Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          63UsIFfoc6Xsy+NM3PFYW93C1OB7gCZnTmCYPypZsPc=
Subject key identifier:   7A:46:1E:B9:9D:3B:ED:2D:0C:AF:A1:0D:BF:13:96:CE:2B:C3:E8:16
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       69D29BAFBB334A1CCE9EC546A7E61C7E325980A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          03E2
Signing time:             Fri 01 May 2026 22:00:26 +0000
Manifest this update:     Fri 01 May 2026 21:55:26 +0000
Manifest next update:     Sun 03 May 2026 00:08:26 +0000
Files and hashes:         1: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          2: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: fYghnFSU1dFtSf1B+De39VBk4iK/wKcMOQ1sNGX+3Xk=)
                          3: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          5: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 03 May 2026 00:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d2:9b:af:bb:33:4a:1c:ce:9e:c5:46:a7:e6:1c:7e:32:59:80:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: May  1 21:55:26 2026 GMT
            Not After : May  3 00:08:26 2026 GMT
        Subject: CN=7A461EB99D3BED2D0CAFA10DBF1396CE2BC3E816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ca:34:e2:1f:4e:ef:1c:27:41:b6:b6:4b:66:
                    52:ef:0c:5c:d6:8f:01:d0:25:dd:dd:48:bb:35:1b:
                    19:ca:2d:43:f9:4c:b1:94:6f:79:f2:6e:7a:9a:09:
                    d7:fa:ab:38:d7:0a:30:79:73:00:d1:65:70:54:97:
                    9a:f9:c5:69:2c:8f:94:e5:25:2a:a4:ba:18:0d:2d:
                    b2:89:e8:0d:ea:8c:52:30:6a:d7:65:0f:66:af:5c:
                    1d:c2:a4:c5:b2:b6:21:8d:74:45:df:22:31:51:fa:
                    90:d5:45:b3:57:1d:c7:9e:b7:c1:93:17:3f:5e:de:
                    be:56:65:96:b0:44:7e:5d:c0:01:5f:4a:b2:f0:77:
                    b2:13:49:c0:1c:6a:42:99:92:89:35:85:50:83:50:
                    47:4b:bb:c8:75:03:c2:5b:aa:83:81:ed:19:c8:76:
                    35:96:38:01:e9:69:df:68:97:b4:89:d6:91:0f:aa:
                    35:1a:b0:9d:4e:51:ee:96:87:9b:c4:40:13:77:24:
                    ce:e1:bb:c5:f2:4a:e3:7d:fc:90:ae:bc:fc:c2:c8:
                    1b:71:b9:33:18:f7:e6:df:32:24:0e:b4:93:d2:aa:
                    29:ba:71:87:ae:02:1a:49:d9:4d:a9:90:8f:68:2e:
                    2a:5e:61:29:7d:74:1d:44:8d:eb:01:5a:fc:e6:59:
                    93:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:46:1E:B9:9D:3B:ED:2D:0C:AF:A1:0D:BF:13:96:CE:2B:C3:E8:16
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:16:7a:6b:14:db:db:1e:44:b3:51:7c:d5:4d:9b:57:3c:6e:
         87:f1:de:e3:86:ca:90:fe:44:fa:6d:50:ea:9c:eb:d6:f7:67:
         54:89:97:ee:23:0a:21:55:88:59:be:a9:bd:42:35:01:15:95:
         31:c9:4f:b9:d8:e5:66:01:46:39:db:57:40:d3:06:60:90:f2:
         12:0e:2a:eb:31:e9:54:71:55:e0:ce:05:5a:d6:67:68:fc:61:
         33:84:77:be:80:35:8c:9a:54:fd:8e:92:0c:c6:80:b4:d9:d5:
         09:3c:bd:d9:a8:ac:ca:f9:98:50:22:f3:49:e9:78:f0:e0:5b:
         a6:47:53:f0:71:39:c9:75:7c:e2:bc:57:93:3f:f2:45:fd:9f:
         68:88:fc:0d:0f:f4:dd:aa:5d:7a:78:24:25:b9:63:5b:15:5d:
         94:0b:6f:2d:dd:71:45:4f:26:45:74:77:c5:03:f5:58:81:4e:
         01:41:27:7f:89:98:f9:5f:c2:a4:86:93:08:c3:4d:42:bf:b5:
         d3:f3:1f:90:24:27:03:bb:ea:f8:0d:99:94:62:62:ad:db:58:
         8b:92:92:03:bd:87:65:85:78:07:58:c7:5e:ca:54:30:3c:a3:
         65:0c:30:97:00:b3:fa:d7:0e:12:0f:89:e8:95:e3:3a:e7:2e:
         36:7f:4d:ad
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUadKbr7szShzOnsVGp+YcfjJZgKIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl
MmE1YmIzODAeFw0yNjA1MDEyMTU1MjZaFw0yNjA1MDMwMDA4MjZaMDMxMTAvBgNV
BAMTKDdBNDYxRUI5OUQzQkVEMkQwQ0FGQTEwREJGMTM5NkNFMkJDM0U4MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdyjTiH07vHCdBtrZLZlLvDFzW
jwHQJd3dSLs1GxnKLUP5TLGUb3nybnqaCdf6qzjXCjB5cwDRZXBUl5r5xWksj5Tl
JSqkuhgNLbKJ6A3qjFIwatdlD2avXB3CpMWytiGNdEXfIjFR+pDVRbNXHceet8GT
Fz9e3r5WZZawRH5dwAFfSrLwd7ITScAcakKZkok1hVCDUEdLu8h1A8JbqoOB7RnI
djWWOAHpad9ol7SJ1pEPqjUasJ1OUe6Wh5vEQBN3JM7hu8XySuN9/JCuvPzCyBtx
uTMY9+bfMiQOtJPSqim6cYeuAhpJ2U2pkI9oLipeYSl9dB1EjesBWvzmWZNDAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUekYeuZ077S0Mr6ENvxOWzivD6BYwHwYDVR0j
BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0
OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL
bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y
ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE
N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhZ6axTb2x5Es1F81U2b
Vzxuh/He44bKkP5E+m1Q6pzr1vdnVImX7iMKIVWIWb6pvUI1ARWVMclPudjlZgFG
OdtXQNMGYJDyEg4q6zHpVHFV4M4FWtZnaPxhM4R3voA1jJpU/Y6SDMaAtNnVCTy9
2aisyvmYUCLzSel48OBbpkdT8HE5yXV84rxXkz/yRf2faIj8DQ/03apdengkJblj
WxVdlAtvLd1xRU8mRXR3xQP1WIFOAUEnf4mY+V/CpIaTCMNNQr+10/MfkCQnA7vq
+A2ZlGJirdtYi5KSA72HZYV4B1jHXspUMDyjZQwwlwCz+tcOEg+J6JXjOucuNn9N
rQ==
-----END CERTIFICATE-----
Generated at Sat May 2 09:56:34 2026 by rpki-client