Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          hHSiTlBrEdrAHQFTZotsrQb7+x1uS12PhCLxED+caw0=
Subject key identifier:   7F:74:97:A1:9F:9E:94:4B:6B:87:A5:81:C9:55:29:94:F5:AC:BC:77
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       0A0E528A32C5BC6C4B07F4474EDEC7D56ED7CACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          03B9
Signing time:             Wed 01 Apr 2026 07:15:01 +0000
Manifest this update:     Wed 01 Apr 2026 07:10:01 +0000
Manifest next update:     Thu 02 Apr 2026 08:03:01 +0000
Files and hashes:         1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          2: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: 0kB8dXfpDxw9LxAUL2eEDezXUt4zMBIWzs8/+XV/q/A=)
                          4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          5: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 Apr 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0e:52:8a:32:c5:bc:6c:4b:07:f4:47:4e:de:c7:d5:6e:d7:ca:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Apr  1 07:10:01 2026 GMT
            Not After : Apr  2 08:03:01 2026 GMT
        Subject: CN=7F7497A19F9E944B6B87A581C9552994F5ACBC77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:48:ec:c0:a8:db:bb:32:a7:52:cf:d3:e1:
                    a6:44:d0:4a:ba:78:fe:1c:15:13:52:2f:1b:1b:ff:
                    2c:80:71:f9:e4:d6:28:81:23:5a:e4:f2:27:d4:d3:
                    63:7a:53:33:3e:b6:dd:e6:73:fa:b3:8f:94:bc:36:
                    ea:9b:75:a0:86:37:13:d8:c1:ad:93:f1:b2:ef:9a:
                    d2:13:a2:4a:fd:cf:7f:22:d6:04:3c:2a:8c:b9:de:
                    54:b7:b3:cc:41:9f:0f:8b:99:c6:ad:9f:4f:5b:aa:
                    01:20:e7:d7:50:a4:49:94:ee:2f:72:62:a7:3a:78:
                    d9:b8:0d:e7:fa:ae:44:5a:6d:ab:99:89:ca:b5:0d:
                    4b:64:1d:a5:35:ff:3a:b4:27:3a:28:c6:82:6c:0d:
                    8c:f4:c8:dc:a6:db:fd:c6:cc:d0:d6:1d:a7:11:9a:
                    a2:c8:48:04:40:f8:26:76:a6:33:99:1e:a3:d5:d6:
                    66:e7:2b:9d:3c:8c:5e:ff:dd:6c:f0:27:34:3f:da:
                    f8:6f:33:92:72:34:e9:2c:cc:ae:2d:dd:e6:d8:4b:
                    45:6c:b8:65:e0:eb:3e:80:ac:3c:8a:75:24:d8:08:
                    5f:77:a9:88:2b:56:6d:74:b1:b1:4d:a9:6e:cd:8a:
                    f0:01:9a:e1:a0:3f:cd:18:9f:eb:fd:9b:03:e1:29:
                    84:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:74:97:A1:9F:9E:94:4B:6B:87:A5:81:C9:55:29:94:F5:AC:BC:77
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:1f:ee:9c:e6:f5:0b:70:6e:11:e5:62:0e:e1:c8:f4:30:5c:
         f4:79:90:fc:5c:b8:c4:8d:e8:ac:81:dc:bc:d7:5e:42:04:5f:
         14:fb:bc:7b:7b:90:08:73:87:9c:24:0a:d3:9d:02:55:a4:f1:
         04:c5:ba:7f:60:7b:cd:96:2f:49:af:d4:08:c9:c7:33:00:ea:
         1a:e3:f7:4b:4e:73:5c:a9:7a:b3:9a:9f:88:b8:40:22:26:88:
         2e:59:59:de:ce:e0:16:9c:76:9b:82:95:c3:6b:06:21:83:eb:
         0c:5e:4a:18:d8:d4:51:c6:32:7c:ee:14:a6:e3:2c:01:44:41:
         e6:61:4a:a9:da:a9:54:84:9e:28:bf:cd:d2:e1:5b:00:fe:d9:
         50:22:af:ad:78:bf:4b:62:5f:4a:ef:c6:aa:7c:ac:80:95:6f:
         1a:d4:1d:ee:34:8f:fb:c0:37:46:a1:d4:eb:45:a5:5e:ad:01:
         ee:66:0f:b4:03:f7:0e:9b:37:05:cb:d1:98:fd:cc:a7:02:36:
         d3:88:ae:34:0f:7d:aa:29:7a:bb:16:14:3b:98:d7:40:50:47:
         29:d4:3b:13:8d:0b:d4:3d:c4:42:9c:3a:e3:ea:bf:df:02:5b:
         b6:77:27:e7:63:ef:df:26:8c:63:75:f7:ea:70:9b:7b:48:d9:
         d2:d1:a8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 11:43:13 2026 by rpki-client