Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
File:                     FB64D48D941F2F324279CF863188D26D2056D11D.mft (raw, json)
Hash identifier:          7yrCT6pc19TtYc+qBcBqGiyupfdColL013mSUNMbCKM=
Subject key identifier:   53:71:6B:9E:E8:89:58:75:81:7D:6F:41:C2:20:F1:93:26:B4:E7:52
Authority key identifier: FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D
Certificate issuer:       /CN=fb64d48d941f2f324279cf863188d26d2056d11d
Certificate serial:       79B6C0A216F0585FC0D5469520127E789FB9474B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
Manifest number:          0432
Signing time:             Wed 25 Mar 2026 05:40:07 +0000
Manifest this update:     Wed 25 Mar 2026 05:35:07 +0000
Manifest next update:     Thu 26 Mar 2026 06:16:07 +0000
Files and hashes:         1: FB64D48D941F2F324279CF863188D26D2056D11D.crl (hash: JfJM5mw/FTEZt+0O4KUhGLq0yPci3pRH6clWSacclv8=)
                          2: AS216375.asa (hash: Is18bo2gvq7cfPyUjZtt2qFIiddFBmM/O7y3HvC32i0=)
                          3: AS44817.asa (hash: TksAuZIALC6QJijLSEyaZHd5acOZblz7LjHZG52qDUI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 06:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b6:c0:a2:16:f0:58:5f:c0:d5:46:95:20:12:7e:78:9f:b9:47:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb64d48d941f2f324279cf863188d26d2056d11d
        Validity
            Not Before: Mar 25 05:35:07 2026 GMT
            Not After : Mar 26 06:16:07 2026 GMT
        Subject: CN=53716B9EE8895875817D6F41C220F19326B4E752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:35:20:b4:cb:d7:9c:16:47:7b:ed:5c:d6:
                    dd:2a:5a:3d:fa:c7:e9:57:8c:79:d1:bc:9c:c1:d8:
                    24:1b:aa:8a:2a:8b:e9:14:c6:50:b8:f5:fb:a2:9c:
                    e3:0b:96:4b:10:7d:8f:28:7b:ad:19:5e:8f:58:fd:
                    03:eb:4f:52:46:de:7a:ce:47:bd:1d:a1:21:fa:ce:
                    df:d5:d1:32:16:e5:5e:f6:70:20:c7:81:ca:4b:f4:
                    ae:a7:99:d9:21:dd:1b:ee:00:6b:94:5f:36:aa:2b:
                    3e:60:bf:ce:e0:3d:58:8c:17:59:9a:83:62:7b:7b:
                    ec:c3:aa:ab:8c:64:5f:a9:41:b9:9d:9f:33:fb:bd:
                    84:2a:96:83:e8:14:ca:31:8c:11:11:3f:32:93:cb:
                    3f:f6:52:8e:76:54:f7:b5:93:b2:ec:84:20:d3:73:
                    48:5d:6b:45:d8:b9:dd:e7:90:d3:20:da:8d:78:e2:
                    32:27:bf:d7:ea:0e:34:cd:09:e5:30:ec:fd:1d:9f:
                    85:67:79:d7:29:98:a6:40:23:2e:a1:4e:d1:38:4e:
                    fb:6d:69:04:ae:ae:3d:92:9f:a2:83:df:3d:f0:96:
                    05:85:ce:0e:db:9c:d7:d6:e5:71:35:68:f0:c4:95:
                    b7:a6:1d:6f:44:69:45:c7:ee:aa:9f:3a:21:4b:93:
                    13:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:71:6B:9E:E8:89:58:75:81:7D:6F:41:C2:20:F1:93:26:B4:E7:52
            X509v3 Authority Key Identifier:
                keyid:FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b8:93:44:99:04:c2:29:3e:ac:46:00:a8:fb:19:95:78:77:
         7d:89:24:f8:71:4d:59:71:af:a6:66:22:55:a9:fc:16:eb:b7:
         04:20:f1:ad:cd:06:b2:d5:9f:5b:57:db:78:61:4b:08:6a:72:
         1e:da:38:2a:a1:ca:c1:e5:06:0f:44:83:d2:5b:7e:ca:c4:6a:
         e1:03:f2:45:f1:55:bd:e9:ce:e4:1c:05:ec:c1:ff:fc:d9:19:
         3d:5a:91:ac:3f:2e:83:d0:10:c0:55:9e:76:4d:a1:29:0f:cb:
         05:c1:73:8e:34:bb:e2:a9:74:20:37:98:5f:0b:4d:bf:da:91:
         0f:ef:56:d6:9a:47:28:79:ca:f2:50:d8:a3:41:af:48:83:6a:
         69:cb:79:9a:e4:bc:d8:b2:71:82:26:2c:5e:6e:48:79:55:05:
         9b:5b:de:6f:2e:c6:e7:f1:43:26:b9:f0:51:31:21:a2:e1:2b:
         14:72:c6:a1:d6:1f:73:83:ed:13:55:bf:de:4b:f6:b3:33:bb:
         5f:a1:6e:1b:9e:0f:5f:f0:fb:5e:dc:ab:ca:d7:3a:19:18:8e:
         7f:15:cd:41:61:a6:e7:44:53:12:01:93:1e:60:bc:d3:d6:3b:
         74:51:97:e3:32:73:87:06:a0:12:c5:46:2a:86:a3:a2:35:f2:
         26:1e:90:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:14:20 2026 by rpki-client