Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          /COWTfYFqXSfcaF9Hxg0M32Lkz2mCLhaSpkkh5PIg00=
Subject key identifier:   AD:7B:D4:2F:55:2D:0A:63:C9:5E:5D:C7:C3:A7:EC:B7:83:7B:A0:F8
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       7FC1383E518D89010253F6D24775158D2BE40C64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          0413
Signing time:             Sun 07 Jun 2026 10:55:12 +0000
Manifest this update:     Sun 07 Jun 2026 10:50:12 +0000
Manifest next update:     Mon 08 Jun 2026 14:47:12 +0000
Files and hashes:         1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          2: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: RrwmeS+h7ho2q2iZ/5wiXb2LZjkEHoVUBKSuBaw3qXM=)
                          4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          5: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Jun 2026 12:28:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c1:38:3e:51:8d:89:01:02:53:f6:d2:47:75:15:8d:2b:e4:0c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Jun  7 10:50:12 2026 GMT
            Not After : Jun  8 14:47:12 2026 GMT
        Subject: CN=AD7BD42F552D0A63C95E5DC7C3A7ECB7837BA0F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0d:50:69:7d:cc:1e:c5:70:17:d9:f4:3b:f2:
                    1c:e1:ef:f3:28:de:9e:c5:f2:22:24:f5:0b:aa:9a:
                    8c:6e:ae:4a:31:78:bc:b7:ba:00:ee:0e:e1:0e:17:
                    cc:0a:9c:e5:ef:73:86:75:e8:8c:0a:79:0b:33:8f:
                    c2:6e:b8:9b:4b:2a:ae:8a:15:0e:a1:eb:4f:49:a4:
                    a8:ce:23:e7:ea:74:1a:2c:06:7b:a6:90:6d:8c:f1:
                    ce:14:ea:72:fb:cf:bb:d0:a2:9e:a5:ec:09:0d:9c:
                    b7:1d:52:b3:34:27:a5:c1:01:3f:0f:1d:e5:be:f8:
                    98:ed:37:da:d7:df:6f:8f:a0:c9:e8:b6:2d:9d:46:
                    ff:2b:d1:59:05:f2:51:5a:7d:98:5b:7d:6f:41:f1:
                    65:a8:e6:b8:5a:e8:53:28:3f:c7:f0:1e:94:1a:7d:
                    a2:b5:c5:28:1c:2b:ad:75:01:35:f9:d9:86:85:70:
                    26:c9:ce:2d:d4:5c:8f:5b:78:ff:69:b5:3a:a9:5c:
                    22:53:d9:7c:76:87:46:3d:62:c3:12:9b:db:ef:54:
                    9c:0c:b4:ae:c1:2b:ba:97:0c:9d:64:ea:78:25:36:
                    a9:87:3b:02:61:c2:15:b1:29:5c:8b:f2:15:23:60:
                    bf:87:f2:2f:4c:d5:07:39:95:6d:b2:b4:34:83:dd:
                    6e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7B:D4:2F:55:2D:0A:63:C9:5E:5D:C7:C3:A7:EC:B7:83:7B:A0:F8
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:18:7a:66:5e:93:52:14:e1:b4:28:11:2a:ac:b4:05:ff:42:
         91:4d:87:a2:8d:ed:b0:81:e3:28:94:55:8f:69:cd:b0:42:bc:
         aa:41:9b:1a:82:b2:03:2c:3a:6c:c0:fb:53:3d:6f:e5:b1:0c:
         a0:68:e5:36:49:3e:fb:0a:59:ae:1e:9b:40:b0:d6:13:f8:4b:
         38:78:f2:bf:bf:b0:2b:7b:d0:cf:52:27:a2:92:e8:39:01:21:
         00:98:b1:21:39:fe:a1:ce:9b:5b:00:1c:00:9b:2d:de:48:0d:
         ea:d0:48:15:af:00:fe:7f:0e:28:55:db:80:68:77:18:93:ee:
         ed:91:d0:a6:72:95:5b:15:37:df:27:ba:74:de:46:05:15:b8:
         5b:51:d0:43:61:4d:a1:fb:e6:40:02:37:26:ab:21:a0:25:c7:
         55:cc:9c:c1:eb:b2:b8:04:f4:69:41:06:5f:ad:fd:24:73:74:
         62:10:40:1b:0c:57:11:2b:85:9d:d6:6e:c0:7e:c0:de:fa:23:
         e6:0a:30:5c:53:05:f7:bc:6f:eb:e4:34:a5:01:50:81:6c:c5:
         e2:81:b4:35:e1:80:a7:25:10:33:1e:64:d2:76:3b:6a:6c:ca:
         00:0c:5d:e2:54:85:ee:c9:ae:a5:a2:a8:5b:b3:0e:d3:15:ce:
         84:55:51:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 18:34:23 2026 by rpki-client