Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File:                     1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier:          4+ttM+FShPF8woisb5i1jaCIMQQaQDbk/ZknRQfdYqg=
Subject key identifier:   19:7F:66:AB:2B:32:C1:DE:41:F8:67:1E:F5:FB:E7:B4:94:B6:66:80
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       3FCD18049354B85EFCEBAED6D2A3F8E78FC58487
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number:          037D
Signing time:             Thu 19 Feb 2026 18:41:39 +0000
Manifest this update:     Thu 19 Feb 2026 18:36:39 +0000
Manifest next update:     Fri 20 Feb 2026 19:21:39 +0000
Files and hashes:         1: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
                          2: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
                          3: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
                          4: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=)
                          5: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
                          6: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=)
                          7: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=)
                          8: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: dEks2mQdZLpzKX1u0ncsFpdioZS+gQNyye4Z/Mo/OD0=)
                          9: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
                          10: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=)
                          11: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
                          12: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
                          13: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
                          14: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
                          15: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
                          16: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
                          17: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Feb 2026 19:21:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:cd:18:04:93:54:b8:5e:fc:eb:ae:d6:d2:a3:f8:e7:8f:c5:84:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Feb 19 18:36:39 2026 GMT
            Not After : Feb 20 19:21:39 2026 GMT
        Subject: CN=197F66AB2B32C1DE41F8671EF5FBE7B494B66680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1c:85:b7:23:eb:37:6c:24:cf:cc:6c:a6:a5:
                    80:33:78:68:30:33:e3:52:8b:ba:19:8f:24:62:b5:
                    30:d2:1c:e8:27:a6:b8:3b:0c:a1:7a:8c:b5:87:63:
                    75:23:62:00:e2:8f:75:00:18:0a:3b:84:f6:e0:b1:
                    58:5e:e8:88:52:3d:ff:de:bf:d2:0c:8a:30:c1:02:
                    82:61:61:45:6c:d5:4b:75:a1:46:3e:6a:7a:83:29:
                    84:bd:90:dc:65:79:24:b5:d5:d7:65:86:43:b2:c0:
                    b1:9d:01:5e:f4:3e:21:ae:79:bc:8d:6d:f3:ea:72:
                    54:02:49:57:e7:56:47:d4:8f:30:53:20:b1:50:ef:
                    0e:a1:66:71:f8:0f:39:75:5c:e9:ce:f3:90:f7:e5:
                    c3:6e:3b:d6:96:33:3e:7a:66:cc:1a:9e:0b:74:49:
                    c9:6b:84:d8:af:73:a3:93:68:37:84:01:87:2a:76:
                    28:a3:59:fd:66:1c:8e:0e:a3:35:9f:35:23:54:b1:
                    a8:a7:45:96:13:f3:51:e2:34:a0:58:36:9e:64:2e:
                    1a:7d:fb:dd:7a:f2:9b:a1:a8:96:01:b3:1f:42:23:
                    7d:39:82:14:74:61:86:2a:d3:79:53:72:31:8a:2e:
                    e6:52:9c:41:51:b6:b2:58:e4:c4:44:bd:3a:ab:cf:
                    a6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7F:66:AB:2B:32:C1:DE:41:F8:67:1E:F5:FB:E7:B4:94:B6:66:80
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:50:81:8b:00:5c:a8:45:73:49:fc:0c:dd:16:cb:a3:dc:a4:
         51:e1:54:15:8c:9e:54:29:44:85:73:a9:23:90:53:03:d8:32:
         0b:4b:38:fe:0c:d0:18:c9:8b:3a:e0:af:7a:47:81:2e:4a:67:
         68:04:d1:15:d6:d5:cb:0a:0f:85:cd:0a:0a:41:8a:68:1a:ee:
         36:d1:d4:f5:a7:79:36:97:a6:25:be:a2:5d:c3:44:19:9c:bc:
         2e:c7:f1:6d:d0:0f:1b:97:60:e4:be:05:b3:2a:bc:c7:e8:f5:
         12:dc:38:bb:c5:ce:42:b2:2e:82:e3:1a:99:34:31:71:77:3c:
         d1:3a:0d:1d:19:d5:47:2f:4f:5a:ff:e1:5b:76:c4:bd:99:5b:
         59:d6:a1:7b:d0:12:b8:82:4a:c3:04:15:77:09:44:ea:9a:24:
         50:ae:a9:40:f5:ae:1e:7f:1f:4c:70:b9:73:32:57:44:65:7f:
         40:15:a2:cc:7d:1e:d3:34:4d:7b:ba:c0:aa:c7:82:58:d0:68:
         ca:14:13:ee:b2:63:76:4e:42:f8:7d:0e:93:de:df:6c:ce:9a:
         67:5b:91:26:41:d2:dd:30:0e:fc:f9:5b:17:ff:c5:1b:9e:f4:
         8b:9f:d4:7a:c5:fa:cd:6f:68:5d:70:93:cc:e8:06:64:08:73:
         e5:b7:df:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 09:44:45 2026 by rpki-client