Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File:                     8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier:          6THpwVcXF7DnKu6IshEop5kvI0xwDZsM+FkXpOIYGfM=
Subject key identifier:   C7:60:A1:3D:9C:D5:88:62:DC:11:22:BD:5F:3E:26:31:D5:A7:32:BF
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer:       /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial:       24A8715CE5F10CC257201923875D3B3CA7ABE1DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number:          01FB
Signing time:             Tue 28 Jul 2026 04:33:41 +0000
Manifest this update:     Tue 28 Jul 2026 04:28:41 +0000
Manifest next update:     Wed 29 Jul 2026 05:14:41 +0000
Files and hashes:         1: AS211695.asa (hash: ksEGxGaely4EKKqlYiXzfj094SF2RqDArlZmzjGa1GM=)
                          2: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: W+bliKP1UsDprMOY3BrwI1Xqq5WWxTOMGZLZRhidkJk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 05:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a8:71:5c:e5:f1:0c:c2:57:20:19:23:87:5d:3b:3c:a7:ab:e1:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
        Validity
            Not Before: Jul 28 04:28:41 2026 GMT
            Not After : Jul 29 05:14:41 2026 GMT
        Subject: CN=C760A13D9CD58862DC1122BD5F3E2631D5A732BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:14:1f:4b:05:5d:cb:ae:65:71:f0:01:d3:
                    9b:50:f3:1b:60:45:70:c4:5f:d6:b4:fd:d7:37:12:
                    37:2d:ce:f9:3e:5b:f9:48:36:6a:14:02:17:06:35:
                    11:a2:c8:38:0d:f2:e6:ac:b3:b3:a4:c8:5c:1a:9f:
                    f7:5a:d0:29:5a:4d:18:dc:e9:9c:2a:4e:43:bc:5f:
                    85:9d:b6:ca:59:1c:03:5b:fa:72:c4:1a:60:d0:38:
                    8b:1d:d5:4d:0d:32:ac:b0:9e:eb:45:6c:20:66:b6:
                    7e:5d:2a:1d:27:b2:fd:c8:f8:2e:f3:ba:c3:ed:0c:
                    a9:c0:e0:d8:70:c1:9b:3d:66:19:b0:a6:06:1e:8a:
                    c2:ab:d9:d1:6c:5c:4a:ec:bc:94:90:c6:c0:2d:3e:
                    cb:a7:97:0e:4e:ca:2e:69:87:16:c0:c4:ed:70:5d:
                    4b:a2:db:4f:81:ab:01:2b:49:04:20:9c:25:3d:c4:
                    6f:f0:a9:f1:a2:85:f9:85:b4:bf:6f:b9:23:72:15:
                    36:49:3c:0e:45:8c:de:a0:e1:5a:88:e8:da:1a:72:
                    ca:bf:01:22:ca:95:60:41:b5:76:67:d0:7d:16:bd:
                    e5:a2:21:7e:d4:be:73:ce:fb:78:03:28:f6:bd:af:
                    d7:3c:bb:47:4c:9c:9d:ab:51:e5:1b:65:fe:58:ef:
                    91:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:60:A1:3D:9C:D5:88:62:DC:11:22:BD:5F:3E:26:31:D5:A7:32:BF
            X509v3 Authority Key Identifier:
                keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:74:17:cc:f4:68:ae:45:51:df:62:95:04:2b:d7:e0:50:f7:
         53:e7:20:7c:02:bc:bc:a3:2a:30:b6:db:3b:08:1e:38:b6:5e:
         cc:97:94:71:10:09:f8:37:de:c3:1f:98:52:54:49:84:52:67:
         d6:f5:2b:aa:f2:3b:2f:3b:3c:b2:60:15:76:77:97:41:1d:62:
         b3:76:6d:67:88:f4:50:ca:0c:a7:81:82:81:16:d1:6e:6f:c8:
         30:8c:8b:26:73:fc:3c:2a:8b:ea:3c:e2:aa:98:5d:4c:c0:1c:
         f5:0b:10:30:33:f6:fd:4c:b0:fd:5d:f5:b5:26:c7:c6:d9:ec:
         3d:96:2b:bc:b9:90:0a:9a:95:a8:ef:23:80:ef:a0:0b:fb:c5:
         42:79:1e:6c:96:1e:b1:71:87:04:16:9f:ec:7e:50:40:4a:aa:
         1c:ae:41:3a:fb:96:8e:23:d5:cf:6a:e1:57:f1:25:31:d8:98:
         da:57:b5:d5:fb:9b:6b:0a:c0:56:72:39:47:85:42:55:93:95:
         1e:ea:d7:7d:a1:78:ab:de:90:19:f7:ae:14:39:be:e4:40:90:
         ed:5c:95:b2:3d:53:58:76:be:b3:2c:23:b2:de:71:7f:55:0b:
         d0:0f:b4:7c:ba:51:41:cd:0d:09:f4:3b:f5:7c:ec:ee:d1:4e:
         d0:24:f1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:24 2026 by rpki-client