Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          vprJNpPndYyWHkBiAi+EBReeTyEjUqlTgY9XTMB1aHU=
Subject key identifier:   72:2F:FB:09:F0:74:96:49:85:61:01:D0:DF:8F:FD:2E:EB:E5:7E:54
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       79873306F0C8F400D88F1E346687C439988628A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          03A0
Signing time:             Fri 13 Mar 2026 06:23:32 +0000
Manifest this update:     Fri 13 Mar 2026 06:18:32 +0000
Manifest next update:     Sat 14 Mar 2026 08:54:32 +0000
Files and hashes:         1: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: ufoED4Okil04Z3ALhRHgl6uYVSlSubGsU0E+iqQlaL8=)
                          2: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          4: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          5: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 08:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:87:33:06:f0:c8:f4:00:d8:8f:1e:34:66:87:c4:39:98:86:28:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Mar 13 06:18:32 2026 GMT
            Not After : Mar 14 08:54:32 2026 GMT
        Subject: CN=722FFB09F0749649856101D0DF8FFD2EEBE57E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3f:5a:7f:cb:c6:aa:8a:36:78:24:f2:68:9f:
                    91:db:21:9b:75:36:de:48:01:de:4a:ef:41:92:fa:
                    54:88:9d:b0:c7:11:18:11:bc:28:75:50:fb:8b:ff:
                    71:68:4f:99:a5:76:d6:84:bf:e9:9a:a3:43:d7:7e:
                    6a:f4:1b:7b:b5:c4:4f:6d:97:4c:55:df:01:83:70:
                    6c:19:ed:30:7d:33:1c:9e:be:86:70:43:b1:c1:5f:
                    c4:b0:dd:d8:d6:1b:8d:ee:70:98:aa:34:eb:3b:d5:
                    d4:9a:42:60:5f:2e:a4:3a:12:e7:e0:3c:9b:72:34:
                    b0:e4:dd:62:e9:55:2d:43:73:3d:fe:a6:2f:61:fd:
                    78:5c:c9:e2:c2:9e:d5:60:a9:31:91:b9:1e:2c:33:
                    2a:72:3c:c0:e9:c1:c4:0e:63:40:40:14:7b:11:01:
                    97:1f:3f:86:23:e0:11:1d:56:88:5e:4c:41:08:5c:
                    2b:86:38:b0:b6:93:a1:f5:59:86:99:12:1d:cf:4a:
                    2a:70:8d:f6:46:a8:9a:6d:53:04:07:77:62:66:e7:
                    5b:41:eb:0c:cf:4c:9b:ce:28:31:47:8e:af:27:23:
                    05:1b:a1:9a:d4:c7:cf:e3:b9:7a:34:82:95:6f:7a:
                    cf:fd:d5:5b:da:2d:76:d8:65:57:c1:ac:6e:61:69:
                    2b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2F:FB:09:F0:74:96:49:85:61:01:D0:DF:8F:FD:2E:EB:E5:7E:54
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:2b:79:4d:7e:a6:f4:92:5f:79:63:4b:89:62:82:92:25:5c:
         45:15:01:53:40:2b:d6:f0:dd:0a:31:70:82:ff:ec:c2:ae:ee:
         0b:98:92:57:a0:33:96:2f:92:5c:73:4e:32:ed:b0:5d:9f:4d:
         32:51:f2:e5:09:6e:9b:f7:44:3f:e7:e9:9e:23:43:ae:25:dd:
         90:a6:5b:08:fc:38:0d:8b:5d:0b:33:47:5d:bd:29:ad:5b:16:
         d4:4c:0c:bc:77:91:07:88:6b:75:c3:71:dd:14:04:49:ad:00:
         8f:e1:f6:2e:e4:0a:92:0b:eb:97:c6:4e:a0:95:dd:e1:df:33:
         5a:3a:59:6e:9e:a9:cd:d2:79:47:9c:3a:77:7b:f6:0b:9a:48:
         77:ef:14:71:62:43:c5:0d:61:fd:54:80:57:7e:97:c8:f2:40:
         3d:e5:86:81:94:0f:dc:4b:2a:44:b8:b0:62:a5:04:48:53:3d:
         2a:60:b5:a0:96:50:01:70:31:6e:00:6e:2c:29:9a:42:1c:fe:
         65:73:76:97:94:34:7f:86:25:72:c8:98:09:ab:51:6d:20:05:
         ac:71:b1:57:95:cb:99:8c:cb:f3:16:05:05:33:f0:78:b5:e3:
         23:d8:95:93:23:ad:3a:1c:c3:00:9a:b6:8f:38:d3:b4:7b:f5:
         4e:93:2f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:16:12 2026 by rpki-client