Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          dLe2bdSw0h+A2DbdwDejCnN6ODWspdCr1KbtRdiAGok=
Subject key identifier:   FE:B4:82:E6:0C:51:68:95:B2:BC:41:DA:9C:B9:DE:59:07:F3:13:42
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       7020ABCEA09F36DEFF71BDB69DF08BEB2C6B8241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          042F
Signing time:             Sun 28 Jun 2026 09:35:18 +0000
Manifest this update:     Sun 28 Jun 2026 09:30:18 +0000
Manifest next update:     Mon 29 Jun 2026 11:11:18 +0000
Files and hashes:         1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          2: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: TuLPh7lGm3zvg4JjciO2eENGUYLBDOq8gNL+sqVOYiU=)
                          4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          5: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 11:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:20:ab:ce:a0:9f:36:de:ff:71:bd:b6:9d:f0:8b:eb:2c:6b:82:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Jun 28 09:30:18 2026 GMT
            Not After : Jun 29 11:11:18 2026 GMT
        Subject: CN=FEB482E60C516895B2BC41DA9CB9DE5907F31342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8d:b8:9f:39:e9:4e:45:eb:67:f0:92:9c:d7:
                    dc:8c:f2:b2:56:26:0e:72:1f:4d:f0:43:a8:0b:fd:
                    09:df:4d:6a:d4:13:b4:b3:0a:07:d9:ec:d8:3f:b0:
                    52:f0:3c:78:18:66:7b:3c:69:03:e8:09:e1:c9:e8:
                    77:59:f7:6a:70:4d:be:76:27:8e:65:d9:91:4c:6f:
                    e5:8d:9d:a1:b3:36:77:bc:c8:e5:aa:ee:94:75:13:
                    3c:46:4f:ed:6f:02:26:ac:f2:84:d8:34:12:d5:53:
                    44:35:b9:94:46:4f:b2:8c:33:6c:91:29:c2:e2:e9:
                    2b:1c:ed:69:7a:89:2c:cc:13:7f:f5:1a:26:16:cf:
                    15:ef:f1:cc:6e:0f:e7:96:9a:f9:68:69:60:d9:09:
                    19:30:0e:c8:e9:48:4c:25:a4:ed:41:92:63:d4:0b:
                    fe:5c:0f:fe:ec:46:8d:56:f0:d5:3f:43:85:3c:21:
                    30:34:1b:2f:d0:b1:46:ed:c6:f6:82:ce:b0:39:f4:
                    ac:f8:ac:35:72:08:6f:ae:2a:c6:f3:66:c3:9f:20:
                    3c:f6:7e:42:13:05:cc:bc:86:c6:2f:5a:58:3a:6e:
                    c4:95:19:75:b6:f5:95:ee:55:6d:8d:1b:06:62:f0:
                    94:54:f4:67:50:47:1e:c2:a1:b5:8c:1d:e1:b4:e5:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B4:82:E6:0C:51:68:95:B2:BC:41:DA:9C:B9:DE:59:07:F3:13:42
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ce:2e:fe:be:28:0d:f6:92:9f:22:96:bc:4f:ce:97:28:48:
         9c:48:5a:17:a4:5f:de:21:af:1d:bb:6a:62:3f:39:bf:df:c4:
         40:b4:2b:24:b0:b4:e8:29:46:3e:17:c7:bd:5a:fe:52:b2:d6:
         41:e9:64:2f:6b:25:38:11:ed:29:f5:f3:1f:ce:b5:e8:ae:a0:
         95:f6:dc:c5:fb:66:12:b3:ec:95:1e:f4:5f:1c:bf:eb:03:1a:
         7a:8f:8f:6a:e2:45:6d:15:c8:9f:7c:cd:33:d9:d7:3a:a5:0e:
         a5:a7:d9:f1:1f:7e:d1:1c:2c:af:68:fd:ce:d1:8a:3d:5a:ce:
         33:1e:e4:11:da:5c:be:aa:fb:cd:9c:1c:9a:46:b0:fd:b6:4e:
         fe:2b:71:2d:95:9d:a9:64:0c:7b:5e:89:1b:df:a8:59:3b:ca:
         34:e3:34:17:b7:97:61:10:3e:b0:00:e7:1b:78:b4:71:1c:c8:
         be:82:36:fa:4a:84:5a:a8:c2:3c:1c:be:bb:a3:6b:d0:e8:07:
         48:16:97:36:d3:b7:f9:92:ef:86:47:7e:11:42:6a:d7:aa:b6:
         6d:0b:a9:6c:21:68:4e:5a:37:33:ab:c9:8e:cf:f5:1d:fc:10:
         a3:4b:84:8b:37:6c:d3:e6:4a:15:97:02:0e:40:44:61:d0:e8:
         be:ba:36:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 01:15:41 2026 by rpki-client