Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File:                     8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier:          T7ygOYk2Z8WUA52z24UdX2N/Pv3CZ2WEtdw25m9Udj8=
Subject key identifier:   00:00:47:AF:7D:82:46:87:14:22:95:DE:9C:B6:25:2A:3D:86:3F:5C
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer:       /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial:       6565D2C5AA4E94ED0F32CE51F5CF619D0A55B628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number:          022F
Signing time:             Fri 04 Sep 2026 09:55:05 +0000
Manifest this update:     Fri 04 Sep 2026 09:50:05 +0000
Manifest next update:     Sat 05 Sep 2026 11:17:05 +0000
Files and hashes:         1: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: uYrqT5nG02Ymj7xbpB38+8uBVCdyEw5jmf5IWbuSyy8=)
                          2: AS211695.asa (hash: o//07UHBzOBS1SPe9Mwe9zZ7Di/K3uBLmU6SISwIQJo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 11:17:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:65:d2:c5:aa:4e:94:ed:0f:32:ce:51:f5:cf:61:9d:0a:55:b6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
        Validity
            Not Before: Sep  4 09:50:05 2026 GMT
            Not After : Sep  5 11:17:05 2026 GMT
        Subject: CN=000047AF7D824687142295DE9CB6252A3D863F5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:16:de:33:7d:d1:31:eb:61:56:b6:af:2e:83:
                    93:fd:1b:50:09:7e:cb:02:c2:7d:ed:0a:51:ad:7a:
                    a0:5f:3b:41:7a:d8:9b:07:51:f1:21:76:7e:db:9c:
                    40:34:2f:63:15:3f:7c:53:c5:19:a1:06:36:a4:f7:
                    1b:da:eb:33:f9:85:3d:4f:18:66:45:84:ea:6a:79:
                    0e:69:53:a4:36:a3:ba:6f:c5:04:19:73:a6:19:4b:
                    19:f6:5d:27:b0:63:c7:b4:5b:ec:2f:80:65:4e:68:
                    18:a3:32:2b:3b:cd:f1:21:50:1d:a7:ef:5c:38:67:
                    19:95:eb:c3:3b:2c:21:d5:63:0d:81:d6:81:b8:8a:
                    81:26:63:a4:45:a3:07:54:96:e8:99:77:35:06:1f:
                    a4:6a:07:fa:8d:98:f5:51:7f:7e:00:9d:df:40:29:
                    b3:ef:9e:00:e4:ac:5a:0c:8a:e7:e2:f0:91:4a:71:
                    a8:a3:e8:51:43:5d:24:0b:01:a0:84:2d:af:65:40:
                    9a:7f:60:a0:a1:76:71:88:89:df:ef:2f:5f:c9:d6:
                    8c:2c:60:b7:78:6c:29:4b:c6:a1:f1:dc:46:9e:c9:
                    b0:bf:8d:ae:ff:e1:e7:8e:dd:f2:24:04:34:0f:df:
                    71:ca:b4:1c:2f:6d:13:3e:81:b4:f4:44:82:e9:62:
                    c6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:00:47:AF:7D:82:46:87:14:22:95:DE:9C:B6:25:2A:3D:86:3F:5C
            X509v3 Authority Key Identifier:
                keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:1b:b1:38:e3:39:9d:44:24:fd:81:a4:75:85:72:43:0a:62:
         64:8e:ee:e9:45:f6:72:f7:86:99:61:5f:67:34:80:da:e1:a3:
         cc:35:34:7b:8e:43:90:e9:32:eb:c2:e0:c7:33:5a:58:a5:cc:
         b2:f7:8a:14:8f:01:76:8a:2a:68:6c:6a:6c:be:f3:9a:53:17:
         0d:18:80:4e:bb:78:3f:14:ed:58:ce:b1:c1:6e:21:ee:70:ab:
         63:6c:be:02:d3:6d:cd:b6:f7:b3:75:db:3d:93:99:97:39:50:
         da:7d:af:e0:79:4e:96:ec:04:7d:2a:44:0a:d1:4b:b6:8a:01:
         29:79:84:60:b0:a9:83:b3:05:94:93:76:69:2e:f1:43:69:55:
         e7:dc:43:c6:60:c1:1d:4d:e1:dd:14:ec:06:a6:f2:78:b7:ff:
         3c:40:e0:bb:50:8a:4e:69:81:80:ef:9d:e9:1c:ca:75:a3:f1:
         fa:26:e6:13:a9:e5:b8:b7:c4:9d:10:88:52:81:59:2f:e1:07:
         1a:ab:f0:ab:cc:05:58:e3:1b:ee:82:43:65:d8:15:15:42:43:
         b8:6a:41:40:2f:df:93:8b:4f:b5:b3:29:1e:44:ee:a1:99:59:
         bc:5e:e0:eb:4d:c3:fa:89:c4:13:45:37:e0:06:35:6f:06:31:
         04:fb:54:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:21:40 2026 by rpki-client