Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          4K3zuy7qWw7qhdIcljFA9q/tVEIaGR7LrEnCBDI8v2o=
Subject key identifier:   E5:74:53:35:B9:5D:EB:80:7F:E6:79:61:FB:DD:95:63:F4:2F:73:39
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       202C59D24C2599036FD7A4A41C43D34C49D3839D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          0393
Signing time:             Tue 03 Mar 2026 09:13:32 +0000
Manifest this update:     Tue 03 Mar 2026 09:08:32 +0000
Manifest next update:     Wed 04 Mar 2026 12:54:32 +0000
Files and hashes:         1: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          5: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: CcDNn4We8n8BDwDfTAQ2Xej273OjYswnlQLuhUyXFJo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Mar 2026 07:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2c:59:d2:4c:25:99:03:6f:d7:a4:a4:1c:43:d3:4c:49:d3:83:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Mar  3 09:08:32 2026 GMT
            Not After : Mar  4 12:54:32 2026 GMT
        Subject: CN=E5745335B95DEB807FE67961FBDD9563F42F7339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:79:da:e7:8c:aa:ee:00:78:b3:58:c5:ba:5e:
                    9d:b1:4f:c7:6c:82:4b:45:18:08:c3:14:da:88:3f:
                    f5:1b:48:78:4e:1f:bc:85:3a:be:a0:45:4b:d2:cf:
                    ad:3a:3b:ff:4d:32:7f:bd:a3:88:8d:f4:82:02:17:
                    39:0c:ef:09:e8:1f:72:d3:67:80:c2:b1:88:15:11:
                    df:39:8b:c6:4c:0f:72:96:c0:f8:52:ea:bd:4d:fc:
                    32:9d:e8:79:fb:9c:34:50:ea:a1:91:dd:d8:9a:6a:
                    4b:11:98:a4:90:11:48:03:8d:ae:a8:65:90:de:3e:
                    06:00:19:e1:2c:28:c8:86:9d:4b:8d:96:61:0c:5d:
                    05:e9:1c:a4:95:93:2b:0d:86:61:cc:eb:a4:e9:49:
                    a1:95:e9:23:5a:c7:52:a9:0c:33:a9:61:5a:8c:0a:
                    e1:a1:77:8a:77:ee:3d:04:69:26:2c:a7:6b:b4:7e:
                    14:4a:25:c6:3d:6a:f0:bb:5c:8e:d2:d2:36:a6:6e:
                    06:62:46:a8:64:19:20:bd:5a:a4:05:27:12:a3:e1:
                    3f:36:05:04:27:71:a5:bb:98:be:c4:eb:14:be:4f:
                    b3:10:f7:22:97:df:bf:b8:8e:68:98:ba:10:b9:c8:
                    1f:d1:77:12:51:51:ae:7a:67:48:b5:40:5b:01:f6:
                    b6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:74:53:35:B9:5D:EB:80:7F:E6:79:61:FB:DD:95:63:F4:2F:73:39
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:92:8a:8b:3d:8f:0f:ff:5a:fc:15:fc:ef:a8:74:91:da:ed:
         af:50:20:ec:f3:40:0d:93:71:82:a1:1f:e1:22:e4:88:eb:94:
         b6:83:fe:49:0f:01:c1:a5:b4:19:7c:ad:2a:47:30:1d:4e:90:
         7d:e2:44:f7:04:a4:37:47:41:1c:f6:8c:44:9d:2b:27:f9:b4:
         b2:89:f2:b9:b5:1a:0d:07:55:78:69:65:15:55:ea:df:a2:8a:
         0a:7d:09:a6:27:d7:40:7c:34:dc:0b:20:7e:42:45:1a:98:95:
         6f:92:3d:50:e8:f2:ac:e4:b2:1f:d3:77:13:f8:8f:10:da:15:
         dc:9c:08:fa:4d:1a:c4:83:3c:d1:fe:3f:c2:f6:05:6d:d8:ad:
         fa:51:d7:2a:7f:af:b7:e9:8e:4e:ff:63:39:c3:18:03:6e:ba:
         03:b1:39:67:1b:f7:2c:5e:8c:3e:a5:65:1d:21:d7:31:44:ee:
         b4:1c:40:c7:d4:f7:ce:c2:ff:df:0e:75:1f:5c:4a:ea:65:b5:
         56:d8:af:ff:93:e3:b8:7f:55:d8:f3:7b:e2:e9:7b:72:db:1b:
         ec:09:3c:e1:b0:83:b3:a3:38:f2:70:72:9b:65:f9:dc:4c:4b:
         d4:d7:4e:2c:bc:79:85:64:63:13:0a:21:d8:0b:39:62:b5:34:
         b4:b1:ca:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 12:16:41 2026 by rpki-client