Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          D1N/kVgHmWsXIG1qs1XuwZeFEQZRzOBWwbj0QnA/WyA=
Subject key identifier:   7B:6D:77:AE:58:5C:3E:A6:10:8B:A0:8B:63:95:0C:22:9F:20:4B:AB
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       0EDFFE5873AE4B0D42E6F40157F1560B97DAB72B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          043B
Signing time:             Tue 07 Jul 2026 11:00:13 +0000
Manifest this update:     Tue 07 Jul 2026 10:55:13 +0000
Manifest next update:     Wed 08 Jul 2026 13:11:13 +0000
Files and hashes:         1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          2: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: b49RuJdt6HGbJVnHcJ6G6KzmPUzlI4z7TQIjI8nAUjE=)
                          4: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          5: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 13:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:df:fe:58:73:ae:4b:0d:42:e6:f4:01:57:f1:56:0b:97:da:b7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Jul  7 10:55:13 2026 GMT
            Not After : Jul  8 13:11:13 2026 GMT
        Subject: CN=7B6D77AE585C3EA6108BA08B63950C229F204BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:c5:e3:37:20:6f:df:b2:e1:04:f3:7b:f4:
                    67:46:25:4c:b5:63:3e:fa:0d:44:48:d3:1d:82:85:
                    4e:2c:d5:15:4c:0f:b6:c0:66:e4:5e:f3:cf:aa:d4:
                    02:09:e1:28:59:73:59:1e:72:0b:2b:97:10:fa:27:
                    cc:38:23:61:73:95:ea:9a:2f:bd:b4:93:d7:8d:4c:
                    c4:a4:79:f7:fc:71:a0:c2:88:83:5f:21:52:d5:8b:
                    16:b5:89:7b:07:d2:91:10:67:5b:ec:80:4c:a0:b2:
                    f7:ae:da:2a:ec:28:3a:5c:84:4f:5f:df:4b:2d:fa:
                    d2:f4:41:53:b3:ee:30:f1:7a:e8:4e:59:b8:75:8a:
                    1e:cc:d1:fe:0e:3d:42:ff:fc:29:33:f3:95:49:0b:
                    8c:bc:a6:0c:fa:1f:72:74:18:38:f2:4e:01:61:6b:
                    51:fe:48:42:84:ae:a2:71:c2:25:54:b1:12:64:2b:
                    53:05:a0:f1:26:54:d3:3f:99:24:8f:b9:36:3c:49:
                    2e:83:83:90:a5:1a:7f:eb:08:b3:13:f2:66:c1:2e:
                    52:32:21:48:07:0c:5f:57:00:77:2c:0c:ee:31:a0:
                    bd:d0:7a:8e:9c:bc:6a:0e:07:40:07:51:87:4d:bc:
                    af:93:da:21:66:be:90:c8:bf:02:c1:aa:c1:7a:22:
                    f3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6D:77:AE:58:5C:3E:A6:10:8B:A0:8B:63:95:0C:22:9F:20:4B:AB
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a2:84:50:76:53:ad:f2:1b:4c:80:99:40:9d:61:92:d0:15:
         84:4d:ed:46:e1:2b:ab:d4:3b:6d:af:53:1f:85:bc:0f:c0:1f:
         b6:10:7c:4c:d1:43:55:87:ef:99:0b:06:6d:3d:96:60:a4:c5:
         cf:c6:37:4a:99:ad:aa:22:dd:e7:9d:db:b0:28:41:ed:b6:7f:
         75:7a:f1:95:94:76:6e:03:5d:3b:ec:a0:3c:35:b2:af:9e:cc:
         4c:df:b9:09:71:61:4e:d3:7e:77:55:d7:c8:ae:f0:92:54:cf:
         fa:6b:1e:c2:74:48:6d:3c:2d:35:79:ff:91:e1:03:26:07:dc:
         11:82:8a:75:db:5e:29:26:c1:22:63:20:10:9c:97:ee:d9:64:
         e8:ed:c1:bc:e1:df:de:90:84:a7:f5:34:c7:cb:37:00:15:f4:
         64:b8:8a:04:09:0d:93:eb:a2:cc:33:59:69:d0:c6:0b:1a:4b:
         04:6f:4a:b5:4c:f8:c7:3d:2c:27:c1:e4:e4:24:37:c1:6b:5b:
         5b:de:fe:57:7d:99:1e:9d:85:cc:0f:61:79:cc:26:44:2c:12:
         ef:5a:ab:35:e1:68:8f:c3:25:4b:a3:ce:fd:4a:e4:22:dc:63:
         00:c4:14:ee:4b:63:e2:7b:29:13:4f:87:25:1e:2e:57:df:c0:
         29:13:54:56
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUDt/+WHOuSw1C5vQBV/FWC5fatyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl
MmE1YmIzODAeFw0yNjA3MDcxMDU1MTNaFw0yNjA3MDgxMzExMTNaMDMxMTAvBgNV
BAMTKDdCNkQ3N0FFNTg1QzNFQTYxMDhCQTA4QjYzOTUwQzIyOUYyMDRCQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz4MXjNyBv37LhBPN79GdGJUy1
Yz76DURI0x2ChU4s1RVMD7bAZuRe88+q1AIJ4ShZc1kecgsrlxD6J8w4I2Fzleqa
L720k9eNTMSkeff8caDCiINfIVLVixa1iXsH0pEQZ1vsgEygsveu2irsKDpchE9f
30st+tL0QVOz7jDxeuhOWbh1ih7M0f4OPUL//Ckz85VJC4y8pgz6H3J0GDjyTgFh
a1H+SEKErqJxwiVUsRJkK1MFoPEmVNM/mSSPuTY8SS6Dg5ClGn/rCLMT8mbBLlIy
IUgHDF9XAHcsDO4xoL3Qeo6cvGoOB0AHUYdNvK+T2iFmvpDIvwLBqsF6IvPNAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUe213rlhcPqYQi6CLY5UMIp8gS6swHwYDVR0j
BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0
OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL
bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y
ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE
N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADaKEUHZTrfIbTICZQJ1h
ktAVhE3tRuErq9Q7ba9TH4W8D8AfthB8TNFDVYfvmQsGbT2WYKTFz8Y3SpmtqiLd
553bsChB7bZ/dXrxlZR2bgNdO+ygPDWyr57MTN+5CXFhTtN+d1XXyK7wklTP+mse
wnRIbTwtNXn/keEDJgfcEYKKddteKSbBImMgEJyX7tlk6O3BvOHf3pCEp/U0x8s3
ABX0ZLiKBAkNk+uizDNZadDGCxpLBG9KtUz4xz0sJ8Hk5CQ3wWtbW97+V32ZHp2F
zA9hecwmRCwS71qrNeFoj8MlS6PO/UrkItxjAMQU7ktj4nspE0+HJR4uV9/AKRNU
Vg==
-----END CERTIFICATE-----
Generated at Wed Jul 8 05:06:15 2026 by rpki-client