Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          6YXfGZxNOuTyKaxb8s6OAps+zsQOxcCYzluFzDl0BDk=
Subject key identifier:   3E:6C:CF:2E:3A:B4:7A:87:19:05:B1:CB:B2:72:81:3A:6B:C3:0C:E5
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       092B084BF2C169B615A9BB40DB3C852BE72E9695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          02F2
Signing time:             Mon 03 Nov 2025 19:56:49 +0000
Manifest this update:     Mon 03 Nov 2025 19:51:49 +0000
Manifest next update:     Tue 04 Nov 2025 21:22:49 +0000
Files and hashes:         1: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: ugwuU7tNssWL31PfijB3BuP0WxbYxZ+Nh6M2KEuT0OI=)
                          2: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          3: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=)
                          4: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          5: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Nov 2025 21:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2b:08:4b:f2:c1:69:b6:15:a9:bb:40:db:3c:85:2b:e7:2e:96:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Nov  3 19:51:49 2025 GMT
            Not After : Nov  4 21:22:49 2025 GMT
        Subject: CN=3E6CCF2E3AB47A871905B1CBB272813A6BC30CE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:03:a9:dc:98:10:cc:d2:95:6e:7d:95:5a:bd:
                    95:bd:d3:84:b0:48:ad:d8:77:6d:81:7a:3a:e2:a6:
                    36:9c:59:7d:91:90:df:40:ec:93:a3:93:b3:8d:72:
                    8f:09:1a:e5:d6:2c:fe:a7:b9:4d:fc:79:9d:e0:45:
                    a7:a2:de:f5:94:38:6a:3a:81:9a:63:61:e5:4f:1b:
                    c0:e4:e1:de:e8:a4:1e:62:ea:0d:b4:2a:d1:1c:44:
                    9d:47:e0:1c:7b:a2:04:ee:0b:6a:4b:60:cb:09:3f:
                    30:7a:5f:02:66:8c:fc:23:ab:bd:31:be:f8:8a:00:
                    a0:4c:57:5f:b4:92:6e:b1:51:d4:2b:3e:bb:4b:0d:
                    4c:25:5c:1c:32:38:f9:cd:e8:79:23:bc:db:b5:80:
                    d5:e6:ce:15:82:1e:a0:b5:07:26:3b:49:b1:70:73:
                    98:ec:c6:40:48:b1:99:27:ad:e3:29:fa:0a:92:e6:
                    89:bc:a7:ae:b2:e8:d9:14:e0:1d:01:7a:3a:02:c6:
                    c1:74:79:c0:f5:e7:8e:74:a2:f4:0a:e1:3f:03:14:
                    ad:72:5e:04:79:0a:ba:d4:38:9e:55:e5:05:9b:90:
                    c1:9b:63:c0:21:f7:d7:30:29:7d:d1:6a:c3:9a:6b:
                    12:ec:53:66:0a:a8:cb:49:29:46:fd:cd:9b:a9:3e:
                    1d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6C:CF:2E:3A:B4:7A:87:19:05:B1:CB:B2:72:81:3A:6B:C3:0C:E5
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7c:f8:26:bc:8a:71:a8:2e:9e:0e:90:b1:37:4a:78:fa:7d:
         07:74:5b:b8:90:e3:24:58:2f:ec:1f:8b:49:b9:fd:42:6d:86:
         98:4b:9b:4b:55:9c:fc:89:54:ab:ff:fb:b3:6a:52:db:a5:dc:
         5e:62:02:57:ab:01:70:58:db:4e:2a:9c:5c:c2:84:00:5a:51:
         17:66:fc:33:02:15:5e:81:4e:06:be:f3:24:87:37:76:9f:77:
         8a:43:3e:26:6d:81:90:aa:22:14:ee:ff:86:88:50:7b:a9:96:
         ac:53:f2:e1:5a:31:41:91:cd:f4:2d:14:bf:58:32:65:c1:d2:
         30:21:5e:19:4d:93:4b:ce:49:37:61:1f:ca:f5:5b:6c:70:34:
         cc:d1:9c:f3:f9:10:72:c2:fd:25:cc:78:d0:cd:0c:5b:b7:b8:
         0e:d5:f5:22:74:fb:cd:57:76:31:ec:b9:50:94:8a:64:b4:43:
         a9:b5:26:e7:96:95:3c:3c:f2:94:2b:b1:0c:f9:0f:96:1e:5b:
         b0:93:38:ed:65:b3:9f:9c:90:82:0e:a3:00:43:df:ed:0b:76:
         9f:b0:7f:7b:4b:77:48:2a:b7:46:95:df:5a:64:d3:08:d5:45:
         2e:06:dc:c9:5a:71:dc:64:59:9e:1f:7b:e9:13:2a:61:ba:62:
         7e:33:20:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:35 2025 by rpki-client