Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
File:                     3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json)
Hash identifier:          vg5krIlVGW7F022fuy8+2nrQAaDsKfun9Ev0VxgDjzg=
Subject key identifier:   D9:DE:6F:0F:65:DA:54:22:44:63:BB:37:A9:B9:E5:6C:DA:D7:CE:33
Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A
Certificate issuer:       /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
Certificate serial:       068BF600B45C291DC4C001F50294FC67399D2144
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
Manifest number:          0296
Signing time:             Sun 22 Feb 2026 17:14:40 +0000
Manifest this update:     Sun 22 Feb 2026 17:09:40 +0000
Manifest next update:     Mon 23 Feb 2026 17:19:40 +0000
Files and hashes:         1: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: uS9rqFKZ07mB8+YZnPlfGTxqPhMI6sgRdMjKP2z7h/I=)
                          2: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (hash: vVLMMj/up4t8BoR2x4+9T6jLFKzm1RRXCwaLQiGBGUU=)
                          3: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: kobgl/Urq0NBA5KGRO8m88eBjRyuJnFBnEEQzzpKvNI=)
                          4: 32332e3139312e34302e302f32342d3234203d3e203331383938.roa (hash: BIc+hyQ1qBCFYW6xfCJ2KWm2W3zeUtGnxmH5EdT5vpY=)
                          5: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: huw/azfVtTuGJ+KiuQkTd/zUzlN/Io2KIFdebZxScmw=)
                          6: 323630323a663764653a3a2f34302d3438203d3e203331383938.roa (hash: D9VdjvhOYF09b5z9awGHcc1wRjsMlbsTgh+JB0uGMwY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Feb 2026 17:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8b:f6:00:b4:5c:29:1d:c4:c0:01:f5:02:94:fc:67:39:9d:21:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
        Validity
            Not Before: Feb 22 17:09:40 2026 GMT
            Not After : Feb 23 17:19:40 2026 GMT
        Subject: CN=D9DE6F0F65DA54224463BB37A9B9E56CDAD7CE33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:05:46:fc:3b:1b:b5:a2:ff:4c:70:3f:14:f2:
                    8b:00:37:8d:01:3a:b7:0e:0d:f4:42:95:33:3c:c4:
                    4d:4b:43:d3:3e:16:4a:8a:72:05:52:9f:69:71:1f:
                    45:10:86:b1:d0:a9:4d:97:97:d1:d0:77:70:e8:b5:
                    7c:b7:7b:b1:3b:73:a3:3d:e4:b2:47:a6:5b:ba:99:
                    b4:69:5c:12:e9:ca:82:95:b1:97:58:3b:b1:3f:59:
                    b2:36:15:9d:45:3f:e9:b5:d8:74:ef:ae:3c:03:e6:
                    d1:a7:ad:59:1e:fb:21:01:cf:27:eb:a4:c0:02:57:
                    63:c7:63:d9:12:2d:35:d2:81:11:0b:bb:8e:08:2b:
                    68:10:14:67:b0:7b:b3:a6:ab:8d:79:03:a8:2a:8e:
                    d6:60:64:ff:63:4f:6d:46:07:2e:00:e1:d2:95:f1:
                    8a:40:49:d9:fe:b7:02:0a:c5:93:6f:24:e0:09:03:
                    cd:a0:cc:fc:7e:6d:ba:83:fd:5c:b2:ec:9b:9b:0e:
                    3f:22:35:3d:2b:34:34:00:8c:78:b4:62:93:5d:87:
                    b6:4b:16:21:af:db:f3:a1:44:49:da:a7:21:3d:e8:
                    88:58:bc:b6:c4:35:97:55:3e:c8:de:a3:82:90:af:
                    36:f1:33:48:64:c5:02:4c:9f:99:3d:8f:c0:b5:09:
                    67:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DE:6F:0F:65:DA:54:22:44:63:BB:37:A9:B9:E5:6C:DA:D7:CE:33
            X509v3 Authority Key Identifier:
                keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:65:3d:da:b9:49:9a:f6:2e:d1:c0:40:8e:31:0f:63:fa:68:
         55:a0:ed:ea:66:8a:93:88:a4:dc:29:64:3b:cd:11:f9:78:6b:
         0a:5c:6b:27:59:93:04:ad:d6:8f:4e:66:9a:31:d3:03:3a:f5:
         12:0f:17:3d:39:09:8b:f9:2c:2b:d2:d2:0b:27:a3:47:f9:55:
         a1:66:e3:eb:78:22:1d:cc:a7:d1:a9:b3:d5:3d:fa:3d:b6:22:
         e3:ac:a3:6f:41:a5:8b:34:5d:a7:c9:26:64:15:4c:c4:76:1a:
         43:29:fa:04:75:90:fb:db:eb:1c:4a:85:61:2d:ce:1e:d4:fe:
         f9:95:87:1d:ea:dc:88:26:f7:b8:7a:e1:b9:2c:3b:a1:da:22:
         64:10:7d:e0:3f:5b:8e:56:0b:a7:65:ba:4d:c1:08:7b:14:c6:
         f5:5d:f9:16:63:29:78:83:8a:74:21:57:fb:75:11:02:0e:57:
         e9:16:a6:3a:9c:6d:09:ef:fa:bd:18:56:98:0a:4e:b5:0f:96:
         43:dc:7f:72:30:cd:90:c1:46:c3:e4:18:c5:9b:15:5c:a9:70:
         a3:16:18:f4:f3:69:57:26:e4:5d:58:4d:11:87:9c:94:62:2e:
         1c:fe:32:68:af:d4:e8:1f:84:d0:3b:fd:76:a5:27:48:ff:aa:
         fb:1b:a8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 20:46:51 2026 by rpki-client