Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          T8b/d+dncDv0zhddt33Jpkdo2VpAvl/hTHM2s7rH3gI=
Subject key identifier:   B9:C8:46:AA:C7:35:C7:91:A5:1F:89:CC:02:95:2C:54:3A:6F:2A:3A
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       6CEBB0B9289E8F1FE3EBFD32D4A06993326573C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          042B
Signing time:             Thu 25 Jun 2026 12:12:35 +0000
Manifest this update:     Thu 25 Jun 2026 12:07:35 +0000
Manifest next update:     Fri 26 Jun 2026 12:12:35 +0000
Files and hashes:         1: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          2: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: q9t+No5qHI9ROelplHvj2wngOO8PwlWzscKiVYrwsF4=)
                          4: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          5: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Jun 2026 12:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:eb:b0:b9:28:9e:8f:1f:e3:eb:fd:32:d4:a0:69:93:32:65:73:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Jun 25 12:07:35 2026 GMT
            Not After : Jun 26 12:12:35 2026 GMT
        Subject: CN=B9C846AAC735C791A51F89CC02952C543A6F2A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:3d:2c:d6:a8:05:f6:04:2d:58:3d:8e:af:
                    5e:80:57:1e:2b:d4:57:63:1b:b1:ab:1b:d6:03:40:
                    6b:08:28:84:ee:2a:9a:9a:d0:c2:8d:d4:c7:8c:9c:
                    bf:bf:64:bf:66:ac:47:d1:da:57:63:c1:ff:41:13:
                    6d:33:03:3d:dd:ad:e9:8c:88:2f:0d:0f:aa:75:df:
                    66:28:50:4a:e7:6e:33:da:ea:c0:4d:cc:61:c5:3a:
                    6f:ad:90:9a:17:08:75:79:53:f4:a1:70:32:5e:b9:
                    fb:b9:e7:28:bd:eb:d6:d2:8b:fc:67:35:f8:c3:0d:
                    af:6a:fe:2a:b6:b2:2f:58:b2:91:3d:5e:77:ac:8e:
                    a5:49:e4:8b:07:ee:dc:86:ad:e0:ef:0f:1c:92:2e:
                    64:27:ec:76:0d:6f:c3:9e:47:af:f3:52:45:4d:cc:
                    6f:90:2e:f4:9f:c4:99:4b:bd:51:fb:e9:97:48:cf:
                    97:ff:88:48:26:0b:c0:c0:c9:77:36:40:23:5f:99:
                    f2:bf:b5:fc:3c:55:10:37:ed:80:d9:9c:4d:89:89:
                    52:62:e1:b0:43:d0:b0:83:48:ed:29:1b:e9:86:c8:
                    c3:fa:fa:72:71:a8:43:9d:0d:cf:e7:4e:97:56:11:
                    45:7b:c4:cf:ed:fb:47:45:ca:5d:c8:64:8b:3c:a7:
                    88:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C8:46:AA:C7:35:C7:91:A5:1F:89:CC:02:95:2C:54:3A:6F:2A:3A
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3a:54:f0:56:a1:46:73:dc:c4:39:48:36:cc:b1:e7:47:87:
         52:42:a8:ca:09:7d:cb:a3:52:ce:c9:2a:f5:5d:77:82:de:41:
         5a:ac:c4:45:fe:6f:08:c2:a0:9b:93:70:eb:c7:a2:04:aa:d9:
         db:d5:08:d6:7e:d7:f9:a4:33:c5:39:ab:57:bb:6d:95:13:9f:
         ed:95:20:c1:98:ed:92:15:c1:f1:b7:9b:0b:63:ee:1d:eb:23:
         42:fe:d5:cb:4d:25:09:58:2d:03:b8:6d:e8:9f:b6:3e:66:3c:
         ec:21:e4:97:80:c7:3f:02:be:01:58:7e:f4:ad:d3:c6:cb:e7:
         a8:51:25:45:40:78:9f:9d:72:eb:99:e3:1d:f7:8b:f6:45:c2:
         2c:ae:92:d8:65:14:a6:40:15:1c:bf:e5:75:12:40:d9:3b:58:
         7e:3a:b0:2a:41:f3:f3:bb:32:f2:d8:07:23:86:93:f8:6f:d2:
         b0:4f:cf:ed:c5:5e:cd:e7:1d:0a:6a:27:1a:db:38:4d:16:81:
         c8:a8:f3:5c:89:c3:25:e5:6b:11:88:a2:10:a0:5c:dc:05:fe:
         66:9f:a4:85:fa:6f:0f:c0:66:43:ff:a2:62:15:1a:55:0e:f9:
         0e:51:a2:05:84:46:98:7e:e7:a6:fe:1e:45:bd:60:a9:97:41:
         27:81:6a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 00:10:23 2026 by rpki-client