Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
File:                     FB64D48D941F2F324279CF863188D26D2056D11D.mft (raw, json)
Hash identifier:          jU+SbWc4y5o+xQwvpiZSv7gAoFe1zs+hY9Uux/sB+H0=
Subject key identifier:   CA:F7:DC:58:7C:71:6C:43:3E:EF:60:A6:A8:AD:AD:3A:D8:17:1D:8B
Authority key identifier: FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D
Certificate issuer:       /CN=fb64d48d941f2f324279cf863188d26d2056d11d
Certificate serial:       7A8125E9E0246FB53EA72D20BC0A0510C3B2E923
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
Manifest number:          04F4
Signing time:             Fri 14 Aug 2026 11:12:17 +0000
Manifest this update:     Fri 14 Aug 2026 11:07:17 +0000
Manifest next update:     Sat 15 Aug 2026 14:30:17 +0000
Files and hashes:         1: FB64D48D941F2F324279CF863188D26D2056D11D.crl (hash: VL015ffqKLj9KVHmJj0q8xMehkz2jiIaLpBkFi3+lFw=)
                          2: AS216375.asa (hash: shfUbygsmaINWuCxth8kL86Xx/Cxvh4vGgfMdty+sbw=)
                          3: AS44817.asa (hash: 5qLAlniEKgmCFYJA5qBBdJDL62xHPXYGEInk9kaecMA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:81:25:e9:e0:24:6f:b5:3e:a7:2d:20:bc:0a:05:10:c3:b2:e9:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb64d48d941f2f324279cf863188d26d2056d11d
        Validity
            Not Before: Aug 14 11:07:17 2026 GMT
            Not After : Aug 15 14:30:17 2026 GMT
        Subject: CN=CAF7DC587C716C433EEF60A6A8ADAD3AD8171D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c4:7d:53:5b:26:e7:5c:12:d6:7a:1f:de:62:
                    6a:d4:6a:4b:d2:f4:e0:23:ef:6c:c4:9a:d7:34:bc:
                    0d:1b:7c:66:37:82:af:b5:cb:a1:ca:3e:59:72:3e:
                    e6:e5:45:77:ba:b5:73:18:d5:42:ec:dc:e3:da:e2:
                    9e:8e:39:da:c5:cc:dd:92:e6:3c:ea:ec:0a:72:50:
                    be:d2:fc:04:af:73:21:25:2c:a6:2d:77:6a:bb:1e:
                    e3:07:cc:41:f4:04:62:17:0a:a7:f1:3b:3d:41:fe:
                    f1:a4:2c:05:37:c2:a2:33:0d:51:32:93:57:d6:de:
                    8a:64:3d:6f:36:bc:df:65:aa:c2:26:90:de:09:9d:
                    aa:72:3d:6e:9a:26:00:34:e2:a1:85:f4:4b:35:57:
                    47:35:a7:21:10:cd:07:0b:4e:90:94:a3:9e:4a:2a:
                    c7:46:66:6c:b7:9b:8f:24:e7:2b:a3:b3:72:bd:0f:
                    6e:0e:0f:66:09:a9:43:db:5c:05:b6:3e:c8:d0:c6:
                    84:f2:fd:cd:9b:62:b8:26:a2:36:a7:4f:e3:be:63:
                    cd:eb:a3:e9:37:d1:4f:b3:c9:b1:81:68:07:ac:18:
                    12:25:52:a4:05:48:c0:d4:5a:2b:6c:92:7d:f3:6e:
                    6e:36:1b:aa:a3:a3:74:5a:c3:6f:a4:39:f4:0f:e0:
                    31:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F7:DC:58:7C:71:6C:43:3E:EF:60:A6:A8:AD:AD:3A:D8:17:1D:8B
            X509v3 Authority Key Identifier:
                keyid:FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c5:7f:e4:65:d0:46:08:30:82:e5:34:e7:57:19:66:6a:16:
         54:17:70:7c:ca:73:ea:ea:54:91:8e:aa:ff:a7:b7:05:da:b8:
         1a:21:53:bb:31:fb:f5:45:02:00:63:7e:e6:ec:35:48:ab:41:
         1e:e7:0e:91:bd:20:86:86:88:bc:43:f4:fc:30:95:54:62:b6:
         b2:fd:b0:11:bf:91:eb:21:04:7f:2e:73:d9:2f:27:f5:14:bb:
         ae:e1:ab:7a:4e:8b:35:d8:32:0f:71:f3:37:ba:fe:8d:36:74:
         95:e9:65:c6:c3:e2:29:e0:68:75:05:e2:dc:6d:63:e2:38:42:
         70:c2:ed:c4:4b:8f:67:2a:e3:7c:41:2c:b9:f8:7d:3b:58:04:
         2f:27:99:41:bc:d0:bb:d6:8b:3f:28:49:be:df:95:af:57:9f:
         7f:2b:23:61:78:36:6a:8d:6c:4f:c6:67:52:16:22:d2:b9:0f:
         da:aa:93:e4:c6:8f:f3:ac:5c:5b:99:8a:05:3e:65:27:02:2c:
         32:dd:06:9a:40:2e:1f:22:31:87:36:4f:9d:2c:d5:e2:b9:42:
         6a:97:7b:36:c7:aa:b7:0a:89:9a:7d:8c:b0:24:94:13:a4:2a:
         37:6b:c1:14:80:67:77:b8:d1:3d:cc:f4:29:53:93:21:f9:d3:
         73:7a:bc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:33 2026 by rpki-client