Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          ko62L+4xPLLGvtmTeCC95nKnBwQHLfp858yxPqfrr5A=
Subject key identifier:   A1:9D:87:43:B8:84:54:A2:D0:F7:A3:C3:A7:44:26:CC:C6:1F:BE:78
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       3AB64BE338CD06DECDBA35706947B2187CAFD09F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          028F
Signing time:             Fri 22 Aug 2025 01:47:57 +0000
Manifest this update:     Fri 22 Aug 2025 01:42:57 +0000
Manifest next update:     Sat 23 Aug 2025 04:54:57 +0000
Files and hashes:         1: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: aHQLak9N9Oms5rgKvpLigAh2LZdfLoi6boC6n7PKDU4=)
                          2: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: BOw6hrbano0nIjx4JuXUdmfZv0a2TadMO3Hkj8oX1gI=)
                          3: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=)
                          4: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: 1C8fIKlQUnAeCmyoK3V2NdUgsW/0q5NrpzLZYBb5TGM=)
                          5: AS198136.asa (hash: W+U8FE8wW4IM5Quak0Mq8eROawTLthMCIEUtXh+wJqE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b6:4b:e3:38:cd:06:de:cd:ba:35:70:69:47:b2:18:7c:af:d0:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Aug 22 01:42:57 2025 GMT
            Not After : Aug 23 04:54:57 2025 GMT
        Subject: CN=A19D8743B88454A2D0F7A3C3A74426CCC61FBE78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:10:52:30:bb:c1:4a:ef:73:48:3c:75:1f:
                    f2:47:56:ce:b6:d3:09:3d:98:32:80:da:36:bb:2b:
                    a4:6e:02:7a:4c:c1:94:6c:ed:ee:ad:0d:7d:ff:74:
                    9c:4a:9d:20:07:a7:f7:11:6c:6d:7b:e3:b6:40:b0:
                    c2:29:ec:b1:b6:a7:24:c2:42:fd:a3:27:ad:dc:b1:
                    d0:1f:6e:53:ed:9e:2c:82:2b:17:42:22:19:f8:2a:
                    5d:69:c2:a7:ed:39:fb:1a:6e:96:ea:bd:68:8a:8d:
                    c4:9c:f0:be:13:b9:e1:8f:99:2b:a9:a0:ed:ce:dc:
                    7f:5e:50:e8:2a:d7:37:93:ee:68:7c:aa:b9:08:38:
                    b1:28:28:0a:da:6a:92:68:85:1b:e9:ff:1d:f2:37:
                    3d:82:3d:79:5a:61:f6:2e:a8:f0:c9:f4:36:33:cd:
                    91:14:e0:8f:e5:6b:aa:f1:cd:cc:3c:ce:f3:63:ba:
                    54:15:5b:55:aa:ba:49:fb:0a:0b:eb:69:f4:0e:e2:
                    50:8b:47:87:18:7a:65:af:48:23:2f:9a:5a:b4:22:
                    12:fb:9e:48:58:87:0a:2f:19:53:87:1d:9b:e1:24:
                    ec:cb:cc:86:ca:03:19:e4:b5:d1:4e:71:76:da:c8:
                    55:f1:65:cc:24:57:b1:32:7b:9a:3a:b7:be:ff:48:
                    b9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9D:87:43:B8:84:54:A2:D0:F7:A3:C3:A7:44:26:CC:C6:1F:BE:78
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ea:b5:78:78:5c:2e:19:62:f8:c6:eb:fd:50:16:92:86:cd:
         27:99:f9:3d:b1:84:d0:28:38:b1:5e:ab:e6:dd:f7:e5:de:59:
         9a:c5:bd:d3:19:f0:a4:90:0e:7f:54:d0:1a:79:63:a2:0c:06:
         6b:b6:97:4f:2f:f7:88:8e:9c:39:a8:58:10:18:06:64:ac:1f:
         26:e1:e0:9d:ae:98:bd:d1:97:bd:54:cc:39:5a:1b:9f:2d:81:
         66:a7:e6:5e:f1:70:59:c6:30:71:dc:c7:b2:7d:9e:a2:e0:f4:
         45:24:af:c6:c6:f1:71:4d:59:aa:24:fd:72:40:75:6c:bc:4d:
         ac:db:b9:ab:cb:de:7d:f1:43:39:a5:4f:44:72:70:d5:cb:50:
         08:2f:93:4e:b4:38:96:69:ff:85:f2:27:0b:00:cb:4f:c7:0f:
         ad:98:67:c5:2b:9b:b9:cd:6c:cc:c6:98:0b:a1:45:b9:e5:02:
         63:f6:53:bc:50:37:e4:b9:8d:f7:93:3a:67:3d:ea:eb:b4:c0:
         89:bb:ff:29:9a:18:2c:a3:66:7b:fd:95:cc:07:f6:81:06:4d:
         2d:00:5a:48:e8:cc:cf:9f:5a:a7:46:65:89:f7:65:3c:f7:56:
         99:1f:55:77:24:86:d3:52:8d:8d:d3:fe:a8:9c:45:fc:bc:ef:
         c0:bd:5a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 09:10:30 2025 by rpki-client