v3 Authority Key Identifier:
                keyid:C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ec:e1:f7:50:c7:08:8d:c1:99:9d:13:ea:da:53:04:33:ad:
         6a:1c:50:e1:70:da:2b:ec:7a:96:7f:81:03:4d:a8:c5:93:02:
         20:ba:f0:ab:68:2e:06:bf:c3:b7:cc:98:7a:6b:0e:11:28:7b:
         94:cf:d2:93:59:7c:cc:70:24:e0:f7:4f:51:b5:19:10:f6:0c:
         b7:b5:b2:77:db:88:73:e4:cc:c9:99:9e:24:14:74:8d:76:74:
         61:4a:b7:c3:a0:2d:13:a9:67:d3:b2:e1:bb:8c:05:5d:15:7f:
         22:bf:9d:0a:1c:99:2e:0b:2d:0d:aa:53:cc:26:ad:d1:fc:b5:
         da:28:dd:86:48:1e:4c:96:41:67:ee:4e:d6:ed:cb:c1:d8:5e:
         78:63:e5:db:dc:e1:f0:17:3f:3a:b7:a6:65:cf:57:9f:fb:d0:
         99:c6:0d:89:e1:3b:6e:4d:9c:ce:d6:f9:6b:b1:8c:c3:83:2e:
         89:c5:6e:b3:a1:7e:fa:a3:d6:37:6d:43:5a:e4:fe:48:01:c0:
         9a:45:de:65:24:41:8f:49:a0:f5:70:b6:72:05:13:ca:d1:72:
         d9:fd:8c:41:1b:99:41:f1:55:bd:25:ec:32:e7:ae:9f:81:c4:
         13:ea:a3:91:67:6e:3c:51:ad:45:58:1c:63:93:e1:23:e6:36:
         f0:4a:66:74
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUB3YIAyfxFYzKZtTzx5w3Yq40kU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1
NDEyRDFERjAeFw0yNjAyMjIxNjEzMjVaFw0yNjAyMjMxNjQ3MjVaMDMxMTAvBgNV
BAMTKEEyNzQ1NTUxN0JFRTVCNkM4ODE0NzNDNjQwRkExNkM0QkFDMDc1MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOsTJv+gS1VvGjhzvMPzjAvPVf
q+GqIT9euUYRc3775UFIHhaOrG50SOQCf+m4Jd4lJL34NPIVo/WmjeBdzRerJj60
PdU6AmGl15qYaIAIh3NI5FN/MM0eipkx25dqfEtxOiwZmIq2GewR/jPTOyKAju8T
64WjxYo8cvkyiGHFzCzle2zqbJq+FAIMLJSy+PCzKBACwGosIT44VNlAe6I3vzwi
t+hUz0TUdW5Vaeh5hoQDvBdlWV0PAzv0P1d+m18si0vWHHkQBK4sY1Urw/Lxi6A6
59fA8HeCeZ1alX9mbfjsDWX0ucvF+TEAXq7k/aIIQ/kQ04wRP1T9uHcyqdiZAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUonRVUXvuW2yIFHPGQPoWxLrAdSEwHwYDVR0j
BBgwFoAUw/AsKvOCN3ram1Hy6jcOdFQS0d8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl
YTA5LzEvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEyRDFERi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEy
RDFERi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h
OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS9DM0YwMkMyQUYzODIzNzdBREE5
QjUxRjJFQTM3MEU3NDU0MTJEMURGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+zh91DHCI3BmZ0T6tpT
BDOtahxQ4XDaK+x6ln+BA02oxZMCILrwq2guBr/Dt8yYemsOESh7lM/Sk1l8zHAk
4PdPUbUZEPYMt7Wyd9uIc+TMyZmeJBR0jXZ0YUq3w6AtE6ln07Lhu4wFXRV/Ir+d
ChyZLgstDapTzCat0fy12ijdhkgeTJZBZ+5O1u3LwdheeGPl29zh8Bc/OremZc9X
n/vQmcYNieE7bk2cztb5a7GMw4MuicVus6F++qPWN21DWuT+SAHAmkXeZSRBj0mg
9XC2cgUTytFy2f2MQRuZQfFVvSXsMueun4HEE+qjkWduPFGtRVgcY5PhI+Y28Epm
dA==
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:11:03 2026 by rpki-client