Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          LpQ6NMFV3Idnust5D2jZT9EQXQJ8CupIyGIqL3U5lew=
Subject key identifier:   47:EB:BA:CC:40:34:F7:AA:12:DB:C6:E1:10:E2:FC:E8:A8:CA:35:68
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       4C532145EDA29CBF915CBF85101132317BE3E623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          039C
Signing time:             Tue 10 Mar 2026 06:43:32 +0000
Manifest this update:     Tue 10 Mar 2026 06:38:32 +0000
Manifest next update:     Wed 11 Mar 2026 10:10:32 +0000
Files and hashes:         1: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          5: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: /IhPt3PGi9kq9zA3jYZPCvd/AdOQYngk1bNRAK3scXA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Mar 2026 10:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:53:21:45:ed:a2:9c:bf:91:5c:bf:85:10:11:32:31:7b:e3:e6:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Mar 10 06:38:32 2026 GMT
            Not After : Mar 11 10:10:32 2026 GMT
        Subject: CN=47EBBACC4034F7AA12DBC6E110E2FCE8A8CA3568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fa:bf:dd:bc:02:8a:93:63:b7:e8:c7:16:48:
                    ac:2c:87:64:66:14:91:2c:07:23:21:54:1e:e8:2c:
                    e4:a5:34:29:54:f2:02:42:17:08:16:90:81:25:3d:
                    84:c9:64:b8:3e:78:96:13:f9:10:bf:c0:ae:c0:bf:
                    79:ed:36:8c:7c:e6:a7:da:a7:a9:4e:cc:db:e4:b6:
                    fc:5b:ff:4c:cf:35:b2:b7:c9:07:fa:04:9d:cf:73:
                    d9:3e:55:a9:43:7c:20:cc:d3:0a:96:f5:db:7d:4f:
                    73:10:fd:20:46:f3:b7:a5:b1:7c:76:e7:b0:56:a5:
                    c0:c3:bd:f5:03:73:95:30:07:35:82:1e:39:63:c7:
                    75:01:6e:6f:23:09:e9:22:aa:5a:25:25:38:dc:70:
                    06:20:d8:1b:55:d9:94:fc:cb:15:ef:9c:d4:a5:a7:
                    d1:a5:cf:3d:de:e5:5f:3f:b1:55:37:ed:5b:6c:a5:
                    4e:17:bd:23:13:0f:c7:fb:4c:d7:b6:e3:0c:d4:0b:
                    3a:da:e5:78:b1:b9:64:76:0f:14:6d:69:7b:9e:4a:
                    9a:3a:7f:dd:b8:7e:48:5f:25:f9:e5:56:e3:01:bd:
                    8e:75:2c:1a:76:86:56:08:8a:12:10:c5:40:c0:b7:
                    34:04:af:95:47:22:13:59:13:81:2d:5a:e0:51:fd:
                    0b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EB:BA:CC:40:34:F7:AA:12:DB:C6:E1:10:E2:FC:E8:A8:CA:35:68
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:38:0d:39:c1:bb:36:35:64:17:00:32:7b:21:a3:d3:39:76:
         aa:6e:be:bb:02:d6:c3:ce:63:61:8b:6c:c1:90:e4:91:0a:d0:
         e6:9a:e4:ba:d6:5f:86:95:8d:6c:d2:0e:f4:4d:db:96:ea:7f:
         fd:b0:11:b8:26:7a:16:f0:de:10:11:8b:e2:26:98:a2:cf:c0:
         ed:d0:10:6f:92:73:b1:82:db:7b:b2:0b:63:66:88:a2:ff:9f:
         c5:05:33:7e:63:a1:3f:24:c5:ec:5c:0b:ef:96:ff:53:66:4c:
         b5:4e:f1:5c:7b:d2:24:f9:78:c8:82:ac:e8:57:4f:46:c4:ff:
         b8:b6:63:90:a2:f0:29:c8:d7:95:b7:d2:f8:e3:5a:8e:fa:9e:
         5f:9f:77:0d:d9:46:07:b5:9d:b9:7a:ee:aa:3a:55:ce:d2:49:
         b6:3b:5d:75:4f:5e:9e:9e:05:bd:a2:18:32:35:2a:de:b0:05:
         2f:81:9f:1b:6e:b5:a8:f5:33:32:ba:2a:ee:b0:7e:3a:a3:2f:
         0e:5c:de:5b:87:7e:9e:8c:43:a8:dc:e5:1a:5f:ff:3f:c1:ff:
         f7:8a:96:15:de:42:10:7e:62:ca:d4:04:3e:9a:da:0e:64:2a:
         34:2a:0e:d5:1b:f8:28:1e:83:28:a6:b5:86:dc:9d:89:be:16:
         a5:13:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 20:56:11 2026 by rpki-client