Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
File:                     FB64D48D941F2F324279CF863188D26D2056D11D.mft (raw, json)
Hash identifier:          hh9oXUOd8JMrzDGBjQKLYscPQtzqTAklU8JBtzBnN2E=
Subject key identifier:   5B:20:A2:6A:0E:D2:4E:1B:06:EE:A2:51:81:03:7D:23:FD:AD:C2:DF
Authority key identifier: FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D
Certificate issuer:       /CN=fb64d48d941f2f324279cf863188d26d2056d11d
Certificate serial:       5E2AAB073637325D24C1968F88D876179A7CFCED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
Manifest number:          0526
Signing time:             Sun 20 Sep 2026 19:17:17 +0000
Manifest this update:     Sun 20 Sep 2026 19:12:17 +0000
Manifest next update:     Mon 21 Sep 2026 19:35:17 +0000
Files and hashes:         1: AS44817.asa (hash: 5qLAlniEKgmCFYJA5qBBdJDL62xHPXYGEInk9kaecMA=)
                          2: FB64D48D941F2F324279CF863188D26D2056D11D.crl (hash: 48aMBeeSwld7IJU9/3c5La59PJKgcGXRV5VuU+pKsv8=)
                          3: AS216375.asa (hash: shfUbygsmaINWuCxth8kL86Xx/Cxvh4vGgfMdty+sbw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2a:ab:07:36:37:32:5d:24:c1:96:8f:88:d8:76:17:9a:7c:fc:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb64d48d941f2f324279cf863188d26d2056d11d
        Validity
            Not Before: Sep 20 19:12:17 2026 GMT
            Not After : Sep 21 19:35:17 2026 GMT
        Subject: CN=5B20A26A0ED24E1B06EEA25181037D23FDADC2DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:4f:9c:23:fd:09:bd:aa:31:fb:96:d4:44:
                    a6:0c:ea:51:34:6f:c5:a2:46:23:57:e8:11:01:9a:
                    73:50:f3:26:36:6e:d0:1c:b0:df:aa:c4:aa:cb:38:
                    75:d3:5a:f5:c1:4c:f7:ca:9e:33:4c:d1:32:79:f3:
                    0b:f3:28:9a:b1:b8:54:23:a6:6d:5a:9e:77:05:32:
                    3e:02:c6:98:ca:eb:6b:f9:d2:1b:71:7e:09:02:c8:
                    69:f4:66:99:0c:d5:db:ef:60:4f:2d:46:83:ce:ef:
                    4c:0d:f9:29:7a:76:93:83:ac:7b:d9:a4:8b:fe:13:
                    47:68:30:a5:cc:96:db:3d:b1:68:3e:8c:20:4f:48:
                    c7:16:af:57:45:07:d4:4a:df:69:2a:8a:2b:51:fa:
                    3b:f3:9d:54:e6:bd:8b:77:c1:3b:a7:12:c7:a1:ae:
                    e9:c5:6a:7d:93:e5:8f:92:25:69:5b:83:ea:54:33:
                    db:3e:34:c9:51:56:8c:bb:5a:9e:15:24:d6:2c:3f:
                    44:89:af:ea:40:78:b7:b9:59:67:99:61:0b:98:b5:
                    6c:9d:4a:80:8e:be:f2:5d:e7:74:85:28:93:b5:cb:
                    c4:c9:e5:4f:15:6c:15:86:9c:fa:4d:00:05:32:c3:
                    13:d5:c4:09:49:29:4d:1b:d8:f7:e5:56:fe:08:44:
                    8e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:20:A2:6A:0E:D2:4E:1B:06:EE:A2:51:81:03:7D:23:FD:AD:C2:DF
            X509v3 Authority Key Identifier:
                keyid:FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:54:e1:39:f2:a4:44:25:79:a4:8e:8f:94:15:d7:c0:c9:dd:
         84:07:52:7f:3d:0d:03:ba:9a:9d:58:ac:73:34:b8:b8:71:f8:
         c9:44:21:b9:45:ef:c9:f6:64:81:3a:84:6a:8e:2d:f3:54:c1:
         50:28:b9:9c:90:32:fa:9b:cf:56:ce:60:da:8c:ce:34:4b:2c:
         30:b8:2c:f9:58:f4:66:7c:f6:c6:ad:7a:31:40:a6:ed:89:48:
         97:39:ed:5b:3d:5e:b1:e3:75:51:07:a4:9c:a5:9a:60:6f:a0:
         ce:64:06:06:10:ae:09:4d:5d:42:52:06:95:16:49:02:54:7f:
         9a:0a:68:a5:d4:e7:d3:1e:0d:01:7a:34:fd:25:fb:93:ff:9d:
         43:49:4b:2d:6d:3f:64:fd:ae:a9:cd:49:a0:59:cd:87:b4:99:
         3e:63:cc:93:a8:11:f8:14:85:34:6a:ab:75:e4:64:58:fd:80:
         70:10:99:b9:9f:fa:b9:21:64:21:ef:e1:44:5c:6e:8d:4c:89:
         c7:61:54:8d:c1:15:d3:00:1d:71:0b:c1:86:40:d8:33:90:a3:
         03:2a:bd:95:32:df:60:d5:f2:10:c7:a5:58:5a:15:80:fb:35:
         25:aa:23:86:8f:49:da:6f:d2:a4:a8:ba:9f:65:f9:06:a5:92:
         15:55:6b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:35:54 2026 by rpki-client