Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          Knt8zgAOCnHhxXVHoxcyvXH9mqGKPhg0nf/dJHA376U=
Subject key identifier:   E0:EA:29:29:FC:ED:11:B1:85:83:8E:73:E7:28:5E:05:30:CB:4D:C9
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       646DB2DA920A931C26575FB0A0CFFF79C70EE9A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          038F
Signing time:             Sat 28 Feb 2026 12:53:32 +0000
Manifest this update:     Sat 28 Feb 2026 12:48:32 +0000
Manifest next update:     Sun 01 Mar 2026 14:08:32 +0000
Files and hashes:         1: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: vM+gPK6mIyx5Kh+iMGhIrtzRHTzPqK9WJb9glNP9FO8=)
                          2: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          3: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          4: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          5: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Mar 2026 12:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:6d:b2:da:92:0a:93:1c:26:57:5f:b0:a0:cf:ff:79:c7:0e:e9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Feb 28 12:48:32 2026 GMT
            Not After : Mar  1 14:08:32 2026 GMT
        Subject: CN=E0EA2929FCED11B185838E73E7285E0530CB4DC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:91:c2:63:d2:b2:43:3a:fe:d0:24:22:ca:
                    ad:f7:4e:55:12:c1:20:ed:16:4f:32:f0:45:b8:1c:
                    81:26:08:30:87:38:73:2d:52:8e:5d:2b:74:72:3b:
                    68:4f:83:23:e1:87:f2:8e:5b:f2:30:6f:93:9e:ae:
                    0a:6b:dd:88:7f:df:39:34:b2:2f:52:92:e7:bc:86:
                    36:ea:64:f4:1c:4f:61:4d:a3:a4:72:ed:73:bd:ff:
                    eb:90:71:0a:b4:ff:e0:e2:b2:ab:ba:37:25:22:d2:
                    77:dc:ff:bf:a2:71:ea:3a:1c:13:b1:d6:e8:94:ed:
                    d0:02:e0:e0:11:7e:80:21:52:e9:ea:fb:a6:ad:12:
                    ae:6d:5e:95:de:fa:20:43:54:29:de:ea:14:68:d6:
                    78:f9:c0:ac:84:ff:51:f7:41:e1:ca:a4:23:70:40:
                    59:38:e3:c3:5b:53:9d:98:7e:c4:f9:a8:e5:f0:e4:
                    e0:b8:40:61:b2:18:03:2e:e5:95:a6:04:5e:2a:6e:
                    ea:ad:2c:c6:35:bc:39:98:4f:eb:d5:ab:f5:bb:30:
                    59:27:30:c5:8c:37:64:9f:eb:e5:a2:50:4e:f6:2e:
                    5f:0b:b6:77:bf:d1:7a:6b:64:0a:41:8f:6b:81:9d:
                    55:ab:f4:38:7f:e2:78:ef:18:28:43:ed:b7:0a:d6:
                    7f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EA:29:29:FC:ED:11:B1:85:83:8E:73:E7:28:5E:05:30:CB:4D:C9
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:29:00:ce:28:32:09:2e:6e:c2:1e:a9:f0:cf:bc:7b:97:5b:
         c5:ae:5a:6b:35:10:99:06:5e:2f:4a:d6:ca:b8:8e:67:98:df:
         ec:69:75:c9:87:11:4f:40:4d:21:cf:ca:78:d5:18:10:3b:6d:
         a6:dc:e1:db:0e:67:cd:4e:66:f4:5e:f6:23:f8:32:e4:00:e7:
         16:81:ef:f8:d1:2d:93:f8:5c:9f:ba:fe:7c:78:02:de:db:02:
         a5:37:ac:3e:91:f2:a9:a4:b1:be:b9:6f:4f:f3:aa:fe:8e:9f:
         b5:26:01:c2:41:dd:ec:5d:c9:c9:88:29:50:2e:9c:cf:13:41:
         ab:2c:18:92:7d:a7:30:5a:c0:68:dc:37:65:13:c1:9a:7c:90:
         a7:2c:75:7c:71:c6:61:df:99:b6:64:5c:b1:1c:dd:e3:95:96:
         53:eb:2c:10:88:fc:92:ac:77:33:11:7c:c5:6a:c8:e3:08:b0:
         5f:fb:98:69:11:f8:3f:6a:dc:cb:df:b8:3e:f9:f1:a5:d0:e6:
         b2:e0:a1:0d:aa:c2:bc:3d:47:88:b5:c6:f2:75:fe:bf:d4:cd:
         45:0a:ad:b2:23:b8:d1:c3:5b:74:99:74:58:13:2d:d4:0e:36:
         c5:aa:2c:d2:72:b1:13:b6:0d:0d:0d:28:df:ff:3b:00:d5:fb:
         10:0a:f4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 21:05:45 2026 by rpki-client