Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          Vvk8E/x+1gVlesg0ZI/d1kQ87T260l6cKVVI2AbIKOM=
Subject key identifier:   EB:F0:1E:28:26:C8:80:53:20:B8:3D:9C:35:60:53:6D:44:07:47:67
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       5E44A5A6C5546B4DCBFCE8FA263C2C252BD95704
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          01D2
Signing time:             Wed 02 Apr 2025 23:34:48 +0000
Manifest this update:     Wed 02 Apr 2025 23:29:48 +0000
Manifest next update:     Fri 04 Apr 2025 01:31:48 +0000
Files and hashes:         1: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: aHQLak9N9Oms5rgKvpLigAh2LZdfLoi6boC6n7PKDU4=)
                          2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: 1C8fIKlQUnAeCmyoK3V2NdUgsW/0q5NrpzLZYBb5TGM=)
                          3: AS198136.asa (hash: W+U8FE8wW4IM5Quak0Mq8eROawTLthMCIEUtXh+wJqE=)
                          4: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=)
                          5: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: 4+T1S7nhTi5qUUKD/EZ3rW/nCujOCnJQT7uk9Cx/nIw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Apr 2025 22:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:44:a5:a6:c5:54:6b:4d:cb:fc:e8:fa:26:3c:2c:25:2b:d9:57:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Apr  2 23:29:48 2025 GMT
            Not After : Apr  4 01:31:48 2025 GMT
        Subject: CN=EBF01E2826C8805320B83D9C3560536D44074767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b9:9b:93:dd:3f:46:51:8f:56:b8:f9:30:0b:
                    04:bc:2c:ca:d6:d6:25:1d:ae:c1:a2:e1:77:8e:9f:
                    48:90:e0:bd:b3:c4:a5:aa:ac:59:aa:16:1f:f0:b0:
                    5c:d9:1c:be:ff:0a:70:9f:87:90:24:b2:0f:68:bb:
                    70:e2:62:8a:d0:0c:a1:22:68:c0:67:f1:58:ff:8d:
                    18:6e:2f:bc:16:f1:ca:c6:ac:06:aa:ab:e6:94:08:
                    63:c2:42:c0:ee:81:d8:ca:e3:62:5c:b0:a1:af:44:
                    ed:d3:55:d1:9b:b2:e5:41:a3:48:2e:c0:bb:ec:f9:
                    50:5e:4e:d0:6e:db:83:42:1e:43:da:0d:47:40:a0:
                    f6:a8:5e:5b:53:c5:0e:37:9c:62:aa:d6:6f:d1:84:
                    54:a0:83:aa:90:d2:4b:05:55:f3:2c:2d:e6:d9:ae:
                    7f:d7:be:f8:ae:b4:c2:bf:40:4d:ac:fc:95:3f:d1:
                    4f:aa:e7:97:5d:da:bc:db:9a:cb:c5:70:97:1a:6e:
                    6f:9a:2f:90:04:be:72:72:a2:c2:1d:86:be:85:c9:
                    5b:47:e2:ff:5f:48:73:fc:fb:dc:74:24:c6:26:6d:
                    db:e0:16:b0:1b:39:fb:3c:7f:af:cd:c5:3c:3d:d3:
                    ff:f1:09:a6:25:82:b7:82:49:ed:0e:04:27:b2:96:
                    b8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F0:1E:28:26:C8:80:53:20:B8:3D:9C:35:60:53:6D:44:07:47:67
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:55:1e:f1:d7:ab:92:d9:e1:eb:a7:fa:30:b9:7c:1b:42:3a:
         34:7d:28:f1:47:b5:03:93:2d:30:4c:82:f3:ac:66:97:0a:ca:
         0d:e8:8f:55:d5:f5:fd:7d:85:e7:4b:68:3e:a5:25:8e:4e:1a:
         71:46:72:8e:d3:82:ec:37:5b:b8:f8:1b:d4:47:61:92:82:ee:
         c7:78:71:f2:67:2a:8e:51:9e:f6:b2:d5:61:fe:52:ad:e1:30:
         c2:d8:30:e2:24:79:b5:9a:4f:1a:a9:6a:81:35:c6:f8:75:24:
         64:47:ec:30:c8:9b:16:fb:e3:b5:84:33:a8:3c:d5:31:c5:f0:
         1e:1a:ef:71:58:ab:26:d2:76:ff:9e:54:57:ae:af:1c:54:74:
         b1:b4:30:f7:01:e1:31:e6:aa:d6:7f:82:65:32:8c:e2:13:0b:
         79:ee:f1:5f:85:3f:ca:26:fc:8e:be:72:c5:b2:93:85:8a:16:
         f0:0f:2e:33:89:93:89:c9:d2:d3:41:50:0b:eb:9c:c9:5b:99:
         11:b0:a1:00:64:2e:dc:d9:8e:00:e5:57:a4:2e:a0:69:e0:45:
         01:18:7a:90:0f:5b:5f:ae:ac:14:20:c9:8c:e0:5f:c3:b9:13:
         5e:3e:a7:63:cd:dd:44:b6:3d:d5:6a:61:12:34:73:4d:3b:76:
         26:ae:c3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:29:44 2025 by rpki-client