Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          qkfEox1cWRmA9zAizUzb+WUvAkRRNNEqUdvSd9Jf5+8=
Subject key identifier:   21:C5:12:9E:3F:DB:55:62:D8:03:0A:11:43:11:A8:F0:20:57:E1:0A
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       66DCE70C5CC2ABBFDAF86D5AE2BCB9EBB74E29F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          0407
Signing time:             Fri 29 May 2026 10:05:12 +0000
Manifest this update:     Fri 29 May 2026 10:00:12 +0000
Manifest next update:     Sat 30 May 2026 12:23:12 +0000
Files and hashes:         1: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          2: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          3: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          4: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          5: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: YrqpJHiDKhvUfFitv0sxkQek5QZozaHjPgkuzbLWyT0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 May 2026 07:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:dc:e7:0c:5c:c2:ab:bf:da:f8:6d:5a:e2:bc:b9:eb:b7:4e:29:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: May 29 10:00:12 2026 GMT
            Not After : May 30 12:23:12 2026 GMT
        Subject: CN=21C5129E3FDB5562D8030A114311A8F02057E10A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:9c:14:20:02:c3:ca:6f:f1:b0:d1:70:bf:
                    72:93:ea:09:78:25:2b:9a:57:20:05:62:12:88:aa:
                    dd:8e:e7:dc:37:80:c6:12:a8:74:bd:d9:87:7f:7b:
                    33:82:04:40:87:db:37:fc:a6:ec:65:f5:90:8f:76:
                    9c:6b:ff:9a:20:f8:bf:42:b5:d4:13:76:8e:d7:b8:
                    c1:93:bc:85:0e:4f:1d:de:8a:fb:8f:1e:9b:2e:f9:
                    8f:db:40:5e:fa:40:b1:75:93:0d:86:e2:e0:83:ff:
                    39:fd:66:66:3f:9f:2e:65:34:3b:1f:79:44:b8:b0:
                    c4:bb:41:5d:eb:f4:32:06:6e:48:33:62:35:98:05:
                    23:fb:2b:d7:41:fb:22:fc:9d:30:7c:da:cb:2d:73:
                    d0:e2:9f:20:75:a2:b1:7f:9f:cc:cb:c6:79:54:18:
                    73:66:c1:d0:ec:51:c1:0b:d5:61:d9:d5:92:a4:aa:
                    bf:e7:86:c5:5c:01:70:3e:53:f6:0e:54:37:77:8f:
                    7d:7d:b8:9c:1f:d5:dd:d0:49:2b:27:d4:b9:e0:b7:
                    7e:80:f1:15:44:11:18:e4:84:3d:f2:2d:88:96:73:
                    8b:6b:66:33:02:d5:be:4d:7f:f8:ec:d4:90:20:22:
                    8f:a1:4f:c8:f6:de:9e:ab:ff:4f:6b:0f:cf:f2:a4:
                    67:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C5:12:9E:3F:DB:55:62:D8:03:0A:11:43:11:A8:F0:20:57:E1:0A
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:10:79:e1:71:4f:f8:56:84:0c:74:66:a6:62:2e:7f:ec:8a:
         94:8e:2b:74:71:fa:36:8c:6c:c6:d3:7a:10:56:bd:d1:7b:c3:
         02:1d:70:15:67:35:82:1d:09:d4:90:58:ed:68:ab:15:44:ed:
         42:d4:c3:a9:92:e1:d4:60:01:60:f3:fb:46:1c:af:aa:d3:6e:
         35:d1:5b:e7:34:17:89:b7:a5:e9:20:aa:d0:ce:61:b7:57:4d:
         01:99:a9:cb:db:96:bb:ad:61:12:9c:a7:cc:91:e3:e5:79:25:
         eb:b2:46:f7:03:7d:db:41:3f:49:ad:22:19:95:e9:59:f5:df:
         8d:57:89:5f:73:cf:87:16:cf:b7:1f:8c:ac:a0:98:30:bc:af:
         e9:80:39:bc:ca:d0:57:05:a4:f9:a4:42:d4:2d:cd:e8:2e:47:
         c1:5c:08:da:a3:55:d3:79:cf:03:36:67:c2:ea:83:96:68:c7:
         f5:de:b5:d4:bb:c5:e3:80:3c:5f:2a:35:18:77:a5:da:fa:a8:
         9d:bf:57:73:1a:5b:a2:e1:67:7e:a6:7c:df:10:80:f1:54:55:
         2e:3f:1b:99:f5:41:e3:a3:98:5b:df:0d:2f:3b:91:02:96:63:
         8d:92:59:fa:32:13:47:93:56:8b:31:c4:de:33:39:68:a0:83:
         63:22:de:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 16:11:22 2026 by rpki-client