Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          vL4qaSvcvd8FFwEwlM8/mCjjyTEZ3lzGG/BHGJf1LWU=
Subject key identifier:   63:28:87:D5:5B:7F:8B:8B:13:88:AF:3E:8C:F1:EE:DE:FC:9A:9C:79
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       75FB4686A7B06FAD9D1D1386855D5960550AAFC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          0223
Signing time:             Mon 02 Jun 2025 10:59:59 +0000
Manifest this update:     Mon 02 Jun 2025 10:54:59 +0000
Manifest next update:     Tue 03 Jun 2025 12:19:59 +0000
Files and hashes:         1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: 1C8fIKlQUnAeCmyoK3V2NdUgsW/0q5NrpzLZYBb5TGM=)
                          2: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: bKin2T+09B2otPiVRauct4MH8TqgwAQ6X70bPrPHLA4=)
                          3: AS198136.asa (hash: W+U8FE8wW4IM5Quak0Mq8eROawTLthMCIEUtXh+wJqE=)
                          4: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: aHQLak9N9Oms5rgKvpLigAh2LZdfLoi6boC6n7PKDU4=)
                          5: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Jun 2025 12:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fb:46:86:a7:b0:6f:ad:9d:1d:13:86:85:5d:59:60:55:0a:af:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Jun  2 10:54:59 2025 GMT
            Not After : Jun  3 12:19:59 2025 GMT
        Subject: CN=632887D55B7F8B8B1388AF3E8CF1EEDEFC9A9C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:03:bb:e7:79:93:e5:41:6a:9c:87:c1:06:
                    22:2d:38:d7:6d:8a:b8:a4:a6:bf:2d:d9:cf:ce:32:
                    d6:57:3a:c1:bf:6a:95:2b:45:10:54:e6:4f:f1:39:
                    36:8d:11:ae:9a:50:f3:46:2a:01:92:56:d5:42:4b:
                    d2:fe:3b:d8:bb:a1:82:0b:11:ad:23:73:20:69:30:
                    0d:98:6a:a0:65:a3:47:db:67:fa:71:36:ce:14:c9:
                    71:bd:38:a7:79:25:4d:82:ea:4d:d6:60:90:18:07:
                    e7:42:0b:66:a8:fa:41:24:69:c9:53:4d:72:83:2e:
                    36:f3:85:b2:e7:18:02:44:6d:09:c6:6b:ed:86:74:
                    b1:12:19:5b:fa:cd:f5:15:ac:b5:2e:a1:c7:62:3b:
                    9d:79:c4:cf:f4:02:fb:c8:b7:b9:96:55:6c:05:eb:
                    48:3b:75:0c:6a:77:e3:6e:ca:08:00:f5:43:44:29:
                    bf:5f:95:dd:ef:78:4a:3b:79:8f:6a:6a:8f:87:79:
                    f3:22:26:5a:8b:48:df:19:62:cb:9b:b4:9a:a2:3f:
                    9d:1b:1d:d2:69:f0:14:c9:df:19:6c:a3:a1:70:73:
                    b5:23:b6:2e:3e:54:65:0e:a4:0f:d8:bf:6f:46:d3:
                    3d:88:97:97:4d:4d:fd:86:72:1a:ba:7f:dd:de:ab:
                    ca:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:28:87:D5:5B:7F:8B:8B:13:88:AF:3E:8C:F1:EE:DE:FC:9A:9C:79
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:07:15:64:a6:a1:21:26:36:ce:10:40:f6:7a:73:e9:4d:ab:
         94:4e:79:17:2c:6f:72:3f:0d:28:43:55:55:51:ee:d9:42:ac:
         2e:45:99:43:5a:ba:f2:0d:80:4a:2b:9e:4c:19:34:a7:23:45:
         c0:f2:aa:88:b1:93:be:43:d7:75:c9:b9:b5:77:f6:d4:98:9d:
         8c:6e:4f:ee:95:2c:91:5e:af:8c:a8:af:2d:15:05:69:2b:dd:
         22:6f:c7:2b:63:66:3a:cd:87:aa:cb:2c:0a:3f:5b:1b:f3:95:
         90:a0:99:c1:3a:ec:ca:60:34:fe:08:aa:7a:bb:1e:a2:54:b5:
         89:5e:c8:13:cf:00:ee:04:80:55:a8:16:1e:7e:d7:5e:00:3b:
         52:c4:d8:ad:3d:8a:cb:7b:2e:6a:d9:a2:db:24:ed:9a:b9:dd:
         15:5c:35:01:13:9d:8c:22:13:2c:58:83:75:91:c0:3f:bb:fe:
         45:bc:a4:b4:68:a0:c9:2a:2d:a4:5f:f9:cb:3c:95:8e:73:89:
         26:c8:95:0e:a0:0c:e7:7a:1e:8a:f2:bc:78:d7:10:6a:f4:50:
         36:0b:07:21:da:ac:71:10:40:f7:40:00:55:8d:d9:e4:34:9e:
         eb:af:0e:fa:12:be:4e:56:44:df:5e:e1:b1:ae:8d:94:a2:51:
         f3:c6:a2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 17:04:12 2025 by rpki-client