Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          K8UoNeZ4SmZIxJLYC9u5MZm2rKgyQkNe9e3ZKr5PeDU=
Subject key identifier:   DF:1C:97:A6:5F:07:B3:2A:3D:2A:E8:44:FE:3D:22:80:08:4D:AC:50
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       4CD55FA5B5EF2BDBE15ACBCBCE73A9816052CAC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          0440
Signing time:             Sat 11 Jul 2026 06:27:52 +0000
Manifest this update:     Sat 11 Jul 2026 06:22:52 +0000
Manifest next update:     Sun 12 Jul 2026 06:50:52 +0000
Files and hashes:         1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          2: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          3: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          4: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: LtpwOEna4lvxDvRzWLDh9WusP2gZnFGn1ALxtkpXRo8=)
                          5: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Jul 2026 23:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d5:5f:a5:b5:ef:2b:db:e1:5a:cb:cb:ce:73:a9:81:60:52:ca:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Jul 11 06:22:52 2026 GMT
            Not After : Jul 12 06:50:52 2026 GMT
        Subject: CN=DF1C97A65F07B32A3D2AE844FE3D2280084DAC50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b4:67:dd:40:c0:8f:03:a6:a6:c5:5c:9e:31:
                    d4:05:a5:c4:c5:6b:db:06:6b:54:47:42:d6:3a:6e:
                    96:40:f3:ec:e5:c6:b2:44:28:f7:14:b7:b9:31:ad:
                    f4:2d:9c:cf:87:6a:62:3f:18:56:ac:c9:96:2f:bc:
                    e8:f8:a3:18:d2:e0:aa:50:2d:06:0c:29:0f:59:a1:
                    e9:52:4a:71:18:cb:13:84:3e:4e:35:28:59:5c:65:
                    ac:24:7f:06:56:96:f5:d5:d5:c9:cf:e4:87:a9:86:
                    f8:1a:69:50:61:55:5c:c7:47:72:13:96:48:da:74:
                    4d:3c:af:8c:1f:0e:6c:a7:5d:67:d8:83:85:af:0f:
                    99:2d:e7:1c:26:24:f6:05:4e:86:ed:a7:d3:0e:18:
                    d1:51:de:e0:27:bb:72:b7:2d:57:1e:53:cf:a7:b0:
                    76:1a:0d:6e:e4:2c:9a:ab:f2:a1:7e:df:af:75:47:
                    bd:51:0f:42:7e:6d:a7:c6:a6:ac:35:43:24:82:e7:
                    62:3d:ae:7b:cd:e4:19:6e:d8:70:c5:84:13:77:13:
                    f6:a9:ba:4a:e8:9f:be:5f:b2:ab:01:79:77:dd:ef:
                    a9:e2:f1:c8:7c:5d:a2:06:ef:dd:dd:a4:65:c5:10:
                    57:e4:35:b6:3c:88:29:85:56:1f:86:49:a0:dc:17:
                    12:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1C:97:A6:5F:07:B3:2A:3D:2A:E8:44:FE:3D:22:80:08:4D:AC:50
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:cc:f3:c5:4e:90:ae:35:a5:91:08:90:30:5f:83:61:95:cf:
         a2:71:e4:2f:b5:3a:71:60:4e:03:9d:1a:2c:d4:36:2a:a4:7a:
         30:af:5c:f2:cf:28:67:6d:bc:aa:e5:c6:cc:4d:bb:01:b4:ac:
         d0:8c:c5:78:1b:9b:3e:80:82:12:4f:c7:88:03:fc:0a:23:4f:
         ae:bf:e2:77:58:36:cc:d1:df:0f:35:e7:c4:0d:0a:38:8c:6a:
         48:1f:c0:ec:c6:54:b4:36:b9:4a:1c:2d:0d:99:be:fc:2d:79:
         fc:c9:b8:cc:30:30:c2:4e:52:77:ea:e6:08:90:12:9b:fe:71:
         8f:cd:53:16:a9:be:01:88:33:82:55:86:3e:d7:d1:53:3e:35:
         26:5a:28:dc:69:06:12:a9:3f:1b:56:9b:4c:e4:62:36:32:a7:
         0e:b5:a4:34:b8:e2:de:ba:94:4d:16:6d:d7:ff:1c:11:f0:86:
         7c:b9:1f:9b:b2:3e:cf:33:ae:12:d1:23:91:df:a9:d7:04:49:
         7b:43:73:7c:fb:7e:c6:82:48:c9:cf:17:d4:6b:d3:68:b0:72:
         5a:fd:81:4d:aa:de:c3:a3:d4:62:f3:56:e0:5b:1c:16:15:8f:
         c4:65:83:e5:7c:91:ec:fd:9f:c2:2d:98:6d:e2:80:57:05:cb:
         5d:24:03:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 08:51:13 2026 by rpki-client