Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File:                     8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier:          Jyy5Tbm900iLFAAS11jNAecfdbtzaBPn4zMETItk5DI=
Subject key identifier:   56:1B:30:07:E5:46:85:8A:DD:3F:75:8B:AF:74:46:63:13:6E:00:AF
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer:       /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial:       67AB48813CBC172E4A0559D108A67D9A4AE69375
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number:          0199
Signing time:             Fri 15 May 2026 01:30:39 +0000
Manifest this update:     Fri 15 May 2026 01:25:39 +0000
Manifest next update:     Sat 16 May 2026 02:41:39 +0000
Files and hashes:         1: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: tMwQk+SWcvu7H0UjDfjJiUkiO268BN4pr0ClAcRor9c=)
                          2: AS211695.asa (hash: ksEGxGaely4EKKqlYiXzfj094SF2RqDArlZmzjGa1GM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ab:48:81:3c:bc:17:2e:4a:05:59:d1:08:a6:7d:9a:4a:e6:93:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
        Validity
            Not Before: May 15 01:25:39 2026 GMT
            Not After : May 16 02:41:39 2026 GMT
        Subject: CN=561B3007E546858ADD3F758BAF744663136E00AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8f:9f:00:11:ba:18:9a:94:d9:1e:22:85:59:
                    58:01:25:44:80:44:80:05:16:f3:f4:50:48:57:f6:
                    8b:b7:98:89:cd:92:01:2a:b9:2c:c0:8c:1b:59:ae:
                    c1:3d:03:bf:9e:c3:b4:80:ba:43:1c:ad:87:fd:5e:
                    c4:32:68:f6:fa:45:e6:48:1c:91:63:f8:8f:01:45:
                    24:5f:12:6c:7e:5e:83:b6:1e:ba:a8:0b:52:14:2f:
                    82:29:57:ff:b3:a9:22:68:5e:89:f9:f2:90:18:ae:
                    e2:90:65:b7:21:a0:d4:90:95:72:91:29:35:68:8d:
                    d3:0f:9f:9e:d3:6e:c5:7b:af:93:17:9a:2a:79:e3:
                    7a:8c:9b:c2:21:ad:ad:c2:71:18:f2:02:f8:83:f2:
                    36:bb:db:5c:b1:05:8d:a3:dd:98:e7:aa:df:3f:ca:
                    24:f6:69:5f:aa:25:9b:95:0a:e6:8f:e9:a0:e9:f6:
                    e8:6e:16:d3:42:bf:48:e2:43:eb:59:86:87:3b:e0:
                    84:10:da:cd:ba:93:a6:05:a4:5a:4a:f3:c8:a9:53:
                    3f:42:4d:c8:94:8f:85:6d:6e:17:6a:5c:f0:56:0f:
                    fe:51:8f:ea:e1:01:5f:cd:01:8a:b5:c5:c9:e8:df:
                    b5:71:2b:ab:25:1e:f6:a6:b3:aa:a6:28:2c:f4:33:
                    00:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1B:30:07:E5:46:85:8A:DD:3F:75:8B:AF:74:46:63:13:6E:00:AF
            X509v3 Authority Key Identifier:
                keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:b4:a0:30:a8:71:0d:a3:41:b2:ab:cd:b2:42:d3:7b:42:55:
         7b:40:3c:ad:cd:9a:02:16:a9:d6:e0:e8:08:b5:d4:e0:7e:d0:
         2b:a0:1c:33:2c:87:4c:1b:e5:77:a6:dc:9d:e0:fd:68:46:80:
         05:46:ab:ce:de:d8:9b:c6:36:ae:19:0e:38:a5:58:39:36:92:
         45:a7:0d:93:21:13:6e:89:a7:c9:42:9b:af:4a:aa:e5:89:a1:
         15:ea:34:48:67:da:b0:21:3c:83:ad:1e:76:8b:ba:08:07:be:
         24:c6:58:3c:33:b8:f8:c3:e1:8d:ae:1f:6c:c6:f6:df:b7:68:
         94:9d:1e:7c:47:00:79:94:8d:85:14:8c:c1:fa:82:87:76:0b:
         92:4b:a7:0c:cb:d8:0e:33:6c:c0:b5:95:63:73:2b:f9:69:ce:
         61:d7:b9:4a:b2:b5:f7:83:9c:02:dd:7f:01:da:6a:be:4d:33:
         84:71:75:08:68:50:6f:9c:0b:37:1e:53:89:b3:b8:72:0d:89:
         61:8c:48:ac:b3:1d:07:10:3e:f4:de:9d:c4:93:c1:37:6f:84:
         53:2f:3a:90:e6:f4:d5:39:77:6e:2d:ca:f2:44:7d:8c:d6:f5:
         76:4e:51:e8:44:46:20:81:98:9a:3e:98:7f:4a:57:39:de:de:
         51:6e:91:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:41 2026 by rpki-client