Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          K2mpMjkBL3b+CcIxl0sd5tYqr/MD5xR10zsq9DAxzxc=
Subject key identifier:   FC:FF:40:50:65:83:F9:C2:0D:71:70:F9:06:13:E6:6C:96:79:E1:BE
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       0A902ECC7DE55F11C586275FF497473079E4E085
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          041F
Signing time:             Tue 16 Jun 2026 12:20:36 +0000
Manifest this update:     Tue 16 Jun 2026 12:15:36 +0000
Manifest next update:     Wed 17 Jun 2026 14:58:36 +0000
Files and hashes:         1: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: y3amQT2fJ3dE8NTLWcm3uWK4MqrFjns58DsJKQtiKr8=)
                          2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          3: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          4: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          5: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 14:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:90:2e:cc:7d:e5:5f:11:c5:86:27:5f:f4:97:47:30:79:e4:e0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Jun 16 12:15:36 2026 GMT
            Not After : Jun 17 14:58:36 2026 GMT
        Subject: CN=FCFF40506583F9C20D7170F90613E66C9679E1BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:04:87:a1:d7:76:f7:d8:3c:ff:c9:0f:e8:c3:
                    a2:7f:1e:67:98:22:4d:66:94:d7:d3:1b:d4:e6:5d:
                    51:84:9c:64:e2:50:5e:ba:19:54:2e:55:bf:2a:cf:
                    b9:7f:52:af:5f:d7:e1:0e:a2:44:e5:43:55:fc:f7:
                    0a:f6:53:03:a1:94:2e:2f:05:30:a9:89:ed:36:36:
                    4b:ec:e2:6b:27:22:e7:83:43:6a:08:58:b2:e9:e4:
                    b9:2c:38:f0:57:29:b7:95:15:72:6e:c7:2e:20:2b:
                    52:7a:fd:fe:68:a5:11:ec:2c:be:5d:9a:1d:4e:cf:
                    9f:d3:7a:ac:e7:ff:3d:ed:dd:dd:97:da:32:85:4e:
                    4e:87:f5:e0:ac:71:b7:75:10:08:f8:ff:68:50:e6:
                    0e:e1:16:7b:ef:c3:59:58:df:60:3f:76:ea:af:1d:
                    79:55:45:c3:7d:cf:3b:07:a8:53:58:18:48:94:5a:
                    07:ad:00:25:28:13:7d:d9:94:a1:70:40:eb:e6:56:
                    51:c8:f8:46:09:c3:e5:15:5b:4c:7f:1f:84:49:37:
                    df:e0:7d:e4:b5:26:d2:21:b5:a3:b5:1f:65:3c:46:
                    9d:06:6f:d6:1b:3c:d9:07:4f:7b:5d:0b:52:9b:f5:
                    c3:6f:52:ae:84:1d:35:c0:ac:84:5f:f9:fe:c8:60:
                    23:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FF:40:50:65:83:F9:C2:0D:71:70:F9:06:13:E6:6C:96:79:E1:BE
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:3b:76:82:45:9a:29:21:03:5c:35:22:2a:12:08:35:bf:c0:
         7d:96:77:7f:8a:91:b2:f9:e3:6b:32:ba:d9:6d:1d:86:8c:d3:
         f9:5a:ee:c5:87:f8:43:f2:f4:fc:f0:f1:44:54:03:a2:b5:7d:
         3b:89:b3:0b:cb:7a:95:b8:3e:ea:83:57:c0:f1:31:57:31:bc:
         7b:2b:23:6e:00:ed:e3:42:cc:a0:b2:c2:9d:21:0b:3c:71:db:
         48:66:e5:16:ac:e7:92:82:15:1f:e4:7f:49:72:05:ff:f8:47:
         4e:8d:83:2f:45:9b:51:0f:56:78:7a:32:0a:58:4f:e9:25:50:
         42:1c:e8:7f:43:6b:01:8a:f3:de:3e:44:2e:6c:9b:b8:75:3b:
         de:ee:ce:a3:20:cc:a2:3e:d7:91:cf:c3:3c:61:c1:67:14:94:
         4e:4b:72:8e:f5:a7:f3:c2:c5:43:fe:55:cf:5d:97:38:91:2e:
         75:81:24:c3:71:1d:9d:0d:f6:99:cf:43:97:c9:c2:cb:82:b2:
         41:52:97:16:a8:ea:fd:c8:0d:4a:0f:cc:da:ca:0d:a0:ff:1a:
         8c:f1:20:b9:ce:30:fe:ae:c3:06:57:eb:af:52:d5:2a:88:77:
         e0:f0:7f:62:1a:2e:71:fa:f5:50:48:5f:26:0f:e6:01:06:e1:
         e4:25:44:13
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUCpAuzH3lXxHFhidf9JdHMHnk4IUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl
MmE1YmIzODAeFw0yNjA2MTYxMjE1MzZaFw0yNjA2MTcxNDU4MzZaMDMxMTAvBgNV
BAMTKEZDRkY0MDUwNjU4M0Y5QzIwRDcxNzBGOTA2MTNFNjZDOTY3OUUxQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGBIeh13b32Dz/yQ/ow6J/HmeY
Ik1mlNfTG9TmXVGEnGTiUF66GVQuVb8qz7l/Uq9f1+EOokTlQ1X89wr2UwOhlC4v
BTCpie02Nkvs4msnIueDQ2oIWLLp5LksOPBXKbeVFXJuxy4gK1J6/f5opRHsLL5d
mh1Oz5/Teqzn/z3t3d2X2jKFTk6H9eCscbd1EAj4/2hQ5g7hFnvvw1lY32A/duqv
HXlVRcN9zzsHqFNYGEiUWgetACUoE33ZlKFwQOvmVlHI+EYJw+UVW0x/H4RJN9/g
feS1JtIhtaO1H2U8Rp0Gb9YbPNkHT3tdC1Kb9cNvUq6EHTXArIRf+f7IYCNbAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU/P9AUGWD+cINcXD5BhPmbJZ54b4wHwYDVR0j
BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0
OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL
bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y
ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE
N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozt2gkWaKSEDXDUiKhII
Nb/AfZZ3f4qRsvnjazK62W0dhozT+VruxYf4Q/L0/PDxRFQDorV9O4mzC8t6lbg+
6oNXwPExVzG8eysjbgDt40LMoLLCnSELPHHbSGblFqznkoIVH+R/SXIF//hHTo2D
L0WbUQ9WeHoyClhP6SVQQhzof0NrAYrz3j5ELmybuHU73u7OoyDMoj7Xkc/DPGHB
ZxSUTktyjvWn88LFQ/5Vz12XOJEudYEkw3EdnQ32mc9Dl8nCy4KyQVKXFqjq/cgN
Sg/M2soNoP8ajPEguc4w/q7DBlfrr1LVKoh34PB/Yhoucfr1UEhfJg/mAQbh5CVE
Ew==
-----END CERTIFICATE-----
Generated at Tue Jun 16 21:32:53 2026 by rpki-client