Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
File:                     FB64D48D941F2F324279CF863188D26D2056D11D.mft (raw, json)
Hash identifier:          Lm0hjeMcQPzWi27GTHbywwlge/GEClHJCDpcl8OXMSs=
Subject key identifier:   E2:46:C7:26:EA:8D:2F:C9:16:62:4F:B8:47:4B:7D:A9:98:28:E3:57
Authority key identifier: FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D
Certificate issuer:       /CN=fb64d48d941f2f324279cf863188d26d2056d11d
Certificate serial:       34457A819B2140E58592D00117C43F7910358F05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
Manifest number:          0570
Signing time:             Sun 15 Nov 2026 06:59:05 +0000
Manifest this update:     Sun 15 Nov 2026 06:54:05 +0000
Manifest next update:     Mon 16 Nov 2026 08:35:05 +0000
Files and hashes:         1: AS44817.asa (hash: Y0heAJEr6zZ0LfrlL6B+CaPG1prqltyFPA4VQd8pUWs=)
                          2: FB64D48D941F2F324279CF863188D26D2056D11D.crl (hash: 5TbPQ9Q9wrmoUwz61ycH6Uqa2UvgDL/uGoPVGwSa9go=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:45:7a:81:9b:21:40:e5:85:92:d0:01:17:c4:3f:79:10:35:8f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb64d48d941f2f324279cf863188d26d2056d11d
        Validity
            Not Before: Nov 15 06:54:05 2026 GMT
            Not After : Nov 16 08:35:05 2026 GMT
        Subject: CN=E246C726EA8D2FC916624FB8474B7DA99828E357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f4:d4:e1:e9:97:38:52:c7:eb:56:6e:15:37:
                    c3:f8:f2:6a:96:26:00:5b:0c:56:5d:80:c0:0a:ec:
                    54:b3:12:2f:9f:3a:7e:70:32:df:4b:80:9d:25:32:
                    22:f1:d1:bc:25:54:50:12:a3:a9:d0:08:0a:8f:a8:
                    fe:0c:e8:0d:bb:52:d0:af:ae:9e:c5:24:15:14:ef:
                    70:04:5c:be:bf:f3:e7:a7:09:01:0b:fa:b7:4d:4e:
                    fc:21:af:1a:05:5b:b1:70:89:38:70:b9:b4:51:47:
                    db:9f:46:8a:52:eb:09:ec:76:e5:ad:12:50:07:20:
                    4b:5a:cf:19:e5:d4:7f:c3:9f:f8:a7:4a:99:a3:c8:
                    c9:68:cb:5e:ce:46:81:ae:52:4d:ff:5f:a8:d2:5c:
                    25:a1:29:99:31:49:d4:a9:ff:64:34:bb:b4:08:2d:
                    24:63:c7:51:ad:87:0c:35:6b:de:8a:e0:27:35:30:
                    bd:90:9e:0a:81:88:80:12:a1:a2:63:42:b6:b6:43:
                    85:5c:33:cb:a1:05:67:7d:7c:29:d6:1b:73:03:91:
                    41:a3:78:1d:ca:af:e8:56:75:5b:67:af:fc:5c:7e:
                    b2:1d:db:f7:13:8f:6b:5c:41:52:13:31:7a:10:3b:
                    74:bd:bc:9d:a1:bb:a3:82:f6:59:45:84:86:d4:b3:
                    39:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:46:C7:26:EA:8D:2F:C9:16:62:4F:B8:47:4B:7D:A9:98:28:E3:57
            X509v3 Authority Key Identifier:
                keyid:FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:40:ad:69:3a:a9:7f:46:29:ba:60:db:d4:26:1c:99:91:f8:
         ea:92:2f:8b:21:06:af:8e:0d:8b:b5:76:28:20:47:82:5e:9e:
         93:c0:61:fa:ec:9d:f5:3f:99:7e:71:93:cc:01:fe:c3:06:46:
         f8:84:0e:ef:e1:29:99:1d:44:62:92:bb:f4:f0:35:4d:ed:50:
         40:b8:09:fd:d5:e0:d7:7b:82:6d:e7:ea:c4:12:dc:9f:bf:80:
         23:ae:a8:64:dd:7c:a1:ea:13:d1:36:72:0b:10:69:71:80:2e:
         ba:e9:61:3a:6f:e2:5a:8d:1b:2d:c9:58:9e:50:82:1a:ba:6b:
         dd:24:d3:cf:16:bb:ed:d2:0f:93:61:dc:60:05:64:e5:c3:a6:
         5d:9d:48:5f:5e:c5:93:44:e5:00:46:38:e5:bb:d3:95:fd:f5:
         12:87:ea:1d:d9:c4:78:cf:39:c0:9d:3c:c0:d5:b3:b0:b6:65:
         20:36:67:82:3c:7b:36:2c:c1:cb:92:cc:38:b9:2b:0c:4c:ad:
         8f:8a:91:f0:d6:0a:ad:fc:d4:fb:d7:ee:c5:f8:e9:3c:87:80:
         ef:56:fb:bc:46:e4:c8:b5:6b:6e:f1:31:87:7f:12:ce:c9:a0:
         b5:45:02:1e:ee:2f:54:15:8b:3b:1f:99:7b:02:8b:4e:8d:b4:
         2d:6c:2c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:32:51 2026 by rpki-client