Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          8Vv9nPoqdSykd94yxyKCJp3ynB10UQXwBh+D3XrZoSQ=
Subject key identifier:   86:0E:05:DB:92:3A:47:0A:99:28:86:74:5D:99:1F:63:A1:3E:35:10
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       3DFBAF2467E3148A436D5D5CED6454698F739BE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          03A2
Signing time:             Sat 14 Mar 2026 18:28:32 +0000
Manifest this update:     Sat 14 Mar 2026 18:23:32 +0000
Manifest next update:     Sun 15 Mar 2026 20:42:32 +0000
Files and hashes:         1: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          4: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          5: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: itz/72r1J0MEhKWVhzctjS6+jZirhqobdrX+UDgyMlE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 20:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:fb:af:24:67:e3:14:8a:43:6d:5d:5c:ed:64:54:69:8f:73:9b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Mar 14 18:23:32 2026 GMT
            Not After : Mar 15 20:42:32 2026 GMT
        Subject: CN=860E05DB923A470A992886745D991F63A13E3510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:d3:e2:30:e9:49:76:7b:a5:24:14:63:be:
                    ca:e9:9e:02:9b:b2:df:a9:8d:4d:16:a1:6e:0f:fe:
                    9f:c8:e4:c6:76:50:7b:08:3c:88:49:20:35:dc:bb:
                    9b:82:19:5b:9a:6b:8f:48:6c:4e:f1:43:ac:de:3b:
                    c2:3b:85:0b:78:5c:1c:18:ca:27:22:14:66:ac:28:
                    34:0a:d0:0a:b6:52:c5:7f:e6:c7:47:ee:96:99:26:
                    84:97:f9:63:83:eb:ab:a1:f0:fc:dd:df:37:82:55:
                    70:98:09:ff:0a:03:26:14:6f:fc:59:34:19:da:15:
                    52:a4:59:c1:06:6a:90:f1:41:0a:a4:60:9d:8d:f4:
                    91:a7:fe:cd:6e:24:db:ed:b0:e7:8f:5b:40:c0:86:
                    c4:22:f8:8b:7b:8f:c1:d2:db:f3:1a:3f:1e:9f:3d:
                    9c:2f:fb:11:71:08:76:50:40:b5:a5:88:bd:9f:7f:
                    ec:54:e8:b8:a5:58:67:79:6d:f0:9d:7c:7a:49:43:
                    ac:8d:b6:c3:46:a2:17:d5:7f:46:29:25:df:4e:35:
                    cf:96:dc:de:6a:1d:0d:47:76:fc:dd:81:b2:9a:9f:
                    ae:47:f2:a6:94:1b:d8:56:ce:0b:e8:c5:33:6e:c8:
                    f7:6e:64:01:1c:7b:1c:6c:cd:8c:66:ea:f3:95:a5:
                    05:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0E:05:DB:92:3A:47:0A:99:28:86:74:5D:99:1F:63:A1:3E:35:10
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:8c:bd:13:a7:37:02:42:16:19:c2:a0:2f:b4:d4:64:c3:f9:
         31:34:f8:b4:be:c7:7e:a9:8a:1d:b3:56:cf:e8:36:0a:17:38:
         47:f4:52:a7:0c:12:62:22:97:76:df:57:e9:d5:06:cc:99:dd:
         9c:37:90:32:93:30:da:9c:1b:a3:e8:be:d4:e4:c9:b5:33:44:
         59:56:ff:fc:33:5e:8c:ce:e6:63:72:33:25:5a:ba:f6:75:5d:
         79:3c:79:6c:e5:9e:6f:e4:88:50:85:99:3e:ac:77:ea:f4:01:
         8f:7e:35:77:bc:4f:df:c1:48:00:86:bb:5a:be:22:8a:2c:63:
         b9:4c:72:b4:cb:32:95:56:71:a3:f1:20:5e:75:0c:5d:47:62:
         5e:15:23:b8:bc:23:9d:bd:f5:98:89:0d:0e:34:1e:11:13:49:
         7d:ea:1a:2d:da:54:94:dd:e1:99:48:a3:68:7e:91:fe:24:8c:
         0b:89:b5:20:c6:cc:15:3e:28:e0:d9:0e:cf:14:89:04:b7:96:
         b2:95:cc:3a:6f:36:85:1b:35:8d:1f:27:21:aa:92:df:05:56:
         d6:fe:16:68:79:23:ab:54:2d:62:31:f9:9d:2d:e0:59:fd:f4:
         1c:95:47:ee:c6:54:ee:f2:41:74:fc:73:e7:06:09:4c:7c:bc:
         47:ad:1b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 23:52:00 2026 by rpki-client