Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File:                     1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier:          tXsH/Fu/0UQu7iA1tppEGvrsKIhUEk2h01+LC+Hsfug=
Subject key identifier:   0D:72:E1:38:36:E6:75:DD:AC:87:F8:88:BD:DF:25:5D:02:5B:A7:26
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       7357E6B11BC59751F78F20768FD94C8F4DFC2554
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number:          0383
Signing time:             Tue 24 Feb 2026 04:21:40 +0000
Manifest this update:     Tue 24 Feb 2026 04:16:40 +0000
Manifest next update:     Wed 25 Feb 2026 07:29:40 +0000
Files and hashes:         1: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
                          2: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
                          3: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
                          4: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
                          5: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
                          6: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
                          7: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=)
                          8: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
                          9: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: 7UvWez1ClnHbF5lEVfiPzs8Mcmk9Gnrjs4Yhobt8XHw=)
                          10: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=)
                          11: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
                          12: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=)
                          13: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
                          14: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
                          15: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=)
                          16: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
                          17: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 25 Feb 2026 07:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:57:e6:b1:1b:c5:97:51:f7:8f:20:76:8f:d9:4c:8f:4d:fc:25:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Feb 24 04:16:40 2026 GMT
            Not After : Feb 25 07:29:40 2026 GMT
        Subject: CN=0D72E13836E675DDAC87F888BDDF255D025BA726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:8d:cd:2c:72:04:c1:0f:50:28:03:53:bb:
                    a3:fe:d5:f0:59:75:55:40:28:94:35:ba:e4:9c:0d:
                    6c:71:bf:7e:e6:85:53:4b:68:40:6b:1d:06:d9:ef:
                    0e:f8:78:b7:e0:1a:89:74:31:29:85:b1:5e:82:f1:
                    1d:c5:dc:56:a1:54:fe:7d:08:a0:7d:cf:6d:63:83:
                    79:a1:a4:4b:aa:7d:36:75:74:b6:95:e0:4a:7b:22:
                    4a:01:ed:ca:c1:fe:10:2a:33:a2:93:3a:b0:e9:52:
                    06:4c:c1:db:87:18:01:6a:7b:69:db:fc:7f:bc:78:
                    92:93:98:01:90:7c:17:6e:0c:c4:e3:ec:e4:20:c4:
                    e6:4a:06:dc:cf:e3:63:42:b3:52:b6:68:30:cc:7a:
                    ba:e5:de:05:93:58:19:ba:fd:9a:34:13:81:c3:99:
                    0d:b8:b7:12:61:6d:b2:98:43:80:ea:e5:29:14:7b:
                    0e:1f:d0:ed:ca:c4:80:29:a5:26:9c:fd:af:a1:22:
                    4d:ee:ac:ad:a9:b6:7c:00:97:a8:02:6a:13:d0:b3:
                    11:9d:65:d7:c9:d7:b3:89:bc:90:be:c4:16:54:f2:
                    27:2e:6c:bc:c2:49:e7:55:b1:ba:56:94:d2:d9:34:
                    1e:93:6f:e2:d7:90:12:ef:ac:7a:c5:a3:36:b0:01:
                    96:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:72:E1:38:36:E6:75:DD:AC:87:F8:88:BD:DF:25:5D:02:5B:A7:26
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:be:92:ed:fe:6b:47:58:6c:f0:23:48:23:b3:e6:11:f5:20:
         83:14:68:ab:1d:24:87:d1:2e:8a:44:2f:a6:35:25:fc:37:7a:
         81:f4:ea:b5:5e:10:0c:43:9e:c7:f0:49:0c:ae:18:86:25:fc:
         bf:f2:a4:ef:2c:f9:12:33:ea:fd:6f:5b:d6:81:e8:e3:16:7e:
         c9:8e:2d:c1:e3:77:88:ff:31:4e:a7:3a:a0:58:33:de:13:bb:
         60:f0:39:c9:df:32:a6:67:05:7e:a0:b2:29:ef:e5:84:d6:05:
         fb:9b:97:70:64:12:55:29:d9:7b:8f:c1:12:77:cb:04:cf:bb:
         57:32:8d:cd:df:e1:c5:cc:fb:4e:8c:51:b1:19:52:e6:60:f4:
         b8:b9:a8:65:a3:fc:9b:a6:34:68:40:37:ba:ea:08:bc:98:11:
         c3:6f:bb:3b:bd:c2:cd:b5:e3:dd:78:87:c5:16:fd:11:44:86:
         0b:d4:56:e8:7c:b1:f4:95:d9:af:45:4e:2b:03:14:a5:e0:2b:
         c4:10:46:34:04:63:36:e3:9f:f1:d1:76:27:56:24:d0:ff:bb:
         4e:b8:da:d4:1e:cf:5e:98:9b:8f:a3:0e:14:96:bc:f1:4f:9c:
         bf:74:15:5a:82:ba:f1:74:51:42:30:78:07:bd:ef:8e:4d:dd:
         b3:de:91:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 10:49:45 2026 by rpki-client