Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          geqbauhScnhyqLH5kdlkhIGzQsD9JcWTzW6VsUS7M+w=
Subject key identifier:   C4:50:19:7D:9D:C0:F0:3F:D8:F6:89:3C:D8:10:24:D4:8C:34:F3:00
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       2E04E2D5E5BE5E59A79CFF3D7763251FAD3A75E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          03CF
Signing time:             Fri 17 Apr 2026 13:20:01 +0000
Manifest this update:     Fri 17 Apr 2026 13:15:01 +0000
Manifest next update:     Sat 18 Apr 2026 14:44:01 +0000
Files and hashes:         1: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          2: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: xs9WLA6w29IdJ0wqFsVrDJG+o8klV3sGCx7TjxJbN7o=)
                          3: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          5: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:04:e2:d5:e5:be:5e:59:a7:9c:ff:3d:77:63:25:1f:ad:3a:75:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Apr 17 13:15:01 2026 GMT
            Not After : Apr 18 14:44:01 2026 GMT
        Subject: CN=C450197D9DC0F03FD8F6893CD81024D48C34F300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c1:c4:4f:98:a6:54:30:9f:7b:3b:34:9b:dc:
                    e2:e9:49:0c:2b:86:2b:d2:8a:39:65:2d:72:9b:73:
                    72:20:c2:f7:87:16:2b:6f:68:2f:3b:d0:e5:9e:33:
                    32:a4:47:7c:be:0f:8c:75:3d:94:3d:48:95:74:35:
                    4f:a2:fa:62:d0:19:b3:51:d6:bd:06:f3:30:8d:a2:
                    b5:37:ac:8e:d3:5a:d5:98:ca:3e:12:9e:b6:54:12:
                    9f:22:16:93:a3:96:30:94:a6:71:a4:c0:ea:95:5f:
                    f2:b5:4d:4d:c4:f4:65:7d:c4:e9:c5:34:3a:de:56:
                    f3:3d:2a:87:f2:1e:8a:f1:8a:6c:60:31:6d:ba:4f:
                    cc:79:49:52:91:76:32:42:e9:34:70:c6:af:e1:55:
                    1d:05:c7:8b:90:d3:24:15:5f:e7:d7:9f:20:1e:31:
                    f4:0e:45:b2:12:6b:44:c8:76:63:bd:60:67:0e:70:
                    fd:02:0e:35:98:48:a4:de:0b:11:cc:59:7d:f4:a4:
                    85:72:46:d5:46:c7:01:37:c8:19:8b:77:79:1a:52:
                    78:5c:ea:8b:a0:ee:2d:b2:dd:fc:54:52:93:21:ba:
                    af:d0:84:ac:6a:c6:83:d5:5b:82:ff:22:7c:85:87:
                    9f:a6:ac:6a:0e:a6:36:a9:4f:9b:91:90:7a:64:bf:
                    db:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:50:19:7D:9D:C0:F0:3F:D8:F6:89:3C:D8:10:24:D4:8C:34:F3:00
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:03:17:37:1c:f9:bf:04:26:b8:0e:57:9f:d6:ea:1c:7c:d0:
         f7:5b:f7:2f:f1:8d:43:56:b4:6e:e7:23:c1:eb:53:a0:2d:b9:
         e1:8f:a6:1c:be:4c:db:70:3f:47:7c:b2:9c:b4:fa:c3:e9:de:
         f5:29:25:80:d9:46:bb:1c:df:30:cf:f4:b7:52:40:f8:2b:dc:
         7e:46:e5:60:58:2d:77:3d:7b:e3:22:d2:1a:48:31:3f:5c:0a:
         36:0e:d0:5d:e1:23:1b:b9:7c:25:80:e8:fa:af:c6:52:6b:ce:
         b9:2d:27:23:b8:b4:58:a3:85:04:d9:a9:92:8b:65:38:8f:f0:
         77:a9:b0:dc:81:c5:e3:db:ef:be:98:e0:70:d5:09:df:37:68:
         6e:a2:4e:31:7d:b0:65:64:08:f5:0e:56:de:07:9d:33:39:3d:
         90:67:53:f9:76:e6:83:71:aa:e1:30:ca:25:45:54:cb:fa:8d:
         15:61:b2:e8:6a:97:db:8e:04:43:e4:77:8d:7a:1a:d1:80:85:
         57:df:47:bf:31:5f:c7:3d:d6:41:c2:2d:7f:d1:56:72:2a:e6:
         96:7a:0d:4f:4c:a7:e6:66:f6:72:7b:99:0a:f8:81:4d:7b:35:
         f3:11:83:9f:75:7a:b5:5c:dd:31:c7:d6:70:c6:49:4f:eb:ba:
         07:45:f2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:35:22 2026 by rpki-client