Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          4dlz4LIEBVxP1nxj15akoZIukN9X9Iugh63H3r/VyCs=
Subject key identifier:   96:19:C9:4A:6F:8A:3A:F0:25:CD:1E:57:54:0C:D2:93:5A:98:AB:43
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       4596D0EA4EA850B8FA2140C29BFDF8A04BB91B6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          03DD
Signing time:             Tue 28 Apr 2026 02:05:01 +0000
Manifest this update:     Tue 28 Apr 2026 02:00:01 +0000
Manifest next update:     Wed 29 Apr 2026 04:26:01 +0000
Files and hashes:         1: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: b/uh5Xy2qDbgUo5ZBqcBoWDuNyY9oPdofVdrFHvaejI=)
                          4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          5: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Apr 2026 04:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:96:d0:ea:4e:a8:50:b8:fa:21:40:c2:9b:fd:f8:a0:4b:b9:1b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Apr 28 02:00:01 2026 GMT
            Not After : Apr 29 04:26:01 2026 GMT
        Subject: CN=9619C94A6F8A3AF025CD1E57540CD2935A98AB43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9d:0b:a6:2e:eb:f9:f4:36:21:e4:38:42:9f:
                    48:f9:db:2d:dd:f2:d4:f0:6b:f7:54:ae:a5:ad:0a:
                    fd:66:03:96:05:90:d9:52:0a:45:c9:84:c1:7b:9f:
                    e1:21:08:fe:e8:57:de:d2:b0:71:0c:21:90:b5:09:
                    42:5c:b9:a5:54:55:6d:fe:c7:89:2d:c2:92:04:21:
                    9e:68:a4:6f:69:19:c8:40:ec:3e:4d:9f:7a:4f:92:
                    f8:90:40:f8:b6:2a:ae:3c:3a:b0:a7:d9:ad:07:01:
                    26:a6:1e:8e:9b:8b:8b:ee:99:c6:b6:e6:e0:d9:3e:
                    ae:61:1a:fa:70:0c:5e:0d:2a:61:92:c4:14:79:ed:
                    f5:88:4b:e1:62:15:67:ca:ec:92:23:48:2f:c3:23:
                    1d:b8:4a:58:39:6b:f3:e0:63:fc:5e:af:c9:c0:35:
                    92:c6:9f:b1:f3:80:b6:00:10:45:6d:15:b7:43:c8:
                    f0:25:51:57:aa:a9:ac:f8:3b:2a:4f:37:df:6e:56:
                    42:67:d3:9d:af:c3:7c:85:a6:9f:fb:fb:de:94:51:
                    3a:d0:37:75:74:02:9d:20:3b:f6:00:d0:16:f6:55:
                    04:ec:8e:ef:c3:93:91:68:f8:5a:49:16:4b:25:cb:
                    df:a0:ab:8a:d8:84:4b:9c:f8:22:d8:9e:ae:4c:7d:
                    1a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:19:C9:4A:6F:8A:3A:F0:25:CD:1E:57:54:0C:D2:93:5A:98:AB:43
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:30:e6:50:33:4b:5c:8b:21:09:b4:1f:ed:23:c6:54:11:ce:
         63:f1:26:d2:b9:d4:59:52:dd:8c:7c:72:83:17:3a:3f:93:03:
         92:18:fd:0e:96:5a:54:cf:12:f9:98:e8:8c:9b:59:63:da:e3:
         57:46:ce:82:d9:b1:4f:ed:e2:8f:ab:a2:97:34:a9:06:0b:7a:
         19:29:55:59:39:4b:4e:85:f8:82:94:6c:ad:4e:64:1d:90:8f:
         ca:b3:31:f5:c2:f7:5d:6c:11:10:0c:e7:57:ab:9a:a2:08:af:
         76:ed:cc:ce:49:81:36:71:26:1f:de:de:6a:8e:ed:ac:ba:d2:
         d6:2b:e1:2f:97:eb:83:7d:81:a6:3b:d2:aa:1c:c9:56:6f:dc:
         01:3e:11:2d:f5:16:32:99:03:ea:5a:20:72:24:52:91:4d:4b:
         5b:60:99:60:66:8e:97:84:fa:88:8e:f8:ba:0c:3c:c1:f3:86:
         ea:f5:10:ec:da:2e:29:0b:5a:ec:b5:b2:6b:b9:73:8c:3b:35:
         14:dd:d0:d0:36:b5:2f:1b:02:b6:99:6a:09:16:a1:ce:10:7b:
         a2:36:35:67:ea:d3:83:3c:bc:fd:e1:5e:20:0f:58:0a:41:1d:
         03:6f:b4:e8:d5:c3:af:3d:d6:2b:28:25:87:25:59:16:d0:cb:
         8c:89:63:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 15:30:42 2026 by rpki-client