Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          UdP9VZW+L8smzs4fMp6b6o0s3NkPbuUgNVCybd2oUdg=
Subject key identifier:   EE:48:61:31:54:3E:3F:FE:6C:41:C1:E7:A2:18:8F:75:EC:8B:18:CF
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       32D97306BA5A295995A8BB579DD61D11D98F5ECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          03E0
Signing time:             Thu 30 Apr 2026 09:25:01 +0000
Manifest this update:     Thu 30 Apr 2026 09:20:01 +0000
Manifest next update:     Fri 01 May 2026 11:26:01 +0000
Files and hashes:         1: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: eQ/cmX9GhPg8iwu/+vGwgpN/PWbIHc8C2bay2Oj/4Gc=)
                          2: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          3: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          4: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          5: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 11:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d9:73:06:ba:5a:29:59:95:a8:bb:57:9d:d6:1d:11:d9:8f:5e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Apr 30 09:20:01 2026 GMT
            Not After : May  1 11:26:01 2026 GMT
        Subject: CN=EE486131543E3FFE6C41C1E7A2188F75EC8B18CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7e:c7:27:3a:6e:af:35:d6:7d:12:c8:6f:d9:
                    50:15:9c:d2:a0:2b:5c:50:31:6f:fa:bc:37:a9:67:
                    67:b0:ad:6f:82:84:61:f5:65:10:35:73:25:5f:f2:
                    db:5e:24:0b:2b:95:8e:ab:aa:59:23:8b:92:3f:a3:
                    95:15:c0:4d:59:57:94:4f:4b:22:82:cb:79:cc:45:
                    94:f1:90:c3:3c:56:d2:59:05:f4:1d:fe:4e:3e:cf:
                    f6:d5:fb:b4:7a:a3:41:91:32:a7:e5:fa:07:cb:7f:
                    b4:d3:41:c8:84:0f:e8:f2:20:37:39:5b:1c:6c:b6:
                    56:81:3d:6e:60:47:b9:8a:c3:f5:0a:6c:5d:17:72:
                    79:1c:2c:62:c6:7c:88:f6:83:25:e4:fd:04:8c:e0:
                    e3:c4:2f:ed:c6:82:58:92:d6:1c:27:4d:a9:ae:09:
                    0c:bd:b6:8c:d7:14:6a:08:84:05:a2:ae:96:43:b3:
                    ee:5a:43:32:d2:1f:f3:dc:c5:fa:78:44:11:69:8f:
                    3f:f8:8d:cc:cd:e0:73:8f:a0:36:a7:69:84:46:91:
                    21:7b:db:ce:8a:d5:9c:c4:1b:f0:b2:66:4c:62:8f:
                    c5:aa:9f:b5:44:3b:41:77:17:ef:f5:3a:d4:ec:ef:
                    59:d7:6d:92:a3:05:a9:d3:75:b2:c1:68:21:86:20:
                    c6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:48:61:31:54:3E:3F:FE:6C:41:C1:E7:A2:18:8F:75:EC:8B:18:CF
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:1d:db:1c:0f:02:d8:40:a1:65:dd:5a:12:06:c5:72:34:2d:
         e7:53:1c:96:b8:36:4b:67:cd:b9:15:6b:10:8b:34:e7:6e:b0:
         34:c7:49:50:c1:71:59:9e:c1:e0:6f:a4:79:52:a3:36:95:ff:
         37:7d:e7:33:c5:15:b0:92:51:94:e8:62:07:ee:b6:72:ad:ec:
         9b:5e:11:c1:9b:ab:b3:9b:22:2e:ca:6d:06:75:39:d7:3e:cf:
         6a:b1:a5:42:17:92:21:86:52:61:4c:44:e3:62:af:34:6e:d3:
         34:c9:95:b5:d2:c3:91:ba:f7:05:7e:e8:8c:e0:c3:21:d1:02:
         c7:24:22:9c:cc:ee:a3:5b:cc:89:9b:17:64:75:ad:f1:96:b6:
         a3:43:c3:50:32:85:6c:9c:c3:2f:d6:4c:5a:45:73:94:92:85:
         86:5b:a6:a3:36:f3:8f:99:f8:cf:bc:97:f3:68:d1:74:78:55:
         29:e8:45:66:28:44:6c:82:53:8a:d1:09:3b:8d:60:86:49:b9:
         69:7b:56:5a:c6:61:f9:b3:f5:ec:06:50:88:ab:dd:cd:10:41:
         2c:7f:9f:fe:6c:90:43:ee:11:7b:05:df:c2:7f:9a:90:40:c6:
         cc:da:65:54:d9:85:60:91:01:3a:d3:46:2c:25:a9:86:bb:77:
         8a:52:b8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 16:10:17 2026 by rpki-client