Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          MHZJz9zN1slZ0j1w66AT/OXOUdI7WAw3qApjoYSdxPw=
Subject key identifier:   C4:9B:C3:4C:B9:B7:84:8E:1D:79:F7:A5:4B:02:F8:7B:93:62:95:7C
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       11BA4DA35421A185949966300D4A9719F16BAA1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          03AD
Signing time:             Mon 23 Mar 2026 00:23:32 +0000
Manifest this update:     Mon 23 Mar 2026 00:18:32 +0000
Manifest next update:     Tue 24 Mar 2026 03:41:32 +0000
Files and hashes:         1: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          2: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          4: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: Q0lWlnXYNtFrYJgcvVT/AWb0kOjeP+Syd0txmm1KvOc=)
                          5: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 24 Mar 2026 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ba:4d:a3:54:21:a1:85:94:99:66:30:0d:4a:97:19:f1:6b:aa:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Mar 23 00:18:32 2026 GMT
            Not After : Mar 24 03:41:32 2026 GMT
        Subject: CN=C49BC34CB9B7848E1D79F7A54B02F87B9362957C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:82:29:e7:75:ed:75:fc:cf:9b:2f:9a:25:5e:
                    c9:7b:2d:6c:82:9a:e0:18:67:27:4d:19:bf:d6:12:
                    71:5c:6c:5c:36:cd:87:31:ed:4f:94:e8:95:48:34:
                    aa:db:51:a0:52:21:e0:3c:5c:f6:e7:cd:e1:d7:a5:
                    f7:e1:fc:ba:ba:5a:25:10:5d:bd:46:95:02:46:85:
                    9f:da:49:bf:cf:c6:bc:68:59:84:98:53:4b:f7:30:
                    9c:69:ea:68:73:a1:fe:54:53:76:2e:e4:5f:6d:6d:
                    ab:3a:66:f5:40:8c:a8:58:e7:17:58:f0:1b:07:f7:
                    5e:f4:3f:6a:f1:cb:1b:83:72:a4:df:66:fb:b8:26:
                    af:a7:73:77:64:89:f4:2a:d7:af:d4:81:7b:c3:37:
                    ca:5d:81:07:d7:62:ff:28:b1:63:34:fd:64:2d:2d:
                    23:2e:01:85:9e:df:aa:90:22:b5:88:1c:81:8f:f7:
                    ed:cd:ea:9c:10:11:85:d7:6f:73:b8:a5:4e:21:64:
                    81:6f:69:a9:a9:f1:49:f3:85:22:c8:b3:bf:a0:f2:
                    86:2a:ee:82:f9:0a:bc:1f:6d:38:50:82:fb:db:76:
                    8c:b2:75:e3:0a:b1:63:c3:7c:08:54:20:04:6f:e4:
                    61:5a:10:a4:5e:7b:7f:78:ad:2c:08:34:29:6b:a8:
                    ea:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9B:C3:4C:B9:B7:84:8E:1D:79:F7:A5:4B:02:F8:7B:93:62:95:7C
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:94:28:7a:cc:48:82:eb:57:4b:4d:c3:e1:7c:32:8d:bd:5f:
         e7:6e:9f:ca:9a:f5:03:ce:53:63:16:f4:7b:5a:ab:b1:35:7e:
         cf:34:fc:d4:a6:72:97:a7:4b:e7:97:cc:cd:c8:11:b9:98:29:
         45:1a:96:08:e1:67:9a:de:48:8b:98:35:9f:4c:7d:bc:af:8f:
         4f:48:f7:63:0f:d4:2b:43:33:79:f1:c3:7d:2f:71:0c:e1:f7:
         5e:c7:e3:82:f6:d7:91:bc:52:b3:de:ce:7a:ce:5b:35:3a:6b:
         cd:b8:8d:a9:20:5d:50:c2:c4:9f:ae:7c:a5:76:1b:a3:de:7b:
         15:c6:6d:ae:56:29:cf:f1:67:8b:5a:cb:79:47:4a:d8:22:da:
         06:07:42:76:6b:6f:bb:31:6f:d3:78:05:09:db:0e:e5:e1:77:
         66:1a:af:f3:bb:db:ac:88:68:ef:43:e5:48:b4:03:71:28:a1:
         51:f7:4b:9b:7a:ec:5a:71:32:41:3d:2c:0d:cd:75:0a:8b:a7:
         f3:35:99:cf:11:bf:e5:04:29:ad:56:b1:54:b6:b3:17:cd:65:
         9a:e9:73:b2:21:ff:8c:ad:d2:0f:c9:67:96:85:86:e2:8a:87:
         7a:08:c8:c7:f6:22:bd:de:9f:4b:8e:99:4e:29:73:df:9d:e7:
         6e:e5:20:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 10:14:46 2026 by rpki-client