Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File:                     8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier:          OxzEF/KxsJDKwXJ9iR9we3PX3fDFR99M2ZBg6i75LXI=
Subject key identifier:   B0:E9:73:CB:E0:01:1A:37:09:09:69:6D:09:2D:EE:18:43:70:31:07
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer:       /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial:       3D4D02679E095F04333430BDECFD8102A5F10A07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number:          024A
Signing time:             Thu 24 Sep 2026 10:52:46 +0000
Manifest this update:     Thu 24 Sep 2026 10:47:46 +0000
Manifest next update:     Fri 25 Sep 2026 14:51:46 +0000
Files and hashes:         1: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: CphsK944HEJwrAZumvxhzgO/o5oH4I/4VJNH7W+Cfjw=)
                          2: AS211695.asa (hash: o//07UHBzOBS1SPe9Mwe9zZ7Di/K3uBLmU6SISwIQJo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:4d:02:67:9e:09:5f:04:33:34:30:bd:ec:fd:81:02:a5:f1:0a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
        Validity
            Not Before: Sep 24 10:47:46 2026 GMT
            Not After : Sep 25 14:51:46 2026 GMT
        Subject: CN=B0E973CBE0011A370909696D092DEE1843703107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8e:77:b0:a0:2b:02:32:80:2b:26:c0:90:8d:
                    ea:bf:27:50:9e:c2:5c:53:2a:30:41:3b:98:a7:65:
                    8a:ad:ed:9f:ac:10:d7:a0:d8:09:32:b7:6e:b7:a2:
                    fc:e9:47:5d:09:ac:06:05:33:9a:28:f2:41:93:55:
                    59:78:d2:6c:5f:0c:06:a5:22:ce:b0:14:3d:88:d1:
                    0a:e8:d5:f5:5c:ab:22:6e:a2:a2:44:0e:0e:c4:68:
                    34:19:11:ff:ef:6c:cc:30:60:7e:2b:52:02:3a:28:
                    dd:4f:ce:2c:52:9b:dc:61:19:de:f9:4c:8c:ad:6b:
                    ec:7d:10:29:85:4c:30:e9:49:ba:1d:c2:91:f9:0f:
                    f0:df:5b:6c:fe:8a:8c:83:f7:3a:7c:25:85:8a:24:
                    18:42:14:2c:fc:a3:14:61:93:6b:10:b4:65:97:2b:
                    58:39:71:bd:e2:44:00:e5:18:44:7a:b2:20:ed:08:
                    55:4d:fe:f0:da:7d:44:28:25:c7:ed:92:ea:a7:e3:
                    86:1e:c2:c9:f3:f0:b9:5b:01:5e:83:b9:db:2d:6b:
                    47:c9:a2:4a:ad:ce:c8:d6:ae:1a:24:89:f2:4b:18:
                    dc:44:0a:0e:ec:e8:13:69:1a:44:d5:22:b7:78:cd:
                    48:05:d7:b3:20:39:63:e6:1f:c3:96:5d:f6:d8:99:
                    b7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E9:73:CB:E0:01:1A:37:09:09:69:6D:09:2D:EE:18:43:70:31:07
            X509v3 Authority Key Identifier:
                keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:10:35:f0:23:b5:7d:56:10:cc:5e:91:18:70:60:06:d2:cc:
         0d:c5:bf:5a:e9:90:ae:9a:89:6a:ad:d9:be:77:3c:31:71:26:
         5f:f4:99:91:0d:96:d2:1e:3d:9a:c1:1b:23:ba:89:1f:b7:7b:
         ff:0b:60:a3:9d:42:95:03:94:96:ee:a1:c3:1e:00:f1:1a:85:
         53:cd:c8:14:34:d3:53:24:95:a9:28:1e:11:ea:f4:a6:01:8f:
         55:6c:f1:76:2b:82:46:ff:18:70:4c:3d:48:c3:8b:37:c8:e5:
         7c:24:11:56:91:fe:39:63:f0:3d:33:c4:c1:1a:a3:64:33:8b:
         ac:40:7f:4f:d8:2f:b8:67:f9:3b:38:0b:a2:57:df:08:f4:98:
         70:9c:e9:22:35:82:4f:96:21:23:3a:57:10:b0:8d:f8:d4:d2:
         ca:c8:f4:e9:f2:dd:9a:b9:6f:2f:53:3a:a6:b1:dc:ab:a5:92:
         b5:71:71:ca:cd:ee:ac:48:e2:6d:39:93:66:70:87:3f:76:dd:
         b1:41:9b:b3:4f:17:1d:2d:a7:47:d1:b2:b4:11:81:82:4a:a9:
         7f:e9:61:80:75:91:8f:a6:f9:7b:45:fe:51:1b:ca:3a:8c:35:
         70:6a:d4:d5:dc:49:b3:0a:39:42:76:22:49:a4:d7:1c:fe:cf:
         1f:ec:58:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:46:29 2026 by rpki-client