Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          p1gDBNqERnFAMY6PRS74xmH7Ya07cqgj6wLIe+fVjHk=
Subject key identifier:   B9:55:C6:F9:9C:5E:9A:AF:48:F6:1D:65:50:D9:B5:3E:C8:80:95:10
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       3B18287CE29E713012A51E43E1F2D9433390499B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          0398
Signing time:             Sat 07 Mar 2026 06:18:32 +0000
Manifest this update:     Sat 07 Mar 2026 06:13:32 +0000
Manifest next update:     Sun 08 Mar 2026 09:05:32 +0000
Files and hashes:         1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          2: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: Gz1NwupA93eB08TQh2+33O8t6hAr2QI/TJLJP6uLRmc=)
                          3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          5: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 09:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:18:28:7c:e2:9e:71:30:12:a5:1e:43:e1:f2:d9:43:33:90:49:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Mar  7 06:13:32 2026 GMT
            Not After : Mar  8 09:05:32 2026 GMT
        Subject: CN=B955C6F99C5E9AAF48F61D6550D9B53EC8809510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:14:55:15:c9:f3:50:19:3c:4f:4f:96:60:0d:
                    9e:69:f6:49:86:56:a1:62:1c:16:db:76:cc:c5:0a:
                    6e:39:af:4d:87:04:35:35:3e:85:14:08:6b:70:77:
                    0a:dd:1b:67:35:ce:c5:a5:02:b9:61:bb:af:ce:66:
                    9c:3a:18:d3:a7:59:64:1c:39:d1:e9:96:07:ec:be:
                    ba:c1:91:1d:aa:bc:b9:69:7f:9a:d3:fa:c6:b5:fa:
                    70:19:1c:26:6c:48:00:3c:d1:60:3c:e0:27:66:7d:
                    6f:34:8e:10:92:dd:6a:8e:f5:25:58:ee:18:ba:56:
                    93:ec:54:dd:7b:56:02:79:e3:92:3a:b4:b9:d6:7a:
                    c1:a8:2b:91:dd:ee:8f:5d:00:0d:d3:20:9c:82:83:
                    76:f6:32:09:5b:cb:17:6a:00:e3:47:60:72:1d:bd:
                    95:d5:00:28:f3:63:18:07:7a:fa:5a:43:a4:82:80:
                    9b:91:f6:14:ff:e5:c9:b8:80:55:67:bc:d3:da:53:
                    f1:a8:0a:8e:78:f7:f9:df:db:80:e6:cf:64:3a:e6:
                    15:bc:9c:df:a2:96:65:98:bf:8b:dd:f9:45:51:8a:
                    bc:5a:68:c8:2e:c6:29:2a:68:f3:4c:bd:d3:28:29:
                    3d:7a:bc:a7:25:de:0a:d8:6a:3b:f2:43:c8:b5:10:
                    b9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:55:C6:F9:9C:5E:9A:AF:48:F6:1D:65:50:D9:B5:3E:C8:80:95:10
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:cd:61:dc:37:02:c9:14:1d:b0:90:ab:b2:7b:e6:e4:19:13:
         33:a1:7c:69:bf:19:f3:e9:2a:89:6e:f2:45:81:1a:4d:de:e9:
         68:9c:25:d4:41:a5:52:4c:1e:cd:63:6b:2c:ff:e4:98:86:ef:
         f0:9b:3d:e9:fd:88:c3:c3:8d:0b:a2:71:b6:a7:36:12:79:93:
         9e:6f:27:21:f4:ef:3d:fa:e1:09:77:42:3d:4d:80:a7:f9:79:
         f4:2a:37:b4:95:7d:9e:57:17:e9:ed:a7:9e:54:ef:79:d0:32:
         9f:18:4f:4e:00:71:e6:ba:60:2a:a1:99:c4:0e:fb:2a:8e:8a:
         5f:5e:51:a5:39:75:53:e7:0d:56:4f:b1:ad:83:5b:08:34:62:
         74:0c:86:cb:ad:bd:2c:ec:a4:1d:3d:7f:be:22:81:52:0f:6a:
         ee:23:0f:bf:88:05:4f:3f:66:f9:b5:1d:5b:6c:cd:0b:4b:19:
         c5:8e:23:e2:5c:1f:ea:cb:d6:e2:92:30:77:fa:bb:94:58:6a:
         bc:86:19:d3:5e:0a:cf:27:6d:d9:15:3f:ea:87:3a:c3:20:e6:
         f3:6e:ca:27:aa:a8:c8:70:7b:43:8a:c7:d9:35:15:cb:c4:91:
         91:a1:95:61:1a:02:0a:c8:8a:6e:1b:80:a7:a8:46:b0:a5:52:
         bb:c4:e3:92
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUOxgofOKecTASpR5D4fLZQzOQSZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl
MmE1YmIzODAeFw0yNjAzMDcwNjEzMzJaFw0yNjAzMDgwOTA1MzJaMDMxMTAvBgNV
BAMTKEI5NTVDNkY5OUM1RTlBQUY0OEY2MUQ2NTUwRDlCNTNFQzg4MDk1MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFFUVyfNQGTxPT5ZgDZ5p9kmG
VqFiHBbbdszFCm45r02HBDU1PoUUCGtwdwrdG2c1zsWlArlhu6/OZpw6GNOnWWQc
OdHplgfsvrrBkR2qvLlpf5rT+sa1+nAZHCZsSAA80WA84CdmfW80jhCS3WqO9SVY
7hi6VpPsVN17VgJ545I6tLnWesGoK5Hd7o9dAA3TIJyCg3b2MglbyxdqAONHYHId
vZXVACjzYxgHevpaQ6SCgJuR9hT/5cm4gFVnvNPaU/GoCo549/nf24Dmz2Q65hW8
nN+ilmWYv4vd+UVRirxaaMguxikqaPNMvdMoKT16vKcl3grYajvyQ8i1ELnfAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUuVXG+Zxemq9I9h1lUNm1PsiAlRAwHwYDVR0j
BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0
OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL
bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y
ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE
N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJM1h3DcCyRQdsJCrsnvm
5BkTM6F8ab8Z8+kqiW7yRYEaTd7paJwl1EGlUkwezWNrLP/kmIbv8Js96f2Iw8ON
C6Jxtqc2EnmTnm8nIfTvPfrhCXdCPU2Ap/l59Co3tJV9nlcX6e2nnlTvedAynxhP
TgBx5rpgKqGZxA77Ko6KX15RpTl1U+cNVk+xrYNbCDRidAyGy629LOykHT1/viKB
Ug9q7iMPv4gFTz9m+bUdW2zNC0sZxY4j4lwf6svW4pIwd/q7lFhqvIYZ014Kzydt
2RU/6oc6wyDm827KJ6qoyHB7Q4rH2TUVy8SRkaGVYRoCCsiKbhuAp6hGsKVSu8Tj
kg==
-----END CERTIFICATE-----
Generated at Sat Mar 7 20:38:09 2026 by rpki-client