Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          QHwVgGH2DN8WuFLnmEuVQSh+GLrhExJUIzelX2ZwSxw=
Subject key identifier:   73:1A:84:61:98:FF:19:E7:4A:22:ED:2B:9D:BF:02:D6:88:BC:62:2F
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       0F3DD17EDCF234F60C564D43E0FE218009A9D6AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          0464
Signing time:             Fri 07 Aug 2026 09:28:13 +0000
Manifest this update:     Fri 07 Aug 2026 09:23:13 +0000
Manifest next update:     Sat 08 Aug 2026 10:48:13 +0000
Files and hashes:         1: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          2: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: dyjTYDxRa4ERpMNFwWV1oTHtZheBSoA5S8k0aLdXTlE=)
                          3: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          4: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          5: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Aug 2026 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3d:d1:7e:dc:f2:34:f6:0c:56:4d:43:e0:fe:21:80:09:a9:d6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Aug  7 09:23:13 2026 GMT
            Not After : Aug  8 10:48:13 2026 GMT
        Subject: CN=731A846198FF19E74A22ED2B9DBF02D688BC622F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:95:7b:03:43:4e:18:05:05:6c:4f:b5:86:
                    ff:6f:9a:b1:a2:83:5a:42:9d:af:19:b7:11:2e:7c:
                    60:63:84:23:3c:5b:99:b8:3a:30:8b:75:46:d3:e9:
                    f6:f9:24:b8:42:8b:ac:b3:5f:cb:14:e9:4d:05:7f:
                    f2:c9:71:2f:f1:9d:70:be:f1:8d:32:32:28:81:b1:
                    0d:90:71:6f:83:0d:17:42:e2:cb:7f:e7:18:ef:4f:
                    10:0a:77:57:8b:1c:4f:5b:2c:35:92:19:d1:f6:fa:
                    8c:f4:d4:d2:90:2c:30:f1:7d:48:59:7a:2f:1e:aa:
                    9e:af:d5:66:d2:06:d8:b7:ec:eb:f1:4e:84:68:47:
                    0c:26:a2:37:ef:98:da:6b:1d:2f:c0:e6:da:03:c2:
                    9c:d6:e3:89:22:2a:08:e0:51:99:42:f3:af:d1:3e:
                    59:68:60:0d:71:de:98:71:47:3c:ce:cd:cf:c7:d6:
                    12:d4:4a:12:d8:23:4a:81:58:6d:fb:be:9e:a7:5f:
                    e0:8f:01:ae:0c:b5:b9:c9:fb:18:df:22:92:b1:ff:
                    bd:37:90:f5:1c:71:38:be:f9:ca:8c:f7:c8:4d:be:
                    a3:80:49:af:72:65:fa:87:75:69:9e:3d:e0:f4:5a:
                    51:27:39:19:af:5a:27:d1:ac:c2:ce:d6:8f:a9:1c:
                    c0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1A:84:61:98:FF:19:E7:4A:22:ED:2B:9D:BF:02:D6:88:BC:62:2F
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:03:93:75:54:da:f1:65:31:80:09:3c:e6:aa:be:c5:6b:9e:
         ef:66:61:12:0a:cc:50:21:5c:d2:b4:79:76:75:7a:c5:28:ad:
         62:4d:5e:35:4f:dc:f5:5d:f8:cf:70:5d:5f:7d:23:5a:01:54:
         91:01:12:d6:2e:35:e8:82:92:1c:72:fb:62:6b:4d:dd:57:5c:
         08:e4:cb:58:b7:26:6f:44:84:9c:cf:0a:14:ee:69:11:3c:f0:
         9a:1c:88:0c:86:70:f7:19:0e:d2:c9:6c:15:3f:12:b1:fe:ac:
         30:fb:e6:14:bc:49:89:ac:5a:63:ad:d5:d9:ea:6a:04:d9:4b:
         d9:ec:df:84:41:fa:ee:91:a1:4b:aa:40:87:69:4e:47:79:fd:
         cf:34:50:1b:fc:87:44:c5:00:9f:d5:68:2b:98:b1:ac:50:36:
         68:22:eb:17:2f:99:18:02:e5:a7:36:46:12:de:cb:d4:30:b0:
         f3:5a:bb:8a:8b:fc:29:b6:db:23:5d:d9:65:f6:66:ac:fb:26:
         01:55:b7:56:d6:cb:80:39:8f:21:bc:80:85:ed:ee:15:c0:52:
         2d:71:5d:57:ed:af:e9:ca:ef:41:5d:6f:d9:2d:9f:33:14:29:
         dd:37:5c:e9:74:13:af:a5:d2:ba:dd:2a:c6:06:12:24:43:8d:
         1b:68:ea:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 14:37:06 2026 by rpki-client