Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft
File:                     FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft (raw, json)
Hash identifier:          SBIKI8CH4YWu7wVpH6ulZfxUiUne3gpp+zOvw+RDdrY=
Subject key identifier:   4B:25:D1:BA:0D:E3:C6:56:7A:B3:2E:FA:69:14:4B:8B:4F:3E:A7:B1
Authority key identifier: FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA
Certificate issuer:       /CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA
Certificate serial:       4C3E21D27C536A349917B9E288E3FA086A1CCF9B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft
Manifest number:          C5
Signing time:             Fri 02 Jan 2026 06:56:50 +0000
Manifest this update:     Fri 02 Jan 2026 06:51:50 +0000
Manifest next update:     Sat 03 Jan 2026 07:21:50 +0000
Files and hashes:         1: 326131343a373538343a653730303a3a2f34302d3438203d3e20323134343831.roa (hash: ClU41MtF1pS8UFmvY7Ahu5Hb84VZO4xu+fgKZ3ERrXo=)
                          2: 326131343a373538343a653361303a3a2f34342d3434203d3e20333937303332.roa (hash: JCyGJNLuGhm2G7yv8F0G1yT21Qa/DAGdxn1vxIgtXH8=)
                          3: 326131343a373538343a653339303a3a2f34342d3434203d3e20333937303332.roa (hash: lLg4au3IVvnSiHqBxXRTNckohkijbwJ1gyWVOIjX72Q=)
                          4: FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl (hash: fGNZzp0vR5BlA2a+HeiFDQ+0o4bYkm3SlUGSa++SHrk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3e:21:d2:7c:53:6a:34:99:17:b9:e2:88:e3:fa:08:6a:1c:cf:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA
        Validity
            Not Before: Jan  2 06:51:50 2026 GMT
            Not After : Jan  3 07:21:50 2026 GMT
        Subject: CN=4B25D1BA0DE3C6567AB32EFA69144B8B4F3EA7B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:79:7c:64:a5:7a:73:f0:2a:d2:af:01:c4:
                    a9:e7:cc:2e:f5:e1:f2:e0:51:ea:58:8a:3b:36:a6:
                    b5:64:4b:9f:dc:f8:08:ac:1c:3b:b4:06:a8:e7:cb:
                    03:30:86:12:9a:ae:cd:56:8f:a5:f2:8a:53:ed:6d:
                    b4:cc:fd:f6:ae:d2:09:27:b8:2d:93:2f:d8:62:62:
                    14:44:b3:00:78:bb:43:33:90:fe:98:aa:88:f6:21:
                    f2:cd:ed:e4:d1:5f:f7:56:e8:45:88:16:d7:fd:ca:
                    ab:c5:06:58:fa:85:5d:79:3f:f5:99:41:3c:e2:31:
                    e7:dd:68:78:a7:e4:fc:bb:af:63:9b:9f:1e:ac:fd:
                    6f:95:89:c6:27:43:1e:b4:ee:89:58:88:48:05:05:
                    44:a0:72:70:ec:f6:76:60:e4:09:ce:f7:99:53:84:
                    83:31:e8:e8:1f:2c:5e:9c:35:8e:6c:85:3e:0d:1c:
                    f4:bf:44:e5:33:5b:67:d2:6c:8b:4c:f5:4f:09:de:
                    23:d7:01:99:7f:d8:33:55:f0:17:db:22:25:ac:ab:
                    fa:91:fb:a9:64:ff:40:cc:90:6d:5d:ff:0a:eb:ff:
                    bd:0a:9a:5f:d2:7a:f6:48:53:b9:e9:4b:b6:b6:00:
                    d1:86:c6:93:dc:b3:ba:0e:d1:df:cd:2c:db:83:1f:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:25:D1:BA:0D:E3:C6:56:7A:B3:2E:FA:69:14:4B:8B:4F:3E:A7:B1
            X509v3 Authority Key Identifier:
                keyid:FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:58:81:97:ea:4d:29:d7:dd:9c:6e:82:d1:55:3d:2a:ef:92:
         77:89:8f:dc:e7:0f:8f:c6:c6:fe:c5:fd:67:f2:df:b9:55:1c:
         2d:b4:3e:6d:af:36:7c:7a:17:9e:f4:50:0d:ca:9b:7c:38:e1:
         d9:31:94:fd:ae:c9:06:d8:de:fb:2d:61:b0:57:87:6d:7e:55:
         a0:ce:df:fc:95:41:92:fd:7d:de:b4:92:6d:a8:c8:3e:74:f4:
         2a:15:76:a3:a5:ee:c1:ea:9c:8f:30:c9:54:b9:20:be:05:32:
         81:1f:5f:30:e7:0b:61:fb:79:1f:18:d7:37:8e:84:ad:af:59:
         64:cc:38:81:09:95:2d:ef:23:8d:f9:74:b0:13:ac:ff:7c:bb:
         4f:1c:ee:b1:dd:02:30:00:71:e0:2e:68:b0:70:bb:ed:60:6e:
         67:69:8b:42:db:bc:c8:33:39:e8:16:50:e3:af:dc:02:8a:1e:
         fc:bb:72:a8:e0:37:71:b3:22:bb:b0:80:bf:46:fd:37:ba:71:
         97:38:b1:37:0e:f9:de:1a:5d:5c:d5:29:70:b8:17:8b:9a:5c:
         d8:00:67:cd:59:56:c7:58:bd:4a:f0:f1:8d:d2:01:15:ad:0b:
         38:3e:ac:67:94:41:62:c0:79:66:cb:8d:30:7e:d7:61:6b:24:
         38:32:27:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 07:53:27 2026 by rpki-client