Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          IFQJaeXO2//tKPRqyP6dcQdYc0FRGSBoAKm6+twRXCQ=
Subject key identifier:   9B:43:D0:0D:25:8A:44:40:0B:25:A7:AB:D9:B7:C4:77:CA:12:98:7D
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       3BC6D54E59D5E15ED6426BC816D8FC5C32672253
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          0433
Signing time:             Wed 01 Jul 2026 11:26:36 +0000
Manifest this update:     Wed 01 Jul 2026 11:21:36 +0000
Manifest next update:     Thu 02 Jul 2026 14:17:36 +0000
Files and hashes:         1: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          2: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: BUPe3Vn5oVTmZKiTcVoQ6VV8frxPHTxnD86IB+jGK3c=)
                          3: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          4: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          5: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 Jul 2026 14:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c6:d5:4e:59:d5:e1:5e:d6:42:6b:c8:16:d8:fc:5c:32:67:22:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Jul  1 11:21:36 2026 GMT
            Not After : Jul  2 14:17:36 2026 GMT
        Subject: CN=9B43D00D258A44400B25A7ABD9B7C477CA12987D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:16:b8:10:a8:0a:90:d4:ea:a5:a8:d4:99:b1:
                    36:ad:8c:4b:d8:e6:8d:81:89:d6:0b:c6:e2:7f:ba:
                    0b:c8:e4:f9:88:b0:57:23:6e:d1:2b:ee:f3:a5:be:
                    6d:ad:8e:b3:35:a3:54:57:a5:eb:39:8e:3c:c4:3f:
                    59:35:5c:94:72:96:50:ac:ff:9f:e2:15:40:a3:ca:
                    6e:dd:df:78:3f:40:85:55:7c:f2:23:f9:f4:1b:b8:
                    c2:a9:3c:26:45:84:c8:1d:54:49:bd:3a:b6:1e:c9:
                    81:f8:b8:ef:f3:19:cc:6f:d0:33:f8:bc:41:3d:d1:
                    7e:0f:7c:89:7f:d0:d9:92:2a:ec:be:52:c0:f0:08:
                    4d:03:f0:41:fc:04:19:f8:86:f5:ff:23:55:8d:f3:
                    14:18:fb:49:ea:cf:0b:52:96:72:c9:32:b0:54:ea:
                    47:cc:89:24:a8:49:75:01:1f:3a:b4:13:53:65:ab:
                    39:0b:01:52:a2:aa:5a:50:ad:60:d1:6a:09:0a:f3:
                    89:14:ac:07:8c:56:31:8c:80:d4:07:b0:5a:a8:a7:
                    eb:a7:70:77:ad:13:41:d7:81:eb:8a:9c:a2:28:5d:
                    4f:1e:fa:91:b8:06:41:7d:4b:2d:67:80:5f:88:41:
                    a8:63:af:f0:64:82:fe:12:32:60:ca:40:56:52:7f:
                    64:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:43:D0:0D:25:8A:44:40:0B:25:A7:AB:D9:B7:C4:77:CA:12:98:7D
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:71:e0:a1:1e:c4:33:e9:51:03:01:2e:c0:b7:43:58:9f:62:
         75:0c:6b:c9:8f:6c:5d:55:e4:86:d1:2e:2e:7e:f1:78:a2:3f:
         b2:61:ce:63:0c:5d:d8:ce:23:7f:2a:4d:4d:59:4d:b7:9a:3f:
         83:c3:0f:ff:39:7b:54:5a:77:57:9a:41:21:30:58:43:fc:65:
         7b:8d:34:4d:fb:96:72:50:30:93:af:06:0c:81:de:f1:84:3f:
         93:8f:7f:3b:4e:3a:49:4b:eb:ca:5e:e5:ba:92:6f:17:71:a9:
         f4:de:b1:51:c5:d9:07:45:0d:1e:d6:ce:aa:06:f2:d7:cb:9b:
         de:05:f0:37:c6:6d:9d:d1:63:ed:4d:33:a2:c9:41:a1:9d:09:
         cf:48:2f:c8:dc:81:7c:6e:03:a9:64:8f:51:37:61:8e:6f:ca:
         98:11:87:e9:1d:a8:ba:79:32:1f:e1:3f:c4:41:6c:0b:24:3c:
         a3:8d:51:dc:17:dc:04:2c:d1:ef:8c:c0:af:3b:9c:03:1c:03:
         de:ae:3d:ab:8c:ed:b2:94:a6:dc:76:9b:78:a3:d9:f4:94:b7:
         ac:4e:03:c2:e3:62:96:13:4d:c2:10:eb:21:74:19:e7:ad:3a:
         bb:1b:b8:3a:ba:3a:56:d1:8b:7f:cb:03:4a:6b:85:da:6a:3a:
         66:50:a6:22
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUO8bVTlnV4V7WQmvIFtj8XDJnIlMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl
MmE1YmIzODAeFw0yNjA3MDExMTIxMzZaFw0yNjA3MDIxNDE3MzZaMDMxMTAvBgNV
BAMTKDlCNDNEMDBEMjU4QTQ0NDAwQjI1QTdBQkQ5QjdDNDc3Q0ExMjk4N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0FrgQqAqQ1OqlqNSZsTatjEvY
5o2BidYLxuJ/ugvI5PmIsFcjbtEr7vOlvm2tjrM1o1RXpes5jjzEP1k1XJRyllCs
/5/iFUCjym7d33g/QIVVfPIj+fQbuMKpPCZFhMgdVEm9OrYeyYH4uO/zGcxv0DP4
vEE90X4PfIl/0NmSKuy+UsDwCE0D8EH8BBn4hvX/I1WN8xQY+0nqzwtSlnLJMrBU
6kfMiSSoSXUBHzq0E1NlqzkLAVKiqlpQrWDRagkK84kUrAeMVjGMgNQHsFqop+un
cHetE0HXgeuKnKIoXU8e+pG4BkF9Sy1ngF+IQahjr/Bkgv4SMmDKQFZSf2RLAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUm0PQDSWKREALJaer2bfEd8oSmH0wHwYDVR0j
BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0
OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL
bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y
ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE
N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3HgoR7EM+lRAwEuwLdD
WJ9idQxryY9sXVXkhtEuLn7xeKI/smHOYwxd2M4jfypNTVlNt5o/g8MP/zl7VFp3
V5pBITBYQ/xle400TfuWclAwk68GDIHe8YQ/k49/O046SUvryl7lupJvF3Gp9N6x
UcXZB0UNHtbOqgby18ub3gXwN8ZtndFj7U0zoslBoZ0Jz0gvyNyBfG4DqWSPUTdh
jm/KmBGH6R2ounkyH+E/xEFsCyQ8o41R3BfcBCzR74zArzucAxwD3q49q4ztspSm
3HabeKPZ9JS3rE4DwuNilhNNwhDrIXQZ5606uxu4Oro6VtGLf8sDSmuF2mo6ZlCm
Ig==
-----END CERTIFICATE-----
Generated at Thu Jul 2 02:28:13 2026 by rpki-client