Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          naYzqScn5PUu17ugJxIFZecW2sS2/Z6A4yKTCm3ljkc=
Subject key identifier:   D1:71:31:05:AA:FB:80:2B:80:B2:DD:45:C5:6A:79:A0:D8:00:A7:28
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       322FEB0BE40CCE38B9495206FC72D5394EE91C10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          038B
Signing time:             Wed 25 Feb 2026 09:03:32 +0000
Manifest this update:     Wed 25 Feb 2026 08:58:32 +0000
Manifest next update:     Thu 26 Feb 2026 12:35:32 +0000
Files and hashes:         1: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          3: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          4: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          5: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: doPJ/Ubafe/FP0RXTRNaQhODuwNhtnEyAGvDCg0OYOs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Feb 2026 12:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2f:eb:0b:e4:0c:ce:38:b9:49:52:06:fc:72:d5:39:4e:e9:1c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Feb 25 08:58:32 2026 GMT
            Not After : Feb 26 12:35:32 2026 GMT
        Subject: CN=D1713105AAFB802B80B2DD45C56A79A0D800A728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:03:00:fd:7f:28:be:f6:d3:22:e4:cf:1f:b9:
                    72:8d:89:b4:ca:be:ac:99:48:a2:7d:56:93:fd:54:
                    9d:ea:a8:e0:3c:dc:05:91:1a:01:d5:e2:8c:2e:d5:
                    af:74:35:27:60:d3:8d:6f:e1:9e:ab:02:5c:78:1a:
                    cd:56:d1:af:05:fe:73:1c:21:9e:1b:d8:71:11:0f:
                    8f:7a:23:ee:db:fc:94:e6:09:48:0a:bb:2c:79:7d:
                    4e:6d:8b:ed:68:e3:0a:1f:fa:45:c4:c8:95:e9:8d:
                    5d:bf:5b:1e:b4:7c:85:e0:88:3f:96:b9:a0:a6:7d:
                    5a:ed:4d:6a:3a:98:98:dd:53:7a:97:72:72:04:34:
                    8e:e7:20:5a:9e:0f:80:13:f0:8a:59:99:3c:4c:32:
                    53:2f:db:c1:1d:64:1e:23:c6:95:6f:f2:2e:fa:8a:
                    89:d2:12:08:e0:cf:f7:43:47:fd:df:9f:58:ee:57:
                    75:cd:cf:ab:33:d1:b4:c4:97:8b:e6:3f:ce:4b:02:
                    40:7e:41:db:12:b0:ec:88:69:63:57:9e:0a:52:79:
                    ba:0c:62:29:42:91:4f:66:a5:26:4e:a8:a1:6d:c3:
                    ae:08:96:86:18:59:24:e7:63:fb:fc:96:03:54:d1:
                    6c:2e:bd:c0:5b:84:e6:7b:81:eb:15:3a:ff:e7:ce:
                    aa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:71:31:05:AA:FB:80:2B:80:B2:DD:45:C5:6A:79:A0:D8:00:A7:28
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d8:0f:9b:73:f3:e5:da:1b:fc:6d:c5:32:aa:da:31:ab:7b:
         d8:45:95:16:32:57:a9:c6:98:fa:a2:1a:5a:5b:04:87:52:92:
         ff:b4:ca:82:d2:63:c3:52:47:b9:7f:f7:32:39:df:5a:0f:5f:
         f1:8a:f3:95:d6:f8:55:6e:cd:de:3b:1a:74:fb:36:4c:be:77:
         2c:52:af:64:69:f8:52:bd:7a:64:6a:7b:f6:66:ae:70:94:96:
         dd:a5:eb:02:b0:19:34:09:51:60:87:e8:a0:12:6e:93:91:c3:
         5d:40:1b:ce:f7:33:3e:f4:59:72:03:a7:39:9a:06:71:27:15:
         6e:dc:a0:3c:ab:61:98:48:06:c5:2e:54:e7:c5:90:4a:df:b1:
         73:fc:18:45:c3:8e:f5:4e:c7:fc:9b:b6:c1:ec:52:0d:43:60:
         ce:c9:58:b0:b9:5b:32:55:7c:41:4c:13:04:47:07:ad:c3:33:
         91:0d:20:e8:20:a6:39:9a:87:fc:34:6a:73:22:f5:33:47:0d:
         e1:4d:27:32:40:16:f7:e2:cb:e9:74:b9:c7:94:0f:8a:d5:e0:
         36:f0:c1:16:88:a7:02:3b:76:e8:9d:bf:e5:1e:9c:37:72:76:
         a9:e4:c7:a6:f4:96:9e:8b:f0:08:30:92:f3:08:28:05:2a:77:
         f1:8d:fd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 25 20:05:22 2026 by rpki-client