Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          ynbtE6x3/NiBHjfqXH3fWEeDMXk76u+wUzsbhJ5g7TE=
Subject key identifier:   F5:2A:72:94:2D:B6:21:48:0A:02:F5:8D:DF:2B:66:A9:67:EA:F9:7C
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       2B505C07AAD4AD56427ACD343D336F5983638EE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          040F
Signing time:             Thu 04 Jun 2026 07:50:12 +0000
Manifest this update:     Thu 04 Jun 2026 07:45:12 +0000
Manifest next update:     Fri 05 Jun 2026 10:09:12 +0000
Files and hashes:         1: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          2: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          3: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          4: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          5: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: 915cDDUs3JPXfQW2m6RWXIpkXl3oEV2VDJ0g+4gmV6A=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 10:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:50:5c:07:aa:d4:ad:56:42:7a:cd:34:3d:33:6f:59:83:63:8e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Jun  4 07:45:12 2026 GMT
            Not After : Jun  5 10:09:12 2026 GMT
        Subject: CN=F52A72942DB621480A02F58DDF2B66A967EAF97C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:5b:90:91:e5:66:53:56:e6:65:ac:91:02:
                    58:c1:41:cb:d9:c7:ed:0f:43:17:1f:7c:50:10:35:
                    79:e4:de:69:82:45:92:90:73:e6:f4:2d:15:b0:f5:
                    7a:76:38:1f:17:32:33:e7:0f:9e:67:58:92:b6:b3:
                    0d:00:2d:d0:ff:c4:51:81:8b:e5:3b:a6:09:21:4d:
                    65:a9:d0:be:3a:10:cd:f0:bd:13:7a:85:54:ca:8c:
                    d3:f4:c4:93:6d:b4:62:fb:ab:27:8e:87:d0:47:e5:
                    97:d4:b4:8a:d9:5c:45:2b:50:f7:5a:bb:20:33:46:
                    1e:3f:e6:e5:a5:e9:fe:b0:a2:1f:6f:0e:0c:8c:63:
                    1d:e8:d7:e2:9e:3b:d5:cd:5f:23:de:21:4a:f2:84:
                    0d:45:20:7c:54:09:a5:cf:ea:99:23:21:19:8b:ab:
                    32:98:56:7a:ca:be:56:74:0d:6a:63:2b:cc:10:28:
                    06:f5:0c:48:a7:0e:83:ee:a5:40:8b:98:f8:8f:c9:
                    a3:46:4c:95:f1:33:27:1b:69:0d:80:76:46:b8:25:
                    c9:19:c6:dd:af:30:a0:28:93:3d:8c:33:f4:be:76:
                    81:8f:5a:e3:24:9c:00:23:4b:5c:91:7e:bf:aa:43:
                    00:9f:9f:b7:9c:7c:11:6c:57:84:98:9d:61:c6:45:
                    25:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2A:72:94:2D:B6:21:48:0A:02:F5:8D:DF:2B:66:A9:67:EA:F9:7C
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:8c:8b:9f:16:2d:fd:5c:9d:ea:99:05:61:ce:ec:1c:e1:49:
         6e:16:2a:11:a7:35:26:1a:4f:6e:23:e4:96:24:13:31:09:b9:
         68:64:88:33:58:6c:b5:8d:80:be:7e:bd:f0:77:31:6e:ff:6c:
         58:53:c2:79:df:0d:6e:36:ad:cb:1a:27:09:2f:9e:bf:98:91:
         71:14:57:02:54:62:f8:1a:2b:5b:84:8f:87:34:14:ea:0e:3e:
         b6:8a:3a:72:3d:e3:6d:98:1d:40:27:3b:e8:f1:84:6b:a2:8d:
         04:8d:b0:5e:72:bd:b8:91:df:57:e0:63:a9:3b:54:05:50:fb:
         51:f2:18:e3:16:0b:c5:de:40:7e:37:a1:cd:b6:a6:91:65:2c:
         49:a3:a2:85:06:8f:aa:e1:fd:4f:b1:1b:1c:e0:65:f7:67:45:
         45:99:23:77:e9:a8:cb:b8:3b:be:e9:c7:0c:fa:f3:c4:3e:35:
         24:bd:11:84:98:08:07:f1:df:1f:ce:3e:af:3e:ca:35:39:a2:
         62:dd:97:4a:9f:2f:5e:a5:e6:1f:05:f0:a9:ae:78:9b:af:c5:
         0c:49:7a:71:d7:0f:2d:fb:4c:9c:22:d1:3d:62:a2:4d:85:0d:
         5c:24:1d:a0:e2:73:75:11:9e:67:77:d4:6d:88:ac:b7:c5:03:
         99:6e:a3:57
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUK1BcB6rUrVZCes00PTNvWYNjjucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl
MmE1YmIzODAeFw0yNjA2MDQwNzQ1MTJaFw0yNjA2MDUxMDA5MTJaMDMxMTAvBgNV
BAMTKEY1MkE3Mjk0MkRCNjIxNDgwQTAyRjU4RERGMkI2NkE5NjdFQUY5N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCen1uQkeVmU1bmZayRAljBQcvZ
x+0PQxcffFAQNXnk3mmCRZKQc+b0LRWw9Xp2OB8XMjPnD55nWJK2sw0ALdD/xFGB
i+U7pgkhTWWp0L46EM3wvRN6hVTKjNP0xJNttGL7qyeOh9BH5ZfUtIrZXEUrUPda
uyAzRh4/5uWl6f6woh9vDgyMYx3o1+KeO9XNXyPeIUryhA1FIHxUCaXP6pkjIRmL
qzKYVnrKvlZ0DWpjK8wQKAb1DEinDoPupUCLmPiPyaNGTJXxMycbaQ2Adka4JckZ
xt2vMKAokz2MM/S+doGPWuMknAAjS1yRfr+qQwCfn7ecfBFsV4SYnWHGRSWhAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU9SpylC22IUgKAvWN3ytmqWfq+XwwHwYDVR0j
BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0
OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL
bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y
ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE
N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGoyLnxYt/Vyd6pkFYc7s
HOFJbhYqEac1JhpPbiPkliQTMQm5aGSIM1hstY2Avn698Hcxbv9sWFPCed8Nbjat
yxonCS+ev5iRcRRXAlRi+BorW4SPhzQU6g4+too6cj3jbZgdQCc76PGEa6KNBI2w
XnK9uJHfV+BjqTtUBVD7UfIY4xYLxd5AfjehzbamkWUsSaOihQaPquH9T7EbHOBl
92dFRZkjd+moy7g7vunHDPrzxD41JL0RhJgIB/HfH84+rz7KNTmiYt2XSp8vXqXm
HwXwqa54m6/FDEl6cdcPLftMnCLRPWKiTYUNXCQdoOJzdRGeZ3fUbYist8UDmW6j
Vw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 17:49:33 2026 by rpki-client