Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          ZtXdfqlC1X6oPjhmmKKNuAazMq/zB3AgcO5djsYUGJE=
Subject key identifier:   6A:BD:6C:DE:EB:C4:B6:CB:DB:B8:D8:07:50:11:3F:DA:9B:B9:7F:45
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       4552CAE4E323A261B9A42D5A4FBBF428C366ED76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          03B7
Signing time:             Mon 30 Mar 2026 15:34:07 +0000
Manifest this update:     Mon 30 Mar 2026 15:29:07 +0000
Manifest next update:     Tue 31 Mar 2026 19:15:07 +0000
Files and hashes:         1: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          2: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          3: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          4: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          5: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: jwvZb7Cq5g93ALR0K1w5HxZvetI1/QrQjwwV4CwmnxQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 31 Mar 2026 19:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:52:ca:e4:e3:23:a2:61:b9:a4:2d:5a:4f:bb:f4:28:c3:66:ed:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Mar 30 15:29:07 2026 GMT
            Not After : Mar 31 19:15:07 2026 GMT
        Subject: CN=6ABD6CDEEBC4B6CBDBB8D80750113FDA9BB97F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:29:85:9e:da:a4:ee:b4:45:bd:1f:4f:48:56:
                    0e:73:7e:0e:99:f6:ec:18:d1:69:8d:c5:ae:93:2b:
                    c9:87:c2:c9:ee:c7:10:64:c9:25:62:27:6b:ab:d0:
                    18:52:14:6d:3d:d5:1e:9c:5a:31:3a:d0:3b:94:56:
                    9c:85:4f:19:34:91:62:b6:02:9c:01:7d:70:6e:76:
                    de:f3:4f:e1:29:42:8b:4d:8f:20:d7:86:c8:23:0a:
                    8b:11:3e:79:6c:ef:e2:7f:c8:19:7f:04:19:cc:9d:
                    75:39:de:4d:6f:f7:4d:a2:2c:33:8f:c7:b5:d3:12:
                    d1:df:6f:e2:06:dd:e5:d3:9a:d2:3d:e7:57:02:6e:
                    b2:cf:b8:59:33:3c:18:e3:cc:25:eb:52:c3:41:e5:
                    30:1e:9f:bd:35:a9:c0:68:b8:14:37:25:54:ad:d8:
                    6a:80:0d:3e:32:b6:94:b0:19:c1:79:a2:78:5f:dd:
                    4c:77:5e:41:22:24:d5:ff:a3:33:6c:93:53:18:f1:
                    60:56:00:d6:f6:34:97:bc:1a:eb:a9:e0:83:dd:af:
                    00:ce:a8:10:94:9c:84:bf:b4:40:18:a8:92:2c:50:
                    39:2b:48:49:42:ff:77:2d:95:26:63:44:de:16:d9:
                    1c:28:51:e0:a4:fa:60:ee:d5:46:c1:f1:88:f5:66:
                    2a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BD:6C:DE:EB:C4:B6:CB:DB:B8:D8:07:50:11:3F:DA:9B:B9:7F:45
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c5:75:c5:c3:4e:c7:1d:73:24:c3:d3:6b:a2:97:19:43:c3:
         1e:85:5c:72:b5:66:e4:0c:0a:83:a7:87:29:bd:8c:25:91:0e:
         11:83:48:93:ea:48:39:21:42:1e:b4:1b:54:8d:52:ce:54:b4:
         4b:b3:e3:84:b1:da:33:04:ae:df:3b:4b:ab:5e:39:d5:77:aa:
         05:42:b2:c9:c1:59:85:28:80:9a:43:ab:67:06:c3:c5:46:4d:
         39:ef:ec:af:28:40:7b:4a:da:41:7a:ef:72:bb:38:2b:d7:ea:
         ac:f4:be:19:50:5e:f8:1e:7a:0f:64:75:3e:07:bd:bd:32:d2:
         4e:0d:2e:ce:58:6c:54:10:2a:35:ab:f5:f6:8b:b0:79:d5:d2:
         bb:76:11:4a:5c:b6:2a:1a:8a:e6:34:67:e4:63:f6:1f:76:fc:
         3b:5e:ef:ca:06:35:4a:c9:33:b8:10:2e:a7:9f:57:a8:84:e0:
         26:78:57:0b:18:8f:e8:8e:18:b3:b3:a1:5d:75:82:09:58:32:
         17:61:c7:ed:7c:65:0f:9f:61:f1:9a:46:36:7d:05:cb:34:f8:
         01:8d:b8:59:95:6c:c3:8f:b2:91:2d:21:f4:29:23:8a:bd:98:
         bd:1b:2c:2c:e8:5c:ed:52:0e:ea:a6:96:80:55:29:dd:ea:30:
         ce:21:ba:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 11:35:55 2026 by rpki-client