Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          JGZR0BSoVKaTQpuggg4R9A5vh6mr4FjlIU1dI5HGwMw=
Subject key identifier:   2E:35:DF:1C:7A:83:6A:2A:92:53:5C:D9:E5:32:D8:F0:3D:76:58:03
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       4DC3F662DDDC2A748EEC3D6A55A1260842D77228
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          046D
Signing time:             Fri 14 Aug 2026 03:18:23 +0000
Manifest this update:     Fri 14 Aug 2026 03:13:23 +0000
Manifest next update:     Sat 15 Aug 2026 05:31:23 +0000
Files and hashes:         1: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          4: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: KbRvYrH9ZKZbSPYDxGghklqWBIj5PcSQKt7wsu9f6Dw=)
                          5: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c3:f6:62:dd:dc:2a:74:8e:ec:3d:6a:55:a1:26:08:42:d7:72:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Aug 14 03:13:23 2026 GMT
            Not After : Aug 15 05:31:23 2026 GMT
        Subject: CN=2E35DF1C7A836A2A92535CD9E532D8F03D765803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e9:5d:2e:71:e2:4e:e1:c6:15:fe:df:92:53:
                    a4:35:ee:38:57:c0:35:a1:6a:59:8c:72:37:64:5f:
                    88:d1:4e:3e:e5:4a:26:e7:26:fc:a4:8c:53:59:ff:
                    fc:55:35:50:66:61:b1:33:18:e4:04:20:04:bb:af:
                    df:72:f7:60:96:58:7f:b7:6b:a5:bc:a7:8c:3f:78:
                    95:6c:5e:90:24:ed:d7:51:e9:4f:2a:ac:66:06:e2:
                    95:e8:03:0a:b1:45:6f:1b:39:4a:31:4a:e6:ec:7b:
                    8f:b0:30:2e:bc:6b:9f:bc:5b:a9:85:17:89:9e:07:
                    e3:0c:ab:a3:ac:8f:2d:29:2f:b9:83:61:bf:4e:21:
                    38:c2:7c:af:3a:de:2d:22:6c:86:6e:fe:58:b7:44:
                    3f:de:48:67:74:d9:49:34:53:fe:2b:f2:41:3f:6a:
                    5b:e9:8d:50:65:2b:53:a1:5e:a7:4e:42:1e:99:5a:
                    0e:28:b9:76:18:c0:1b:20:f1:2a:6a:b3:c6:69:86:
                    7b:8d:e2:91:b7:3c:75:7c:be:d3:59:5e:47:03:c9:
                    85:a7:9a:6a:ae:09:37:18:e5:d7:c3:e8:f3:01:3f:
                    99:69:1a:a5:54:cd:74:40:32:5f:cd:51:a2:7c:ce:
                    77:79:36:10:37:92:b8:40:24:e5:f7:f2:22:9d:2d:
                    46:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:35:DF:1C:7A:83:6A:2A:92:53:5C:D9:E5:32:D8:F0:3D:76:58:03
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:2d:8b:77:fc:30:9f:30:92:36:80:54:5b:e1:eb:c8:a1:d8:
         30:6b:cf:89:98:b6:76:fa:f7:92:ac:b7:5a:b2:c1:4d:2b:e1:
         c9:9f:7c:49:b3:cf:2f:9d:9c:2b:f6:be:92:21:75:d1:2d:a8:
         eb:8b:1f:50:18:d2:c6:30:5e:3f:d9:3f:29:fd:6d:a6:e8:1e:
         2c:3b:7d:5c:f1:bf:ba:8f:c3:ee:75:87:5b:9e:8d:ca:8c:c9:
         97:08:9d:92:64:4e:ef:ae:e5:53:f2:a0:4e:6b:bc:34:fc:46:
         1b:f6:c0:3f:0e:0f:8d:24:12:cf:f2:b1:71:86:52:7a:fa:99:
         2f:a1:b6:39:2f:5a:db:6c:57:31:d2:3c:a5:89:31:fa:8a:a1:
         01:82:c2:ab:7b:0c:b0:27:9b:39:63:b9:0f:3c:f6:8b:e9:ca:
         4c:22:62:4e:4a:bd:bf:c9:f5:7e:0f:13:67:0b:ee:2a:3a:48:
         45:f4:3b:91:26:b5:83:11:27:4c:98:86:fa:3c:22:92:87:e4:
         2d:0b:48:b4:bf:34:6a:dd:4b:bb:4d:53:da:52:82:9b:c2:d9:
         c9:bd:a5:2f:f7:51:f8:0a:2f:53:55:a3:b5:09:4d:d2:da:43:
         9f:12:2b:8c:09:0b:7c:e9:ac:a2:4d:7a:48:b7:6b:4f:c1:7e:
         64:ec:6f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:30:17 2026 by rpki-client