Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          3jDDWr2exHJ0gxnaDNS1JvtF+eqtWWN8/uWCm5iRNZo=
Subject key identifier:   F4:54:DB:FD:C8:5E:0F:4F:59:42:6C:A0:7D:31:82:BA:27:A5:AA:8B
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       0F2D3E0B5AEB97C95AE694901BEC1F1B55D775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          040B
Signing time:             Mon 01 Jun 2026 09:35:12 +0000
Manifest this update:     Mon 01 Jun 2026 09:30:12 +0000
Manifest next update:     Tue 02 Jun 2026 09:55:12 +0000
Files and hashes:         1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          2: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: 3se9nkJKgUoDwhNVxYD3YH+AahTxBKjIKWAw14wfMSY=)
                          4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          5: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jun 2026 07:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:2d:3e:0b:5a:eb:97:c9:5a:e6:94:90:1b:ec:1f:1b:55:d7:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Jun  1 09:30:12 2026 GMT
            Not After : Jun  2 09:55:12 2026 GMT
        Subject: CN=F454DBFDC85E0F4F59426CA07D3182BA27A5AA8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:88:8a:68:de:c3:fa:c6:b8:e3:6c:91:4b:50:
                    55:65:9b:c4:6f:3e:31:d6:46:28:f3:9b:d9:0d:86:
                    76:78:f9:85:83:e2:04:20:96:5e:5c:ab:3e:53:3c:
                    a9:f3:44:ab:bd:26:cd:db:f5:4a:4e:3a:1d:bf:32:
                    eb:1e:ce:0f:60:c4:8a:92:1b:98:ab:5e:5b:a1:46:
                    be:c7:b4:13:b7:6c:6b:c6:a1:87:06:b9:53:0a:2d:
                    98:65:82:2b:c9:ec:9c:2e:89:eb:84:c5:72:a2:ed:
                    1e:fe:2e:f8:dc:c2:df:ae:17:3b:dc:63:fe:7f:7f:
                    44:4a:6b:6b:96:81:2f:11:0e:3c:ab:b0:57:f5:10:
                    e4:da:d7:41:b4:6b:56:90:e5:6e:4d:b0:f9:dc:fd:
                    10:10:b4:24:7e:f0:9d:5f:e6:9c:04:a0:97:33:31:
                    24:dd:8b:50:4b:42:d2:d1:dd:e7:1c:e2:56:90:7c:
                    98:fc:0f:16:6f:28:2b:3c:fe:22:46:58:06:65:df:
                    bd:84:6c:31:ae:05:9c:77:9a:30:64:f3:fe:14:43:
                    36:92:83:6a:3b:8d:05:13:a2:55:42:9c:5d:06:c3:
                    0a:31:6c:c8:04:af:ca:71:53:d9:54:58:fc:fc:c4:
                    e4:18:81:14:e9:d5:01:f4:c1:40:c6:45:60:7b:51:
                    3e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:54:DB:FD:C8:5E:0F:4F:59:42:6C:A0:7D:31:82:BA:27:A5:AA:8B
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:92:ec:13:85:91:83:bb:8e:1a:91:3d:25:98:f4:4d:fb:b7:
         46:19:b1:48:c4:2c:ae:b8:bb:ab:fe:ee:2c:a9:1a:40:5a:4d:
         35:5d:a1:5d:e1:e1:45:3f:a5:47:21:f2:d5:4b:9c:49:a7:c9:
         5a:95:11:9d:56:ff:2a:5e:aa:e5:ce:67:6d:de:23:60:48:c0:
         c7:d3:15:0f:4a:be:65:d8:fc:6f:12:4c:69:92:c2:29:8b:4f:
         57:3f:fd:6a:a7:38:87:65:26:6e:67:dc:d3:0a:39:a3:3e:10:
         e5:3f:1f:f3:17:50:10:0c:4c:ed:fc:ec:d3:71:37:0d:77:59:
         0b:a6:6c:4a:f6:48:85:69:c3:1e:00:74:80:39:ec:e0:45:41:
         af:3f:55:14:49:e1:bc:bd:40:9f:ed:81:f2:8f:47:df:b0:b5:
         e9:03:10:d2:60:99:d3:1d:6f:fb:06:f0:56:e9:e7:db:48:f4:
         12:e9:ec:58:73:d0:aa:eb:4e:19:e4:5d:76:4c:b2:d5:0e:67:
         e7:bd:82:7c:18:ff:2b:a5:6a:7d:8e:cd:81:b3:a2:52:7d:9f:
         4a:aa:40:20:19:ee:cb:29:76:e2:b9:55:f4:d9:cb:77:d7:05:
         b1:3f:d1:29:56:ef:3e:23:af:16:7a:8d:16:61:7c:9d:96:dd:
         78:f6:d2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 16:25:29 2026 by rpki-client