Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          sx80UJKtGrWMrCBtNQaIWunDhJrU2ykGOZ1S2KV9ZM4=
Subject key identifier:   EB:99:C7:A9:F1:90:0B:E4:68:17:44:9D:37:3D:F8:67:D6:9D:99:58
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       68976770C0CB0C507EE833A87ABBD70A29B3FCB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          03A4
Signing time:             Mon 16 Mar 2026 05:43:32 +0000
Manifest this update:     Mon 16 Mar 2026 05:38:32 +0000
Manifest next update:     Tue 17 Mar 2026 06:29:32 +0000
Files and hashes:         1: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: JLp+OszjamvBGWz7uck2A/475TPQmGDOTHkRFYCUciM=)
                          2: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          3: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          5: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:97:67:70:c0:cb:0c:50:7e:e8:33:a8:7a:bb:d7:0a:29:b3:fc:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Mar 16 05:38:32 2026 GMT
            Not After : Mar 17 06:29:32 2026 GMT
        Subject: CN=EB99C7A9F1900BE46817449D373DF867D69D9958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8b:30:20:ec:8d:ab:4b:c8:35:be:96:8e:52:
                    e5:89:8e:97:b6:7b:06:0e:2a:48:72:86:ba:ad:2c:
                    cc:f9:34:76:10:9f:2d:02:e3:1a:73:e6:ae:ad:6c:
                    3e:79:97:3c:d7:cf:5f:10:b6:2f:21:a0:eb:bf:b5:
                    3b:43:a7:1a:d0:a8:a1:21:e8:ec:4a:5e:ae:82:c2:
                    00:09:52:c8:17:1b:27:bf:8e:30:34:ca:d4:c1:35:
                    96:90:f5:5b:aa:9a:12:38:76:f0:c4:40:9e:c1:d8:
                    80:39:8b:73:54:98:6f:ef:0d:e1:71:1f:02:ff:9e:
                    22:51:02:cf:1a:94:65:53:5d:44:9e:6f:dc:2b:62:
                    2f:67:6a:07:28:7e:f5:6e:e6:e8:cb:f2:b8:b7:c2:
                    b8:55:fd:60:b5:c8:46:17:14:b3:c8:b3:e4:6f:f5:
                    a8:af:96:98:be:e2:54:69:b8:ee:2d:97:7f:40:c1:
                    3f:4f:6b:a1:aa:34:9d:54:89:24:8e:e8:e1:db:a5:
                    e1:5b:57:2d:ed:b7:96:f2:49:a5:1c:2d:22:80:6b:
                    a5:5b:12:da:74:3a:6f:1e:54:1a:7f:b4:14:13:be:
                    52:20:05:ef:6e:79:4b:a6:f8:60:4a:4a:6c:83:6a:
                    1a:15:df:c2:c9:a2:79:0d:2e:5f:83:1c:c2:9a:e8:
                    05:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:99:C7:A9:F1:90:0B:E4:68:17:44:9D:37:3D:F8:67:D6:9D:99:58
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:6e:0e:10:d0:3a:24:dc:26:31:9c:d5:19:3c:9c:d3:5b:14:
         cb:52:ca:b0:4f:f1:40:95:0f:b8:c9:73:39:1c:63:31:c3:e8:
         d5:8f:8e:f1:f5:6e:2b:51:77:4f:98:51:e2:15:93:2a:cf:d5:
         be:0e:7e:a2:1e:5a:34:7f:2a:44:b6:f1:66:79:3c:6b:78:87:
         5b:83:3f:e1:a0:ea:dd:d1:69:a9:a6:ce:09:e2:36:d6:2c:8e:
         3f:05:1c:c4:28:94:21:58:ca:b6:b7:c3:11:01:b1:e1:95:3c:
         bd:43:e9:8e:f8:17:b8:7c:3e:6b:5c:54:1e:36:1e:53:d4:9a:
         1b:3d:c1:eb:a2:18:e1:6c:c3:1f:83:92:a4:36:cb:16:d6:45:
         5b:c2:44:0c:60:e8:65:ad:1f:d8:1f:13:41:df:1c:97:d3:f2:
         6f:6b:6f:c4:4e:97:0f:c7:19:25:f9:15:d2:d9:74:74:7a:65:
         95:67:92:c0:ff:db:47:96:22:e2:bc:2a:05:ef:68:be:66:0c:
         99:6d:10:b7:cf:c6:b6:b1:44:4e:6d:1e:75:da:ca:cc:8c:f7:
         84:e7:5d:fe:66:e8:60:dc:c4:e5:89:7a:6e:16:c7:ec:ce:5c:
         2d:1a:8f:18:5c:b4:6f:7e:f1:6e:47:e0:25:67:71:8d:75:28:
         6b:41:06:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 07:58:34 2026 by rpki-client