Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          1RFzUHjKQ+ZmNVMe/BEdaTieBTQ2Iq+VBnNEkghUkIQ=
Subject key identifier:   C4:77:91:7F:FE:2F:13:82:9D:5A:74:25:5D:04:FA:57:D9:37:EE:97
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       5321C8878E23C34C268E94D8E5E9930C0260FB14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          03E7
Signing time:             Tue 05 May 2026 14:50:34 +0000
Manifest this update:     Tue 05 May 2026 14:45:34 +0000
Manifest next update:     Wed 06 May 2026 15:56:34 +0000
Files and hashes:         1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          2: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          3: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          5: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: XWDzAnTeuUfyOLm7M3jjskTYMHrcyMQ/CwpRnO6R6xA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 15:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:21:c8:87:8e:23:c3:4c:26:8e:94:d8:e5:e9:93:0c:02:60:fb:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: May  5 14:45:34 2026 GMT
            Not After : May  6 15:56:34 2026 GMT
        Subject: CN=C477917FFE2F13829D5A74255D04FA57D937EE97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:ad:cc:24:c8:bf:72:db:21:05:0c:48:cf:
                    56:35:f8:84:a8:89:12:1e:a2:19:c6:a8:34:1c:0f:
                    a7:e2:2b:cc:05:9b:70:8a:60:9c:a7:45:04:c8:75:
                    aa:c1:f0:0e:0c:5a:a5:42:94:ee:26:80:85:f7:6d:
                    76:36:d0:63:28:76:d0:90:02:f3:04:0e:f2:a9:44:
                    b8:90:26:c5:05:1a:a2:00:ac:0f:e3:9c:71:7c:77:
                    a1:77:63:50:5d:0e:bd:d7:7c:c6:22:79:41:02:16:
                    10:03:e9:da:25:d5:80:70:d6:54:a9:7a:1e:9e:64:
                    31:56:61:38:9f:36:33:56:75:a2:8d:29:34:9b:d0:
                    0e:b6:82:4c:78:6c:6d:5d:a0:d7:33:c1:f8:a9:44:
                    bf:8f:b5:48:57:a9:b9:b5:49:37:78:6d:37:f4:50:
                    2b:0b:0c:70:1e:2f:41:92:8c:25:d8:ac:0b:c5:ea:
                    2c:1e:5e:a2:49:89:69:9c:85:67:15:ed:a3:19:ca:
                    9b:4a:9e:57:f2:71:25:ba:ad:dd:7b:2b:d2:a7:fa:
                    94:0d:8c:e2:46:b8:69:1c:fb:8e:92:aa:58:a2:74:
                    db:96:8e:8e:a1:5d:a9:36:53:58:42:0c:0e:0e:b9:
                    1c:16:f0:fe:94:8d:a2:c7:8a:7c:47:6e:bc:0d:42:
                    cd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:77:91:7F:FE:2F:13:82:9D:5A:74:25:5D:04:FA:57:D9:37:EE:97
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:8c:44:50:df:a0:cf:64:a3:1b:5a:4c:42:46:6b:bd:ba:f0:
         71:ab:df:6a:9f:a5:d9:e4:3f:8f:3a:44:87:21:d3:eb:7d:e7:
         58:eb:57:93:73:ea:e2:23:bf:2c:f4:a7:50:d2:a0:5d:64:04:
         7f:8f:e1:e3:e9:a3:29:43:1a:cb:f7:3c:05:2f:d6:67:93:72:
         fb:67:17:16:5f:dd:24:5d:d9:6b:41:eb:74:5e:00:e6:1c:f5:
         6c:d1:3d:75:04:eb:de:65:70:05:df:f7:12:51:68:a7:d4:3b:
         02:91:da:4b:15:9f:a8:bb:4a:8f:e7:fb:69:65:2a:e2:80:76:
         39:f1:4a:39:33:86:d4:fe:02:90:50:1d:2b:bc:5c:01:b8:e6:
         61:2c:3a:bb:30:5e:20:5e:88:d4:17:d2:88:de:25:ac:c9:ac:
         89:13:31:ad:34:47:46:b9:a1:8d:63:20:30:ba:41:94:ed:38:
         ff:6b:a9:1f:23:c2:c4:b7:71:22:b6:01:35:73:f9:c8:c7:47:
         ef:0c:b0:4f:e4:cc:0c:ea:bc:a3:07:5f:2f:10:8f:a0:52:1f:
         b1:29:fc:ba:57:f3:81:f1:25:70:92:6e:82:19:54:a7:a4:9b:
         61:1a:b7:42:ff:7d:19:32:12:00:20:80:1e:3a:05:13:e7:52:
         4c:47:e1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 05:13:40 2026 by rpki-client