Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          g+BlsBHJ4iV5MvMvudnZPSFFRA8jy6tZLj2vdL9WBEA=
Subject key identifier:   25:EC:E0:5B:D7:CD:74:8D:68:8F:25:16:43:04:7C:15:99:BE:D8:3B
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       360CC93E7AA3526A4AA7DFF97F4A91E2BA0DDA76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          03DC
Signing time:             Mon 27 Apr 2026 07:30:01 +0000
Manifest this update:     Mon 27 Apr 2026 07:25:01 +0000
Manifest next update:     Tue 28 Apr 2026 10:05:01 +0000
Files and hashes:         1: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          2: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: /Jvm0DxGlAeCCn5VulPgEVBN7/j5sScNlPygdVEQSkQ=)
                          4: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          5: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0c:c9:3e:7a:a3:52:6a:4a:a7:df:f9:7f:4a:91:e2:ba:0d:da:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Apr 27 07:25:01 2026 GMT
            Not After : Apr 28 10:05:01 2026 GMT
        Subject: CN=25ECE05BD7CD748D688F251643047C1599BED83B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9d:3c:29:50:36:2a:16:09:29:81:de:87:01:
                    d6:bd:9d:0d:9e:df:2f:9f:6f:ab:f7:5a:66:96:c0:
                    80:84:8d:27:99:cf:15:9b:b7:27:a2:5d:d5:3b:9e:
                    20:e2:8e:6b:70:13:cd:54:f5:e8:a5:73:9a:eb:1d:
                    82:2b:3b:55:4b:76:fe:fc:ea:bd:fc:6c:7e:71:15:
                    c8:14:a2:08:5f:2b:89:07:bb:2c:ae:25:74:4b:1c:
                    0e:4e:dd:9a:e8:be:97:aa:3a:51:f3:1f:64:33:70:
                    4e:b4:5e:f2:42:11:e4:6d:b3:fc:90:20:39:8d:a2:
                    07:3d:41:7d:eb:4f:80:a2:49:fa:12:02:f5:74:57:
                    f2:15:a2:ce:4d:b4:91:3b:5f:92:d5:67:7d:4d:8c:
                    af:3f:13:56:d8:5e:bd:74:d6:d0:a0:8a:2b:9c:8e:
                    14:42:e3:c6:6b:2f:32:83:81:1d:dd:88:7c:20:78:
                    99:7c:6f:63:f0:61:02:65:24:12:16:89:44:80:83:
                    3e:65:dc:58:55:6f:fa:07:a8:9d:05:6c:44:68:d4:
                    83:91:04:2d:38:b2:dd:3e:0d:94:d0:a0:29:3d:54:
                    e8:aa:ad:c8:de:12:88:77:69:56:b6:59:54:9c:86:
                    e2:e0:ef:cf:4e:9c:85:78:1c:4a:14:ab:91:39:67:
                    1a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EC:E0:5B:D7:CD:74:8D:68:8F:25:16:43:04:7C:15:99:BE:D8:3B
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:48:c9:3c:b3:a8:67:ce:80:c3:d9:91:a6:40:de:c0:0d:4a:
         56:83:78:af:e6:9a:ae:3e:89:36:0f:32:c6:de:37:b8:cb:db:
         c5:4a:e6:c1:40:6c:53:99:e8:b5:6c:94:fb:23:ee:b5:73:67:
         5e:ca:e0:2b:f7:b3:a1:9d:85:83:2d:fb:56:e8:3f:5e:a0:c7:
         f0:aa:76:d1:28:bf:78:c8:d4:b5:81:af:6e:71:25:f0:f0:5f:
         7c:c0:1e:c6:12:49:0c:b2:19:03:57:46:9d:38:4d:ca:97:46:
         35:00:84:ba:82:db:2e:65:43:bb:76:ec:d3:fa:cd:bc:3f:55:
         34:59:b4:63:7d:85:26:de:93:dc:c2:66:1d:bb:0f:11:92:0a:
         f8:5e:c3:3d:cc:ba:e6:d3:3a:f0:1d:8a:a1:a3:2c:68:b6:23:
         fd:79:09:e7:e0:30:e5:53:fc:20:b4:5f:33:f7:a7:5d:f6:d8:
         a4:8f:04:c1:a9:e0:db:07:17:ea:1c:db:fa:e9:5f:a8:6a:a2:
         7f:20:97:93:ee:73:a9:6e:58:40:41:73:91:f7:ed:66:ee:ed:
         3e:7e:94:51:37:cc:5e:32:37:aa:36:c2:35:58:ea:ed:08:ea:
         dd:12:23:fd:87:bb:3a:7b:f9:8f:9f:c2:dc:5c:55:58:0b:c6:
         10:70:73:6f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUNgzJPnqjUmpKp9/5f0qR4roN2nYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl
MmE1YmIzODAeFw0yNjA0MjcwNzI1MDFaFw0yNjA0MjgxMDA1MDFaMDMxMTAvBgNV
BAMTKDI1RUNFMDVCRDdDRDc0OEQ2ODhGMjUxNjQzMDQ3QzE1OTlCRUQ4M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChnTwpUDYqFgkpgd6HAda9nQ2e
3y+fb6v3WmaWwICEjSeZzxWbtyeiXdU7niDijmtwE81U9eilc5rrHYIrO1VLdv78
6r38bH5xFcgUoghfK4kHuyyuJXRLHA5O3ZrovpeqOlHzH2QzcE60XvJCEeRts/yQ
IDmNogc9QX3rT4CiSfoSAvV0V/IVos5NtJE7X5LVZ31NjK8/E1bYXr101tCgiiuc
jhRC48ZrLzKDgR3diHwgeJl8b2PwYQJlJBIWiUSAgz5l3FhVb/oHqJ0FbERo1IOR
BC04st0+DZTQoCk9VOiqrcjeEoh3aVa2WVSchuLg789OnIV4HEoUq5E5ZxrpAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUJezgW9fNdI1ojyUWQwR8FZm+2DswHwYDVR0j
BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0
OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL
bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y
ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE
N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUjJPLOoZ86Aw9mRpkDe
wA1KVoN4r+aarj6JNg8yxt43uMvbxUrmwUBsU5notWyU+yPutXNnXsrgK/ezoZ2F
gy37Vug/XqDH8Kp20Si/eMjUtYGvbnEl8PBffMAexhJJDLIZA1dGnThNypdGNQCE
uoLbLmVDu3bs0/rNvD9VNFm0Y32FJt6T3MJmHbsPEZIK+F7DPcy65tM68B2KoaMs
aLYj/XkJ5+Aw5VP8ILRfM/enXfbYpI8Ewang2wcX6hzb+ulfqGqifyCXk+5zqW5Y
QEFzkfftZu7tPn6UUTfMXjI3qjbCNVjq7Qjq3RIj/Ye7Onv5j5/C3FxVWAvGEHBz
bw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:28:02 2026 by rpki-client