Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          ZwsE2Xr9/POYfVd0NiYtwWt068D6EfJPSjrThQB16rs=
Subject key identifier:   EB:DF:79:AF:9C:C0:B7:90:F7:C0:EF:AE:76:9D:18:71:C6:9F:57:07
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       26161865A2A91F71669E11080379CB8AAE24E07F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          03DA
Signing time:             Sat 25 Apr 2026 19:05:01 +0000
Manifest this update:     Sat 25 Apr 2026 19:00:01 +0000
Manifest next update:     Sun 26 Apr 2026 22:12:01 +0000
Files and hashes:         1: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: 4AUoqMSjdiAX/ZDEQpSYaHf/0yBP3FHJMfA5P+mtyTw=)
                          2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          3: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          5: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Apr 2026 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:16:18:65:a2:a9:1f:71:66:9e:11:08:03:79:cb:8a:ae:24:e0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Apr 25 19:00:01 2026 GMT
            Not After : Apr 26 22:12:01 2026 GMT
        Subject: CN=EBDF79AF9CC0B790F7C0EFAE769D1871C69F5707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:2a:e3:e6:63:a2:f3:ee:ff:44:08:f0:1d:
                    75:f6:c0:08:3a:68:88:4a:49:f0:36:0d:e2:05:08:
                    51:ca:0b:51:fc:94:f7:43:38:f1:d9:39:92:63:18:
                    ea:3a:ce:7d:42:de:48:6e:9c:63:cb:19:21:b7:50:
                    da:f7:df:3e:5c:fa:38:5c:75:11:62:0d:fa:5b:59:
                    bc:37:f8:1f:a6:ef:95:0f:f4:15:86:e0:95:d6:6e:
                    70:9e:27:48:05:4a:bd:c8:6b:3d:ac:bf:06:cf:21:
                    1a:ef:51:fe:15:c3:7f:54:13:63:f9:be:da:aa:4c:
                    a7:4d:b6:77:ba:87:85:28:b7:29:0f:f2:75:fd:75:
                    ac:52:57:cb:14:14:49:c8:da:0d:80:e4:dc:97:a9:
                    4e:2e:3a:67:40:8a:bb:76:b3:ff:d1:fe:c1:10:1f:
                    dd:59:e1:5c:0c:e3:3a:b8:50:6c:79:e0:0e:26:f2:
                    a2:0e:4b:c9:f7:ee:fe:17:46:00:a9:bd:c9:fb:ad:
                    9a:d3:3b:69:a4:2c:0d:e4:ed:6f:15:10:8b:51:60:
                    3c:55:b6:b7:34:f5:b8:cc:a1:a9:44:05:e7:98:17:
                    ec:d7:87:57:f5:de:39:ff:89:78:ea:d4:69:35:f9:
                    74:54:ca:2d:dd:0d:47:4d:2a:bb:24:7c:d3:39:dc:
                    03:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DF:79:AF:9C:C0:B7:90:F7:C0:EF:AE:76:9D:18:71:C6:9F:57:07
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:91:50:9f:9b:5d:ca:a9:e2:5e:dd:b1:72:0b:b2:eb:55:09:
         8c:65:2d:a2:06:de:66:fa:8e:dd:a3:77:09:ed:05:95:a6:5c:
         dc:7e:e2:25:2f:c7:97:a4:f4:e7:c8:2a:fe:44:1d:7e:9b:51:
         49:4e:bd:4b:81:69:4e:40:b6:be:4b:ca:cc:c9:e7:24:4a:f4:
         65:7b:8a:cf:91:75:e6:d7:e6:53:86:4b:30:45:a2:b5:ab:0f:
         24:5b:6d:0a:a4:0b:05:67:5d:8c:9f:fe:98:0d:b1:67:f5:f8:
         bc:09:82:6b:c7:97:a8:80:7e:9c:7b:a5:d6:d5:9a:66:fe:7f:
         b5:df:4d:bc:75:0e:cc:09:bd:7c:33:89:73:a9:24:71:fc:64:
         49:81:51:11:42:f8:06:c3:00:c5:15:22:5d:17:e4:90:a6:3e:
         22:0a:77:0b:ea:29:4d:74:57:86:f8:ed:e9:fe:63:4a:30:5a:
         a7:c0:da:14:04:59:05:3c:32:84:4d:51:27:1b:5c:1c:09:05:
         1f:b8:36:e6:ed:53:ce:62:9e:a6:ac:0b:1f:27:33:37:d2:f3:
         08:22:24:8b:e4:3f:d8:4b:7c:d0:2b:2b:4f:1e:3d:42:d2:3e:
         14:74:22:42:c1:47:b2:e9:61:2b:3d:e2:c0:5a:f7:16:b6:e9:
         ab:2a:4d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 26 01:03:29 2026 by rpki-client