Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
File:                     FB64D48D941F2F324279CF863188D26D2056D11D.mft (raw, json)
Hash identifier:          ookmEpd4YD43vZiWx89EcmfzX0LSvPZNOqZtZGmN7A0=
Subject key identifier:   D1:E7:10:D9:A1:7A:D8:F8:CC:40:84:6A:FF:E9:BA:87:B0:02:C4:0B
Authority key identifier: FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D
Certificate issuer:       /CN=fb64d48d941f2f324279cf863188d26d2056d11d
Certificate serial:       658DA5213A43D880913EBB4DA27DB60DDD1713D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
Manifest number:          0317
Signing time:             Sat 23 Aug 2025 12:20:31 +0000
Manifest this update:     Sat 23 Aug 2025 12:15:31 +0000
Manifest next update:     Sun 24 Aug 2025 15:52:31 +0000
Files and hashes:         1: FB64D48D941F2F324279CF863188D26D2056D11D.crl (hash: ASmfwxzGq3oWDHF3pTUOTZgCxbywAJ8AUPUN1WuOvLA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:8d:a5:21:3a:43:d8:80:91:3e:bb:4d:a2:7d:b6:0d:dd:17:13:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb64d48d941f2f324279cf863188d26d2056d11d
        Validity
            Not Before: Aug 23 12:15:31 2025 GMT
            Not After : Aug 24 15:52:31 2025 GMT
        Subject: CN=D1E710D9A17AD8F8CC40846AFFE9BA87B002C40B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:95:74:ec:a8:42:d5:8b:dd:e1:81:52:9a:
                    e5:68:23:46:25:bd:78:d4:28:63:c2:5e:de:88:fd:
                    a9:45:49:ac:cc:56:2e:18:5e:d9:3d:f8:fb:f0:3a:
                    ca:fb:cf:f4:c0:66:c8:1b:c7:03:24:79:30:33:fe:
                    00:63:63:cd:a4:f3:5a:da:ec:de:ac:1e:5c:0c:cf:
                    21:14:02:a0:8f:69:0b:3c:7e:e9:fa:44:5c:f5:1c:
                    cf:17:6c:3c:33:71:ac:a0:68:eb:d9:de:52:52:4b:
                    c6:4e:25:13:98:a0:35:e6:a1:b8:19:1e:71:aa:1b:
                    e9:21:a6:60:9c:d5:b2:87:ec:e7:f5:f3:75:cc:09:
                    40:64:67:14:0e:3d:4e:fd:95:4b:bc:3b:fe:dd:e0:
                    1c:8b:28:2c:b8:30:90:fd:3e:76:9b:53:2d:b9:86:
                    d9:58:df:0a:15:fe:21:31:8a:d0:dd:6d:00:c2:27:
                    dc:2e:33:b0:3b:c6:83:99:d5:3b:50:83:89:cf:21:
                    76:5b:1e:9e:4d:03:e9:f8:f9:73:15:db:f4:b8:8b:
                    12:d6:e8:bd:95:f9:8c:17:12:cb:3a:be:b5:a4:5f:
                    7f:96:a6:c9:51:a4:66:40:ad:21:ad:5d:99:91:04:
                    22:a5:06:8c:6e:d5:a8:c3:28:37:0a:0a:e1:dd:ba:
                    55:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E7:10:D9:A1:7A:D8:F8:CC:40:84:6A:FF:E9:BA:87:B0:02:C4:0B
            X509v3 Authority Key Identifier:
                keyid:FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:8b:40:2f:9f:7d:d2:51:fb:95:3e:9d:62:2a:04:0f:a0:0d:
         9f:15:e0:f4:44:15:7b:c7:ea:76:84:16:45:e2:b4:73:12:ba:
         c9:b5:f4:ee:3f:32:52:42:0e:2f:53:8e:bc:59:a2:ec:5c:9c:
         b9:f7:11:b3:5b:4b:1f:ac:7a:2b:50:b8:e9:c4:da:7f:a5:18:
         9d:eb:38:e5:73:78:94:e3:91:af:78:b7:25:73:44:71:80:9a:
         c3:c1:e1:fa:e7:af:be:36:0e:24:83:3e:da:ef:d7:69:6e:d5:
         fa:8e:de:12:07:d4:ad:24:c6:c9:59:91:3e:72:8e:47:e6:a7:
         df:16:d2:a2:6b:cc:32:e0:dd:52:23:91:92:07:18:8e:ac:ee:
         c5:96:f1:27:4c:a8:be:d7:9f:2c:de:f1:2c:28:bd:ca:0c:b1:
         57:a7:e6:a8:73:76:85:2d:2e:21:51:ee:99:f2:99:23:4b:fc:
         57:88:63:7d:27:14:b6:b7:a2:e4:99:7a:f0:49:ea:fa:f5:b3:
         ee:90:7d:3d:71:6a:30:8a:09:3f:da:e1:40:ab:82:7d:a6:fb:
         be:36:5b:93:49:06:72:3d:02:73:9c:ed:6c:8a:f3:e6:16:1f:
         0d:05:23:fd:fe:84:d9:b8:84:02:32:63:47:fd:80:2f:3b:e5:
         07:b7:3a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:29 2025 by rpki-client