Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          qQi2xZwzK/LCt4qyaWKEUC1oNVSgVp9Puewvtd5SDXI=
Subject key identifier:   F4:82:80:C1:D5:D8:D9:4A:C3:BB:5E:0D:E4:71:BC:53:83:3B:66:33
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       5ACD9F0E39D85611469BC5E271FDDE6D2B1AAC1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          044C
Signing time:             Mon 20 Jul 2026 06:38:13 +0000
Manifest this update:     Mon 20 Jul 2026 06:33:13 +0000
Manifest next update:     Tue 21 Jul 2026 07:06:13 +0000
Files and hashes:         1: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          2: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          4: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: 2y5/DYFNdgpoKy/QASUwH/Us/uLyVEdaWbzOs9PpkV8=)
                          5: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 07:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:cd:9f:0e:39:d8:56:11:46:9b:c5:e2:71:fd:de:6d:2b:1a:ac:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Jul 20 06:33:13 2026 GMT
            Not After : Jul 21 07:06:13 2026 GMT
        Subject: CN=F48280C1D5D8D94AC3BB5E0DE471BC53833B6633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:56:bb:76:25:3d:60:d5:62:e8:a8:42:a8:9a:
                    e8:86:e4:e9:fe:14:79:05:fd:90:56:e6:4c:7e:f1:
                    75:0e:a1:f4:e1:6b:66:f1:e5:49:61:6a:98:a4:08:
                    af:4b:de:60:9a:06:ad:ec:60:27:cd:d5:77:cf:45:
                    31:00:26:53:e5:73:14:a9:b6:b4:00:2c:05:7b:1c:
                    5c:4d:33:91:f4:b6:fb:42:1b:6a:e9:b9:5c:13:6a:
                    2c:ac:08:2a:9b:be:e7:e7:01:e0:ae:71:1c:5e:e1:
                    b3:f9:a2:ff:27:ec:0d:15:58:c0:83:ca:4d:b9:34:
                    5a:77:6d:8a:46:ab:e8:75:55:65:85:2e:85:7a:d1:
                    6d:0d:8d:09:f7:fe:4d:be:c2:15:73:50:9a:09:08:
                    5f:97:75:16:09:26:fc:ed:b4:a4:00:bf:7b:84:a6:
                    de:db:1f:03:50:e5:16:32:9a:de:6a:b0:db:37:6e:
                    56:cf:e0:07:03:d5:f0:67:0d:eb:a4:1d:04:33:1f:
                    ae:1d:1d:bd:5f:1a:89:84:56:6b:bb:cf:08:06:ac:
                    04:46:3e:96:d3:89:71:32:b5:88:33:33:a2:ad:29:
                    99:ad:05:74:c1:03:eb:6a:92:4b:3b:40:99:36:35:
                    65:5a:b9:32:bf:cc:15:97:ce:6e:fa:49:b9:3b:56:
                    51:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:82:80:C1:D5:D8:D9:4A:C3:BB:5E:0D:E4:71:BC:53:83:3B:66:33
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4b:c6:2a:44:3e:de:b2:ce:b7:bb:3d:8d:77:17:22:42:4b:
         60:bf:01:71:fe:0a:37:1b:c6:f3:e5:1e:6b:04:a0:2c:0f:df:
         1d:d6:e0:70:fe:0b:43:50:14:7c:c9:e1:10:07:3e:ce:d8:ad:
         9c:4d:c2:07:ae:dc:65:53:45:2d:16:bc:31:e8:6f:d2:25:85:
         0c:f2:79:43:3c:15:26:4f:f5:3f:80:19:cb:b3:f1:54:ae:76:
         85:55:c2:9a:01:2f:0b:21:1b:09:20:ea:10:ee:57:4d:60:19:
         5d:db:94:ed:19:0d:87:27:ce:84:37:2d:6e:f6:46:93:14:a4:
         2d:b4:3e:1e:d4:28:98:a1:a7:4b:5f:79:bc:bd:74:9e:74:c7:
         5e:ad:62:cc:12:ff:5c:81:3f:78:57:ca:2f:04:fa:29:e1:5d:
         e5:3e:3d:7c:24:7d:33:4a:1d:d1:a2:74:11:e1:f0:b6:be:79:
         31:0a:f0:b9:16:a2:c2:2d:c6:ac:ba:35:da:aa:e8:b0:c3:58:
         cb:93:de:e2:73:16:6c:33:be:76:90:68:35:c8:1d:6a:4f:56:
         ea:48:73:16:43:90:ae:34:ad:1a:ec:33:9a:12:e4:02:45:f6:
         cf:80:59:e6:ac:0b:75:b2:43:7c:c5:1a:d8:7a:65:07:35:06:
         09:eb:bc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 11:55:19 2026 by rpki-client