Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
File:                     FB64D48D941F2F324279CF863188D26D2056D11D.mft (raw, json)
Hash identifier:          oiMNf1A8Jt0LZ135r32+H4CI7qdvbQbCx1IP5ceBSGU=
Subject key identifier:   52:A3:95:DE:5B:39:A0:F8:6E:D9:B6:FB:F5:72:15:E4:AC:E5:B5:24
Authority key identifier: FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D
Certificate issuer:       /CN=fb64d48d941f2f324279cf863188d26d2056d11d
Certificate serial:       351E8B754EF6A7D8E1BD8415706F016484346C8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
Manifest number:          052C
Signing time:             Fri 25 Sep 2026 02:37:17 +0000
Manifest this update:     Fri 25 Sep 2026 02:32:17 +0000
Manifest next update:     Sat 26 Sep 2026 05:19:17 +0000
Files and hashes:         1: FB64D48D941F2F324279CF863188D26D2056D11D.crl (hash: 2b99BHIC3YtMggvixac1uDsBxMsc1M8dlKkiyDevm5c=)
                          2: AS216375.asa (hash: shfUbygsmaINWuCxth8kL86Xx/Cxvh4vGgfMdty+sbw=)
                          3: AS44817.asa (hash: 5qLAlniEKgmCFYJA5qBBdJDL62xHPXYGEInk9kaecMA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1e:8b:75:4e:f6:a7:d8:e1:bd:84:15:70:6f:01:64:84:34:6c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb64d48d941f2f324279cf863188d26d2056d11d
        Validity
            Not Before: Sep 25 02:32:17 2026 GMT
            Not After : Sep 26 05:19:17 2026 GMT
        Subject: CN=52A395DE5B39A0F86ED9B6FBF57215E4ACE5B524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:7f:6f:e1:21:de:87:d9:1b:33:cc:37:e8:
                    25:70:01:ce:fa:1e:3e:68:b3:e4:ac:7b:e3:87:aa:
                    18:db:de:79:33:e7:aa:ad:76:b8:a1:08:71:c1:e2:
                    4a:c3:18:1a:39:9c:a4:7c:51:27:58:9f:96:d7:30:
                    92:01:1b:4b:f7:d9:9f:53:4d:8d:6b:01:2a:37:3d:
                    d3:52:c4:76:40:2d:20:1d:f7:24:b1:e4:6f:0f:79:
                    5b:69:2d:ff:3d:b4:e8:df:e5:fc:3a:16:3c:ae:3b:
                    05:b7:7d:d2:69:46:02:3e:ba:77:45:99:c1:2a:54:
                    18:52:95:b1:46:36:61:c8:22:fa:97:3a:bd:17:2d:
                    1d:33:05:5c:0c:0f:78:42:74:48:11:dc:42:c1:3c:
                    d3:7e:81:4d:68:e1:4b:4a:95:ef:2b:47:3e:28:7a:
                    f0:ee:8e:dc:d7:3e:37:e3:34:6f:96:07:8e:61:b2:
                    47:84:f9:e0:5e:07:a5:f2:81:83:d0:42:24:6f:93:
                    b4:df:15:6b:5d:c1:43:d0:a9:e8:49:e3:e8:3c:62:
                    f5:ee:48:86:c3:57:b5:be:6b:db:75:99:ab:37:16:
                    d3:a0:81:e8:a5:b7:4b:de:42:b4:81:3d:5f:1d:32:
                    f1:2c:a9:8c:29:b8:c5:49:1d:6f:d7:25:02:74:1c:
                    13:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A3:95:DE:5B:39:A0:F8:6E:D9:B6:FB:F5:72:15:E4:AC:E5:B5:24
            X509v3 Authority Key Identifier:
                keyid:FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:7b:3b:f2:69:97:71:e5:eb:d7:40:8f:79:d7:40:3c:d0:ad:
         5c:ca:68:91:cb:8f:62:90:26:df:2e:53:5f:92:33:c3:87:2b:
         70:8b:72:e3:2c:df:a0:8b:5a:8e:da:68:96:4e:84:55:ee:13:
         94:00:26:80:de:13:85:34:81:ed:63:7b:75:9b:cb:62:87:75:
         5e:1e:11:b7:f9:fe:f6:d2:4d:53:00:36:71:dd:04:ef:df:1c:
         fc:5b:9e:fe:6b:16:6a:14:31:3f:4b:15:e1:53:ef:07:cb:2f:
         56:a2:dc:0f:f1:1e:4d:ae:ce:c8:c6:ed:8b:ab:1b:31:aa:63:
         1f:76:89:e0:2b:8c:70:96:3c:70:b0:3b:0d:2b:d8:8f:43:0a:
         a9:f0:64:4e:47:5b:5a:fb:49:d4:96:09:e0:76:8e:03:87:95:
         8c:cd:3a:16:da:3d:b0:80:79:be:49:49:ba:6d:17:9c:1b:d9:
         5c:51:32:7e:fb:b1:89:f0:d6:b0:07:bc:97:b6:0a:1f:10:2d:
         95:0e:f7:2d:06:c5:5c:11:d8:c7:8d:25:5f:86:ee:1d:8e:c4:
         8e:a1:6e:5d:d9:30:a3:5e:60:cd:3b:f7:a9:d3:18:d9:a4:a1:
         56:d5:32:d6:60:31:6e:7d:1f:57:c3:3a:1d:cd:8f:b7:b5:71:
         7f:c5:e1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:12:29 2026 by rpki-client