Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File:                     8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier:          oy1qjHG9shFtMNAJGuZ+fKJKWC6D85sh30JM7EseZ+A=
Subject key identifier:   A0:C7:9D:18:6A:2C:64:72:D7:02:51:E8:B4:E4:14:1F:7E:D1:2D:A3
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer:       /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial:       44EA5247558C922F33BB5B38F2E6A18C57043183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number:          01F5
Signing time:             Thu 23 Jul 2026 16:48:39 +0000
Manifest this update:     Thu 23 Jul 2026 16:43:39 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:39 +0000
Files and hashes:         1: AS211695.asa (hash: ksEGxGaely4EKKqlYiXzfj094SF2RqDArlZmzjGa1GM=)
                          2: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: gxIn9Nc+u15OAvYysSOmrX/3aB0/h6EbwNUQRHET2d8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ea:52:47:55:8c:92:2f:33:bb:5b:38:f2:e6:a1:8c:57:04:31:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
        Validity
            Not Before: Jul 23 16:43:39 2026 GMT
            Not After : Jul 24 17:00:39 2026 GMT
        Subject: CN=A0C79D186A2C6472D70251E8B4E4141F7ED12DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d5:65:e4:b4:e8:f3:aa:7d:79:2e:42:ed:d1:
                    da:1e:3e:50:68:54:f9:14:9d:96:dd:f4:37:da:1b:
                    29:10:95:22:91:e2:dc:be:b4:f9:fc:29:01:08:7d:
                    a6:25:10:b2:73:16:31:72:07:23:66:62:b5:b0:a4:
                    66:73:4d:59:00:11:7e:44:59:57:88:b6:1f:34:d3:
                    89:d8:57:35:90:e6:4a:1d:fd:c8:14:1f:77:9b:c9:
                    fe:af:f6:50:29:5f:9f:b5:3e:1b:9d:7a:b8:e1:25:
                    3e:70:2d:e7:6b:f1:b3:ea:03:9f:d6:96:e3:17:b4:
                    fa:e0:44:37:7c:75:df:95:ca:ce:fe:4c:54:e0:69:
                    81:ac:1c:b4:cf:f9:a6:f7:7b:2b:18:59:5b:99:2a:
                    8f:05:e7:70:b9:e6:c0:ba:28:90:5a:4a:26:fd:4f:
                    a2:04:6b:ca:b3:e0:c5:89:6b:06:50:37:b7:d3:f3:
                    28:89:f9:25:95:2c:39:e8:0d:5f:67:43:d0:a7:3d:
                    73:a7:a6:04:50:92:f7:e1:f1:19:fb:97:f3:52:47:
                    1c:70:01:14:a1:87:ae:57:00:36:7f:34:d0:5c:74:
                    f9:3a:cd:36:b7:35:65:fe:21:0e:9b:3d:fc:66:16:
                    99:11:27:c7:84:d0:de:9e:29:44:93:68:11:4f:e7:
                    0b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C7:9D:18:6A:2C:64:72:D7:02:51:E8:B4:E4:14:1F:7E:D1:2D:A3
            X509v3 Authority Key Identifier:
                keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:50:dd:ab:c0:75:cc:4f:11:8d:13:c2:fc:c3:94:71:a4:a4:
         42:85:64:c9:62:f3:a4:2d:fe:c9:ca:cd:f3:73:2e:76:dc:34:
         9a:19:c9:65:d5:6a:4a:5c:06:6c:d0:51:2d:5c:c0:45:f4:d8:
         47:a6:67:ed:f8:8c:17:26:7c:0d:82:5e:9f:24:e6:fa:3b:55:
         c5:2d:bc:4c:21:ad:64:cd:a1:14:c4:eb:20:94:d8:29:21:d1:
         33:ed:3f:f0:2e:a4:42:a5:14:0f:cf:0f:88:c9:9f:29:51:9e:
         cc:0d:bf:b5:7d:a8:2a:12:92:3f:8a:5a:77:93:88:2b:44:18:
         d9:48:6c:01:a4:7d:a6:46:6e:ad:09:d6:70:92:09:89:12:6f:
         8b:3e:31:48:04:21:81:af:33:32:82:68:fc:33:bd:3d:97:e6:
         2b:62:55:a8:8c:bf:99:8c:27:20:7f:7d:5b:c5:d3:57:6c:e3:
         1c:9e:8d:d4:d4:2e:26:16:b8:7e:bc:2c:ac:3d:f2:14:cc:ec:
         4b:ba:65:1b:4f:74:25:04:0a:bf:01:ca:a7:93:20:33:03:99:
         1b:f4:31:2e:c2:31:05:70:a7:c5:49:35:d4:a7:70:be:be:d3:
         84:e2:50:84:14:76:6a:fe:27:8f:c6:6c:f5:4b:26:a7:8d:42:
         8b:5a:94:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:30 2026 by rpki-client