Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          CSMtuU3duWit14ZP51k/b70y4WoQW8iv7vaet7f9Ibk=
Subject key identifier:   9E:D4:08:61:7B:1F:94:5E:0F:3E:98:BA:14:1B:77:19:70:CA:1A:C2
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       661E3FD374571F3847910A129AF39079D55CBE30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          03ED
Signing time:             Sat 09 May 2026 22:50:38 +0000
Manifest this update:     Sat 09 May 2026 22:45:38 +0000
Manifest next update:     Mon 11 May 2026 00:33:38 +0000
Files and hashes:         1: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: ElBq5ww2ZHCLUsPjsa+IoGDl2/EG/V4x5QuhtOTDGsc=)
                          2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          5: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 May 2026 00:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1e:3f:d3:74:57:1f:38:47:91:0a:12:9a:f3:90:79:d5:5c:be:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: May  9 22:45:38 2026 GMT
            Not After : May 11 00:33:38 2026 GMT
        Subject: CN=9ED408617B1F945E0F3E98BA141B771970CA1AC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:91:7b:bd:44:62:99:44:0b:b0:59:f3:e8:
                    46:22:eb:78:e3:55:61:21:bc:53:57:53:41:db:42:
                    23:12:10:d9:9a:0d:c0:37:ce:61:bc:2a:e3:5a:4d:
                    c3:82:ba:0b:d1:f5:55:e5:ec:1a:eb:b9:3b:4f:9b:
                    e5:59:a0:60:ef:ef:0e:7e:11:ee:3f:a1:4c:aa:b1:
                    e4:3a:36:90:c0:79:07:2a:24:7c:de:56:63:ca:66:
                    99:63:8f:2d:6d:f3:1d:4c:dd:f8:64:1d:b8:b5:45:
                    92:86:74:c1:68:61:23:d8:7a:13:ae:a6:ce:96:67:
                    de:23:40:f6:64:79:7c:4a:61:26:63:10:65:fe:a9:
                    bc:9f:29:db:47:a7:eb:0e:ed:e6:57:16:56:e3:27:
                    b7:a7:aa:6c:8d:c3:d1:2c:c1:af:e0:86:91:f6:a1:
                    d3:fe:51:b8:2f:bd:e5:c1:dc:e0:f9:ab:ba:10:1a:
                    a1:5a:b8:d3:b4:b8:25:c8:bb:eb:d8:6b:cf:6d:45:
                    43:ca:4c:05:f1:ae:65:45:b2:1b:ad:ce:94:21:74:
                    d9:b3:62:5c:dc:79:95:1b:c6:11:a0:28:cd:10:29:
                    89:51:76:39:06:a4:2b:8b:5f:7a:81:07:9b:b0:2a:
                    3e:7a:5d:3f:78:85:ab:f8:b9:d2:01:3d:9a:63:d7:
                    70:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D4:08:61:7B:1F:94:5E:0F:3E:98:BA:14:1B:77:19:70:CA:1A:C2
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a4:ff:91:22:05:60:44:f3:99:4f:b9:32:58:c1:16:a3:05:
         36:7b:fb:fa:6a:64:89:45:f3:a5:26:21:cf:a5:a8:7c:88:3c:
         ba:d5:3b:b1:eb:ff:bd:e2:d3:d1:25:20:6f:47:2c:ca:70:82:
         85:55:6d:f5:83:94:dc:0d:4e:53:f7:63:42:4d:4b:b6:85:81:
         6c:64:35:87:b8:bf:96:ca:b1:95:0b:58:5c:6c:ca:37:05:e3:
         ba:0b:d4:0c:b5:07:06:b2:8e:de:33:94:a0:59:6a:48:25:31:
         a6:99:e8:97:8b:6e:2d:2e:31:18:cf:95:22:3a:da:9b:40:67:
         7d:bb:ce:7b:ce:d0:59:bf:dd:0a:84:76:74:3e:28:ed:da:74:
         c6:b4:d4:f4:e0:94:ec:29:d0:08:10:45:cc:b3:ef:4d:a0:aa:
         80:a1:92:72:73:d4:dd:f1:28:fd:da:3f:3b:04:21:0f:7f:d1:
         b2:55:70:bc:44:ce:bb:02:3d:50:64:ea:fb:27:10:b8:c2:71:
         ba:34:17:fe:d0:49:08:db:54:bf:66:56:41:74:5f:e6:f9:d0:
         b7:f4:79:d7:6d:78:05:8f:1a:be:46:d9:47:5a:bd:54:a5:90:
         34:5e:9a:00:a2:d5:fa:67:5b:43:ae:11:83:d3:ea:82:9d:d7:
         70:63:b5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 07:47:18 2026 by rpki-client