Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          An0jgUHDNdE0guupTtGHtk68jndVhyHd/H5glwPaENM=
Subject key identifier:   ED:06:3D:BB:BA:53:0F:00:1F:8B:CA:05:35:05:8D:E9:44:0D:90:E2
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       350141A486A991C033A807F88C3E884A1C7C396F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          03D1
Signing time:             Sun 19 Apr 2026 02:05:01 +0000
Manifest this update:     Sun 19 Apr 2026 02:00:01 +0000
Manifest next update:     Mon 20 Apr 2026 04:06:01 +0000
Files and hashes:         1: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          3: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          4: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: JQOPylyqP2dZV4Ix6ZoEzpm8lBX2Hh1CfVbD0f8PW5g=)
                          5: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:01:41:a4:86:a9:91:c0:33:a8:07:f8:8c:3e:88:4a:1c:7c:39:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Apr 19 02:00:01 2026 GMT
            Not After : Apr 20 04:06:01 2026 GMT
        Subject: CN=ED063DBBBA530F001F8BCA0535058DE9440D90E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fd:88:cf:76:f7:0c:79:8b:30:e5:d4:30:04:
                    5f:ba:75:56:35:1a:f7:27:30:97:d4:78:aa:4b:0f:
                    c5:e0:e8:c0:17:39:a1:53:c3:f5:22:0b:c6:3a:2d:
                    b5:e8:fd:c4:15:65:c9:f3:4c:4d:00:dc:23:eb:ed:
                    da:94:5d:81:e9:75:2e:27:32:69:e2:26:a6:40:b9:
                    77:4d:36:a6:44:7a:6c:5a:60:c9:6f:ad:3f:e1:57:
                    64:ed:d4:8e:c4:2b:14:b4:4b:ec:71:03:b9:f7:08:
                    49:bf:49:4e:ff:03:92:c0:51:01:ff:26:b6:fb:ec:
                    da:fe:19:64:68:d6:ba:85:d0:58:36:e1:3a:cf:4a:
                    70:3c:2d:50:4e:2b:e4:7c:df:0f:e2:a9:4a:f0:9b:
                    b9:13:1d:58:c3:d6:4a:71:7e:84:37:35:d8:44:73:
                    a9:98:98:37:10:ce:5e:0a:36:55:66:df:da:8e:58:
                    f3:52:35:a7:8a:9b:bd:c2:4e:e6:24:22:e9:9e:8a:
                    f9:88:ce:09:7a:a8:14:ea:c7:2f:82:35:69:b3:6e:
                    f3:5d:a3:87:b0:25:33:a7:23:50:07:58:e7:ac:57:
                    b3:62:33:9d:02:3d:d6:2e:25:31:cc:d1:e3:32:2b:
                    ce:49:c1:e6:7b:9c:89:9f:f7:00:65:37:e8:e9:9d:
                    6e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:06:3D:BB:BA:53:0F:00:1F:8B:CA:05:35:05:8D:E9:44:0D:90:E2
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b1:ee:2d:a4:5c:78:ac:01:05:aa:5d:fb:bc:3b:99:75:ca:
         84:6a:87:6f:62:44:af:58:29:34:31:4b:05:b8:3c:59:dd:7c:
         a7:e4:99:75:5a:1d:07:61:9b:fd:f9:6a:89:df:6c:7e:7f:ab:
         51:b5:31:dd:11:c6:e7:fc:04:02:42:80:54:d0:28:56:43:42:
         10:25:c1:7f:f8:2b:33:1d:07:f3:ed:e7:8f:1f:8e:b2:52:1b:
         b7:cb:a2:5a:3f:42:5e:d1:a3:e1:fe:a8:81:b8:f6:89:0e:b5:
         eb:cd:e2:3d:85:36:b1:b4:16:da:0c:b0:34:d9:22:6f:e8:5b:
         9c:65:db:bc:af:e7:69:49:b5:4f:eb:d5:07:68:fc:2a:46:9b:
         c6:c3:de:60:c7:7a:c1:27:82:68:bc:4f:c3:ac:fe:f2:ba:a9:
         85:03:6a:0c:16:ba:b4:a1:dc:7c:3b:6f:43:ee:88:6c:dd:4f:
         30:ad:37:1d:be:a8:1d:4c:3e:d8:78:ab:07:38:49:73:00:8d:
         53:0b:8f:e9:f3:7e:bd:ae:67:bf:81:7e:10:73:64:5d:b5:f9:
         03:9d:59:a4:92:0b:f6:5d:05:7a:63:b4:97:44:35:a9:22:2b:
         a2:c0:1a:e1:f6:2b:5a:7b:72:28:04:06:a4:50:38:0b:6a:f4:
         74:3f:39:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 19:49:28 2026 by rpki-client