Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          fAYF+2DH+kVETaWP7enG5q9mJB3P+6y+bWHC9OGGniQ=
Subject key identifier:   E5:22:D3:C9:8C:85:CA:5A:77:F5:E8:E7:74:99:E9:BD:F6:49:CF:47
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       0B4859E29CAE39E48B1CE158B39070D351751CEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          045C
Signing time:             Sat 01 Aug 2026 08:18:13 +0000
Manifest this update:     Sat 01 Aug 2026 08:13:13 +0000
Manifest next update:     Sun 02 Aug 2026 11:37:13 +0000
Files and hashes:         1: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          2: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: drI9wigWIbg9TtdeQOvoMkbxbvu+JKBm7VNZy/qpo6Y=)
                          3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          5: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Aug 2026 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:48:59:e2:9c:ae:39:e4:8b:1c:e1:58:b3:90:70:d3:51:75:1c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Aug  1 08:13:13 2026 GMT
            Not After : Aug  2 11:37:13 2026 GMT
        Subject: CN=E522D3C98C85CA5A77F5E8E77499E9BDF649CF47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:52:7a:23:57:bc:b5:9f:15:1e:48:58:2a:c9:
                    cc:36:05:e5:9a:3d:84:68:9a:69:48:f2:7b:9e:fb:
                    bd:15:e7:6a:62:39:53:21:b9:cf:6d:d8:06:c6:19:
                    56:17:30:3f:39:85:05:21:be:89:79:95:a8:43:75:
                    d9:a7:35:dc:d0:fb:20:ee:03:6a:73:63:6b:6a:be:
                    1b:08:30:a5:1a:36:71:5e:f6:6c:f1:42:f2:04:23:
                    a9:cf:d9:49:bf:ec:ee:c2:d5:da:ea:11:a2:ee:29:
                    a4:1a:b1:0c:50:d9:e7:c0:28:44:a3:79:ff:aa:aa:
                    31:8d:cb:be:10:26:94:4b:42:24:28:6b:68:32:ce:
                    21:f3:b6:cd:55:7d:30:54:de:a9:55:db:81:a0:43:
                    a5:84:6d:4f:dd:9a:7d:a1:c2:c0:29:12:b6:0d:c7:
                    e0:7f:98:32:7b:85:eb:07:1d:29:8f:e1:de:29:4a:
                    e5:96:ca:50:44:87:ee:f3:31:bb:1d:5d:b2:87:11:
                    c1:98:55:77:07:e2:af:1d:77:0f:48:d8:fb:5e:2f:
                    b7:38:c8:78:1c:c8:34:8d:76:ab:4a:48:02:36:49:
                    8c:a3:ff:db:e0:fb:39:29:3e:51:c4:16:7c:ba:7d:
                    84:40:f3:75:32:07:a1:79:54:70:0e:30:b7:01:8f:
                    26:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:22:D3:C9:8C:85:CA:5A:77:F5:E8:E7:74:99:E9:BD:F6:49:CF:47
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:06:f9:78:7e:0d:d2:d5:03:2d:b6:4b:4a:5b:1c:f0:e1:65:
         13:5b:00:2b:d2:17:47:61:2b:c4:f9:26:4e:f4:c2:25:74:f3:
         b1:31:5d:a9:7e:e3:61:0f:98:7e:dd:cc:b5:4a:87:c6:2b:30:
         00:4a:44:1d:2f:80:1d:84:fc:aa:9d:3d:b7:98:ee:83:d4:94:
         81:17:7d:fa:41:a0:57:3c:90:7e:84:b4:90:cf:0d:82:59:7c:
         ed:92:af:56:63:0a:96:7b:f4:f1:a8:9a:27:5b:eb:21:cb:72:
         60:8f:aa:a9:50:d3:02:f3:ef:37:24:7c:bc:27:fb:97:ee:0b:
         b1:2a:db:63:52:95:73:32:ed:b7:59:52:94:a4:97:63:b3:b0:
         b0:e4:17:19:c6:7e:5e:0a:4b:e6:7f:d3:67:27:30:58:28:d4:
         92:3e:a0:cb:15:a9:e3:9f:b3:8a:c8:e5:bc:bc:ba:8a:a6:2c:
         5d:1b:a2:f7:9d:9c:54:f0:5e:dc:bd:52:00:bc:91:61:17:7d:
         a9:c1:36:e7:7c:69:7d:56:12:8c:95:9a:00:a5:e8:ba:61:11:
         91:4e:4c:e9:5b:5c:08:15:e7:f0:d9:a3:fd:bf:09:58:57:0b:
         66:37:3e:aa:4d:5e:dd:d4:1b:a7:6e:42:64:27:a4:a7:98:cd:
         12:7a:51:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 13:36:50 2026 by rpki-client