Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          rIhbeCsz+n6zi1bLoOMhYgARTznrYuYXWJb/eD1H+Z0=
Subject key identifier:   88:F7:0E:B9:64:16:C8:11:BC:96:D1:A3:3A:13:9A:A8:EB:B9:FA:DB
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       215E9CBC9B1FAEB264BF1F473507DBC29893AA72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          03CA
Signing time:             Tue 14 Apr 2026 00:20:01 +0000
Manifest this update:     Tue 14 Apr 2026 00:15:01 +0000
Manifest next update:     Wed 15 Apr 2026 01:05:01 +0000
Files and hashes:         1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          2: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          3: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          4: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: o7zUqXv76lKr8lr/oCQMas2P5LPoV7zI87jUpUKnvG4=)
                          5: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 Apr 2026 01:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5e:9c:bc:9b:1f:ae:b2:64:bf:1f:47:35:07:db:c2:98:93:aa:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Apr 14 00:15:01 2026 GMT
            Not After : Apr 15 01:05:01 2026 GMT
        Subject: CN=88F70EB96416C811BC96D1A33A139AA8EBB9FADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:09:4c:91:2d:63:71:bb:f2:21:48:ab:7f:fc:
                    f4:ec:63:66:6d:c9:de:4b:0b:72:29:27:f3:ad:e3:
                    10:f9:07:5d:e4:03:1d:d3:e0:9d:94:ed:fe:a8:5c:
                    00:1c:86:02:90:e2:d2:e4:0f:17:a9:11:71:0d:cc:
                    8f:ac:bf:3b:52:4c:1a:8e:ad:2e:22:d8:9d:18:50:
                    e6:d1:f6:c7:bb:63:64:ae:e4:3c:60:6d:40:73:78:
                    98:db:b3:e8:8f:8a:7d:b9:b4:7c:58:27:08:dd:fd:
                    8f:e0:86:01:93:90:bd:9d:5e:19:20:bf:fc:86:5d:
                    3f:90:fb:58:e5:6d:2f:5e:bc:24:4a:dd:dd:e9:08:
                    09:14:c5:ea:97:75:c6:30:46:09:3b:a0:54:07:0c:
                    7b:dc:18:a1:ee:cb:dc:c2:7d:bd:11:11:e3:e9:bf:
                    2a:97:2b:9f:94:6a:6d:19:76:13:4c:72:4d:21:3e:
                    9b:8e:1c:c5:78:dc:e4:6e:3e:44:f7:4c:3f:25:d8:
                    f5:ba:02:95:a1:ee:bd:12:95:c9:22:7e:02:2b:be:
                    a8:64:71:12:66:e5:79:66:ba:c3:ac:94:0c:b8:cf:
                    80:57:18:12:cc:4d:3c:bf:24:83:a9:e8:8f:95:b7:
                    e9:29:ce:a7:95:cf:ab:c0:d0:0c:2a:d4:2c:9a:74:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F7:0E:B9:64:16:C8:11:BC:96:D1:A3:3A:13:9A:A8:EB:B9:FA:DB
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:24:99:a6:e1:4e:37:46:fd:53:82:d4:f9:98:09:37:a1:47:
         f2:30:49:34:d9:94:70:99:61:62:43:7c:d3:4a:d9:26:25:df:
         57:45:31:7e:a1:bf:e7:83:b2:7d:04:e9:d3:93:75:c5:af:ca:
         e7:11:22:b2:8e:32:56:49:33:ac:a0:91:2a:f5:3d:1e:a7:b5:
         e6:ac:d3:a7:98:a3:37:aa:88:1f:20:62:61:a4:25:04:91:17:
         28:63:13:2f:ee:4c:29:80:89:b1:6e:3e:a6:06:2c:3e:2a:6c:
         81:fc:c3:4f:d6:ba:50:99:e3:1d:ca:65:c6:2a:f7:a7:c4:c9:
         38:c6:8b:6d:40:ed:f4:7d:51:83:93:af:a9:13:93:32:97:94:
         46:45:49:00:e3:b1:8a:0a:0e:ac:99:4c:91:2d:ef:76:cb:81:
         e2:c4:95:b5:03:88:be:57:d7:fa:90:ff:0d:60:92:6a:db:be:
         b0:c3:1b:51:af:6e:93:d9:b5:f4:48:eb:94:de:99:c0:41:f2:
         7f:bb:5d:48:e3:ee:3d:cd:aa:bc:9e:f6:e2:07:04:89:7b:e0:
         2d:a7:70:71:9a:e2:7a:64:ec:f3:ba:f2:74:49:3f:90:02:db:
         b1:97:fa:8a:7b:6e:66:0c:54:61:61:4c:ae:46:bd:0d:63:d0:
         79:fe:b3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 16:19:10 2026 by rpki-client