Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          LICA4r++HJAXFLv/oyi3XBxDtI0XTaNecylhBeb1Y2w=
Subject key identifier:   1B:2F:14:E1:6E:7F:F9:EE:06:FF:4B:5A:93:42:E6:E8:A0:84:BA:94
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       0423E73E6C84C53B946D9FBF9127BE8E667DCC49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          0232
Signing time:             Fri 13 Jun 2025 21:05:12 +0000
Manifest this update:     Fri 13 Jun 2025 21:00:12 +0000
Manifest next update:     Sat 14 Jun 2025 22:24:12 +0000
Files and hashes:         1: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: aHQLak9N9Oms5rgKvpLigAh2LZdfLoi6boC6n7PKDU4=)
                          2: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=)
                          3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: L0CPYDPrMV3RyE8dd2/KvxnTMdfvW34dXAOv9uZvnxo=)
                          4: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: 1C8fIKlQUnAeCmyoK3V2NdUgsW/0q5NrpzLZYBb5TGM=)
                          5: AS198136.asa (hash: W+U8FE8wW4IM5Quak0Mq8eROawTLthMCIEUtXh+wJqE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 22:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:23:e7:3e:6c:84:c5:3b:94:6d:9f:bf:91:27:be:8e:66:7d:cc:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Jun 13 21:00:12 2025 GMT
            Not After : Jun 14 22:24:12 2025 GMT
        Subject: CN=1B2F14E16E7FF9EE06FF4B5A9342E6E8A084BA94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:20:7f:6b:64:be:93:9b:54:92:29:d2:41:
                    96:a1:52:50:1b:8d:36:54:00:8e:db:d4:8d:31:bc:
                    f4:22:8c:ee:f4:82:c6:fe:81:aa:f0:65:1c:36:3f:
                    a6:d4:e4:fe:d3:f4:33:c7:cf:69:89:7a:2f:b5:ad:
                    e6:4b:4b:fa:41:a8:65:64:31:84:2f:a0:be:c2:05:
                    25:5a:cf:13:81:53:a6:5f:10:ad:50:dc:b4:e4:0c:
                    3b:1e:38:c1:47:51:ab:0f:97:b0:e2:79:59:5f:2c:
                    10:11:a5:17:e6:19:7a:08:d4:c8:f2:53:1e:d1:e6:
                    0f:fa:d2:5f:a7:ce:27:dc:19:0e:bd:90:a7:b1:c3:
                    1a:df:37:b7:11:27:5c:f6:d0:6c:5b:b2:2c:d8:e3:
                    7e:70:e2:e5:16:f0:4c:f6:ab:9e:ec:38:05:fe:04:
                    9f:0b:c9:7c:5b:fd:ad:0f:d4:00:5a:7b:e7:ff:9f:
                    5c:f8:b2:34:c8:d7:23:3b:96:cc:85:9f:94:f8:bc:
                    22:6a:1b:e7:51:af:f0:93:b2:d4:5a:7a:7b:b3:47:
                    df:ed:9d:46:03:3a:61:4f:2a:17:a8:f9:c1:fc:1d:
                    d5:20:e9:af:d0:ed:c3:99:76:2d:94:05:7f:a4:bc:
                    3f:c0:38:97:f2:c3:52:93:39:b3:7b:9d:17:e6:01:
                    dd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2F:14:E1:6E:7F:F9:EE:06:FF:4B:5A:93:42:E6:E8:A0:84:BA:94
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8d:33:2a:92:77:5e:dc:46:b8:76:24:10:b1:a1:38:75:1f:
         66:83:c9:26:67:99:29:ff:0f:db:0a:6f:a9:75:23:3a:8e:bd:
         b9:52:a0:a0:85:4c:51:de:be:57:eb:ae:ec:48:68:4b:e8:65:
         0f:5c:03:70:36:6f:7a:da:fc:a1:5e:11:10:fb:1c:40:67:68:
         12:d4:df:e9:4a:1d:1a:cd:00:e5:ab:82:bc:fd:c0:ac:c5:a1:
         d6:5a:9c:e5:4e:e7:1a:05:09:20:48:fd:59:05:d9:2d:f7:4f:
         f1:47:d2:66:cf:bf:fc:3e:1a:b1:5a:9f:c1:58:32:70:c4:88:
         1c:6b:bd:2a:af:8b:d4:14:41:2e:ed:3a:b9:d1:81:e9:04:34:
         d7:21:f7:8e:09:ec:44:40:f9:d9:94:b6:8f:18:3c:90:85:65:
         1e:75:1a:ee:b8:39:1f:d7:11:37:bb:6c:8b:4c:36:f1:3b:00:
         d6:40:70:05:b9:56:3c:48:f1:01:9f:d2:68:25:45:30:ae:d7:
         99:f3:d8:b3:c6:eb:9d:76:48:cd:27:93:31:d8:84:fd:fc:f6:
         d5:6f:2f:a8:8d:70:0f:8d:18:08:8c:1c:09:fe:40:0a:34:d7:
         05:d7:2f:56:3d:b4:90:96:ba:35:27:d3:0f:cc:ec:35:d2:32:
         61:e7:60:7f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUBCPnPmyExTuUbZ+/kSe+jmZ9zEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl
MmE1YmIzODAeFw0yNTA2MTMyMTAwMTJaFw0yNTA2MTQyMjI0MTJaMDMxMTAvBgNV
BAMTKDFCMkYxNEUxNkU3RkY5RUUwNkZGNEI1QTkzNDJFNkU4QTA4NEJBOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1zSB/a2S+k5tUkinSQZahUlAb
jTZUAI7b1I0xvPQijO70gsb+garwZRw2P6bU5P7T9DPHz2mJei+1reZLS/pBqGVk
MYQvoL7CBSVazxOBU6ZfEK1Q3LTkDDseOMFHUasPl7DieVlfLBARpRfmGXoI1Mjy
Ux7R5g/60l+nzifcGQ69kKexwxrfN7cRJ1z20GxbsizY435w4uUW8Ez2q57sOAX+
BJ8LyXxb/a0P1ABae+f/n1z4sjTI1yM7lsyFn5T4vCJqG+dRr/CTstRaenuzR9/t
nUYDOmFPKheo+cH8HdUg6a/Q7cOZdi2UBX+kvD/AOJfyw1KTObN7nRfmAd3vAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUGy8U4W5/+e4G/0tak0Lm6KCEupQwHwYDVR0j
BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0
OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL
bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y
ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE
N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjY0zKpJ3XtxGuHYkELGh
OHUfZoPJJmeZKf8P2wpvqXUjOo69uVKgoIVMUd6+V+uu7EhoS+hlD1wDcDZvetr8
oV4REPscQGdoEtTf6UodGs0A5auCvP3ArMWh1lqc5U7nGgUJIEj9WQXZLfdP8UfS
Zs+//D4asVqfwVgycMSIHGu9Kq+L1BRBLu06udGB6QQ01yH3jgnsRED52ZS2jxg8
kIVlHnUa7rg5H9cRN7tsi0w28TsA1kBwBblWPEjxAZ/SaCVFMK7XmfPYs8brnXZI
zSeTMdiE/fz21W8vqI1wD40YCIwcCf5ACjTXBdcvVj20kJa6NSfTD8zsNdIyYedg
fw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:36:24 2025 by rpki-client