Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          kRpQOrHMN+P4qxK7r+DF5v5Mfclhqu2z3BX1hHy/kF8=
Subject key identifier:   47:0D:B4:E9:D6:83:A3:86:FC:8F:B2:43:22:4C:60:2C:A2:1B:CE:45
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       2C08275CD231C06CBD04B7E4DB29889CF2CC49DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          0454
Signing time:             Sun 26 Jul 2026 08:18:13 +0000
Manifest this update:     Sun 26 Jul 2026 08:13:13 +0000
Manifest next update:     Mon 27 Jul 2026 11:29:13 +0000
Files and hashes:         1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          2: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          4: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: De50UDpoYKLOvA7wV09NWXQzHDHrAoUkMCp44Gu8LeI=)
                          5: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 05:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:08:27:5c:d2:31:c0:6c:bd:04:b7:e4:db:29:88:9c:f2:cc:49:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Jul 26 08:13:13 2026 GMT
            Not After : Jul 27 11:29:13 2026 GMT
        Subject: CN=470DB4E9D683A386FC8FB243224C602CA21BCE45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:1b:74:ee:6a:c7:cd:1b:34:26:22:d3:e6:
                    a1:5f:94:cb:19:80:20:d6:49:d0:c0:95:fb:3d:0a:
                    7a:08:9c:7e:50:db:eb:e5:bc:67:90:88:11:1d:86:
                    62:fc:c6:6d:3f:44:15:b5:fd:1d:b2:e5:42:8c:0d:
                    f3:c3:88:16:51:07:92:ec:f2:59:d0:b7:7f:b8:20:
                    d9:b5:df:da:e2:73:c5:ce:d7:02:c9:4a:00:d5:43:
                    26:eb:0e:9f:dd:9c:b4:9c:3a:ed:ac:78:e3:a8:d5:
                    e3:01:29:88:b6:41:79:ba:ac:6e:9a:6a:fb:3f:01:
                    e2:bf:38:fe:e6:cb:56:7e:88:b8:b6:84:86:5d:67:
                    01:53:ab:7f:91:57:88:de:97:e8:19:eb:db:f2:03:
                    7f:30:9d:2d:b9:d0:e1:f9:6f:a3:e4:a4:be:ab:37:
                    62:b2:77:97:22:95:41:2b:69:f5:a8:92:a0:f2:44:
                    85:b8:1a:66:d3:d0:d7:7f:d0:06:4c:4f:63:2d:5b:
                    45:29:9c:e8:9a:5e:17:8a:a0:51:20:c2:2d:7f:93:
                    bb:8f:33:c5:43:68:78:17:3a:88:09:ed:b8:86:7c:
                    23:a0:87:72:28:f3:12:eb:7d:cf:2f:4f:af:e3:bd:
                    47:53:6a:a8:11:ef:57:22:b8:a8:f1:bb:07:a9:8f:
                    0f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0D:B4:E9:D6:83:A3:86:FC:8F:B2:43:22:4C:60:2C:A2:1B:CE:45
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:b3:91:d4:11:c9:f6:5f:ce:3e:7d:d7:79:8d:9e:8d:12:40:
         62:83:7e:5e:06:bb:19:f9:6d:4c:38:8e:bf:fe:a7:b9:f8:84:
         57:99:40:3a:95:24:6d:e3:24:dd:03:4c:b9:03:f4:d8:bc:db:
         23:f5:75:df:f7:af:8e:af:3e:67:8d:05:c9:15:17:28:0a:60:
         21:1d:e4:2d:1c:fe:48:43:5b:3a:98:f1:cb:59:25:98:18:7b:
         2a:4d:c5:a9:4c:6c:16:65:59:f8:23:1a:93:23:aa:df:ea:13:
         67:d2:de:ce:66:a7:72:10:95:85:28:86:81:eb:ff:bb:1a:47:
         91:a7:90:bc:46:0d:38:56:3d:c7:e2:2d:19:1e:bc:18:e4:93:
         da:5e:e1:21:3e:fb:90:13:87:fa:56:2b:67:df:3e:37:36:98:
         81:7b:32:01:f1:e4:50:d1:80:70:82:12:ca:4d:ab:e4:3d:e0:
         d1:f5:79:fe:20:59:70:3a:2a:54:99:da:a5:55:4b:77:19:3d:
         96:57:ac:ff:b2:0a:8f:3a:38:c2:8e:43:da:be:4c:63:9c:9f:
         ea:99:a6:83:8d:8b:56:2c:1e:61:2d:82:20:63:f9:3e:7a:eb:
         ca:08:7a:38:90:32:c8:64:88:61:18:86:19:42:8a:7b:44:96:
         cd:0f:8c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 13:21:57 2026 by rpki-client