Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          DnuF0swY8Gfi8isywqZQesecrbMI8eS0ljJgxezK7/I=
Subject key identifier:   26:32:4B:53:9C:A6:99:D9:BB:8D:3D:E5:A5:B2:C7:D1:C0:63:92:0C
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       486A914681C1BFDF4E79F84707D614756F76FB2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          0390
Signing time:             Sun 01 Mar 2026 06:13:32 +0000
Manifest this update:     Sun 01 Mar 2026 06:08:32 +0000
Manifest next update:     Mon 02 Mar 2026 08:33:32 +0000
Files and hashes:         1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          2: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: k773gxlpR0C0UOfjWQxgfZQzkpz9OLydxUun6LX0mnk=)
                          4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          5: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 08:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6a:91:46:81:c1:bf:df:4e:79:f8:47:07:d6:14:75:6f:76:fb:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Mar  1 06:08:32 2026 GMT
            Not After : Mar  2 08:33:32 2026 GMT
        Subject: CN=26324B539CA699D9BB8D3DE5A5B2C7D1C063920C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:53:fc:67:68:e9:f9:6d:0c:71:c4:b2:65:bb:
                    ed:6e:9e:73:c1:eb:5a:a4:2d:71:cb:55:8c:0b:a4:
                    8e:20:72:a6:75:a5:82:28:da:bb:20:53:0c:2c:58:
                    99:62:b3:1b:06:0f:64:1d:6d:7c:01:f8:c8:53:51:
                    da:e6:a6:8d:de:bd:35:11:f8:25:82:6c:5a:3c:4a:
                    42:59:fc:9b:ed:02:12:22:82:67:e8:2f:07:6b:e9:
                    90:b3:17:9d:65:e9:0f:66:17:dc:3e:83:09:72:50:
                    b1:bc:d2:8b:cc:7a:3e:8e:27:a6:55:44:d0:fb:b5:
                    7f:78:ec:61:47:32:83:c9:5c:e2:04:09:5f:06:45:
                    13:bd:3c:f3:f9:11:94:44:6d:90:14:cb:7b:d0:a2:
                    38:cb:93:a6:ba:f0:83:a2:f9:4d:90:1b:3d:85:f1:
                    a8:2f:83:be:7c:7a:d9:50:12:92:aa:50:af:1d:bc:
                    7d:4f:5e:c7:35:b2:c0:01:24:68:f9:56:a7:ba:64:
                    d7:bd:b3:a1:8d:83:fe:30:e5:5e:fb:67:a7:d6:5f:
                    35:b7:df:06:9c:74:1a:6b:1d:b1:8b:62:18:28:f9:
                    74:35:07:08:b7:b0:c3:51:84:78:c4:23:43:04:56:
                    a7:e4:a7:0a:9e:86:a2:17:f3:04:49:69:3e:e8:b9:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:32:4B:53:9C:A6:99:D9:BB:8D:3D:E5:A5:B2:C7:D1:C0:63:92:0C
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a1:db:d8:78:75:5c:23:b0:11:9a:1d:37:c2:ca:78:af:bc:
         d5:45:9f:c1:1a:87:9d:07:e2:22:d7:f7:0c:ed:d2:10:47:5b:
         3e:8b:41:80:a3:74:f7:63:94:73:b5:f8:85:4f:66:d2:3e:03:
         01:ed:f8:ea:3c:06:1d:c2:0d:97:ab:15:cb:d5:46:71:dc:7f:
         d2:2b:3b:23:5b:84:96:33:f2:2e:78:b3:5f:d0:5d:fe:65:b9:
         1b:8b:e3:88:f4:51:3e:b6:57:c9:af:77:92:33:7b:e8:f8:3d:
         ef:6d:42:f5:ce:44:52:b7:a8:51:53:c4:a8:22:27:9e:c5:d7:
         68:b7:4e:ea:eb:ad:1c:f4:b1:f4:f5:b5:e6:05:15:16:62:27:
         35:d9:86:42:53:82:44:b5:a0:24:ab:ae:cc:75:e9:1d:a0:0b:
         32:13:7e:f4:99:c8:c0:c9:ef:bc:43:fa:e2:cc:d4:58:d6:ad:
         80:92:56:10:7e:01:06:89:9e:24:00:5c:87:2d:18:25:18:bc:
         90:16:b6:82:fe:a0:73:27:c7:a4:cc:f4:5a:3f:b9:8c:81:ea:
         f4:9f:ae:6e:17:d2:01:19:b9:83:29:8c:a5:42:6e:2a:96:1d:
         c4:4c:7d:4e:26:15:8d:e0:66:e8:3a:b7:47:a8:bd:f1:ff:4c:
         9b:4e:82:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:23:24 2026 by rpki-client