Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          cKvXyHRU7fgNBGnBolM1dplV1A9lek8x2NndM2pjjCc=
Subject key identifier:   34:20:FD:5F:5D:6A:D4:9E:22:CE:4E:10:9A:EF:27:BB:C4:6B:C1:B8
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       566193F304BA9F1D945769F60214BC1C3B94D76D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          01F1
Signing time:             Sat 26 Apr 2025 03:54:44 +0000
Manifest this update:     Sat 26 Apr 2025 03:49:44 +0000
Manifest next update:     Sun 27 Apr 2025 06:37:44 +0000
Files and hashes:         1: AS198136.asa (hash: W+U8FE8wW4IM5Quak0Mq8eROawTLthMCIEUtXh+wJqE=)
                          2: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: aHQLak9N9Oms5rgKvpLigAh2LZdfLoi6boC6n7PKDU4=)
                          3: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=)
                          4: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: 1C8fIKlQUnAeCmyoK3V2NdUgsW/0q5NrpzLZYBb5TGM=)
                          5: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: +Q7esUvjThURXyo3TdWhdlWg9fJFxxex6km3xaj/D5M=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 06:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:61:93:f3:04:ba:9f:1d:94:57:69:f6:02:14:bc:1c:3b:94:d7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Apr 26 03:49:44 2025 GMT
            Not After : Apr 27 06:37:44 2025 GMT
        Subject: CN=3420FD5F5D6AD49E22CE4E109AEF27BBC46BC1B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1f:da:43:1c:32:46:d6:48:10:d9:bb:9b:77:
                    70:5f:5d:4e:00:d9:8d:d5:d6:c4:6e:1b:2b:39:08:
                    e3:4a:a3:47:40:ba:79:96:d3:54:6e:4a:14:85:2c:
                    26:82:fb:bb:33:e7:2b:89:02:04:d1:b0:a0:69:91:
                    f7:d0:36:87:f7:5a:9a:5f:77:ad:30:11:93:36:d3:
                    26:c6:84:ab:05:8c:0b:66:12:aa:4e:79:93:c1:4b:
                    36:60:20:c3:16:b5:ae:72:3a:14:8b:0e:45:c5:1c:
                    2b:2b:0c:3c:06:6c:9f:7c:31:a8:3e:9c:38:6a:42:
                    b0:c7:da:a2:19:9c:e9:d4:0c:30:44:b4:e6:e3:7f:
                    c9:d0:0d:d1:60:3c:59:9b:52:77:ab:36:71:40:35:
                    80:5d:7d:0f:14:3b:04:be:13:2d:90:ae:be:4f:0e:
                    4d:2a:e8:af:1b:e1:2a:e8:ec:09:08:30:aa:12:ec:
                    70:7b:e9:5c:4b:ff:5a:62:31:c4:33:9d:7f:ee:37:
                    f8:20:85:91:3e:9f:a3:90:0e:72:b9:ed:e9:fd:32:
                    c7:ca:2e:78:28:23:8d:0a:46:4b:72:ea:0a:de:af:
                    05:4a:3e:bf:d5:b3:78:92:a9:a4:99:9d:f5:71:88:
                    32:dc:87:86:23:c7:c7:c5:cb:97:6f:8c:29:90:c3:
                    95:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:20:FD:5F:5D:6A:D4:9E:22:CE:4E:10:9A:EF:27:BB:C4:6B:C1:B8
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:84:05:b9:7a:10:86:4b:99:04:6d:25:64:c7:16:e2:17:dd:
         78:bb:bc:b3:0b:77:86:1b:70:8b:64:8c:b3:21:44:c8:4f:6a:
         a0:a5:33:1a:f2:c6:57:55:61:59:22:f7:bf:21:f3:22:68:b8:
         9e:a6:03:14:6b:21:8e:f8:ae:a8:f6:89:39:26:07:66:46:86:
         90:54:41:87:93:f0:45:c1:f5:99:01:27:11:61:68:ed:5d:80:
         42:cd:3e:61:fc:8e:e6:9b:b8:4a:a5:c4:6b:78:54:58:bf:8c:
         67:4b:70:08:09:0c:ca:c0:09:09:ab:9a:4c:2c:f7:df:7c:cd:
         d4:ed:9d:94:18:83:7a:f3:46:0a:a5:dc:61:c5:6c:8e:79:54:
         37:a0:09:57:42:f3:f8:0a:16:a7:f0:81:78:61:c4:7f:cb:0f:
         ec:37:83:6e:b6:b6:1e:bc:57:a8:b9:bf:48:3e:58:51:db:30:
         f2:a9:d8:04:c3:6d:29:72:d8:f8:90:55:14:9e:2a:d2:2f:8b:
         7a:ce:13:a2:1e:90:f1:a4:7e:2f:93:8f:66:dd:8d:6a:89:27:
         c2:9a:4c:7f:31:cd:ab:36:fe:3a:31:3b:07:8a:8b:7f:41:70:
         63:d8:d8:d7:56:6e:b7:5a:a2:a4:1f:af:df:1a:f0:77:80:5e:
         94:0e:a2:f9
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUVmGT8wS6nx2UV2n2AhS8HDuU120wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl
MmE1YmIzODAeFw0yNTA0MjYwMzQ5NDRaFw0yNTA0MjcwNjM3NDRaMDMxMTAvBgNV
BAMTKDM0MjBGRDVGNUQ2QUQ0OUUyMkNFNEUxMDlBRUYyN0JCQzQ2QkMxQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJH9pDHDJG1kgQ2bubd3BfXU4A
2Y3V1sRuGys5CONKo0dAunmW01RuShSFLCaC+7sz5yuJAgTRsKBpkffQNof3Wppf
d60wEZM20ybGhKsFjAtmEqpOeZPBSzZgIMMWta5yOhSLDkXFHCsrDDwGbJ98Mag+
nDhqQrDH2qIZnOnUDDBEtObjf8nQDdFgPFmbUnerNnFANYBdfQ8UOwS+Ey2Qrr5P
Dk0q6K8b4Sro7AkIMKoS7HB76VxL/1piMcQznX/uN/gghZE+n6OQDnK57en9MsfK
LngoI40KRkty6grerwVKPr/Vs3iSqaSZnfVxiDLch4Yjx8fFy5dvjCmQw5XhAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUNCD9X11q1J4izk4Qmu8nu8RrwbgwHwYDVR0j
BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0
OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL
bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y
ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE
N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1IQFuXoQhkuZBG0lZMcW
4hfdeLu8swt3hhtwi2SMsyFEyE9qoKUzGvLGV1VhWSL3vyHzImi4nqYDFGshjviu
qPaJOSYHZkaGkFRBh5PwRcH1mQEnEWFo7V2AQs0+YfyO5pu4SqXEa3hUWL+MZ0tw
CAkMysAJCauaTCz333zN1O2dlBiDevNGCqXcYcVsjnlUN6AJV0Lz+AoWp/CBeGHE
f8sP7DeDbra2HrxXqLm/SD5YUdsw8qnYBMNtKXLY+JBVFJ4q0i+Les4Toh6Q8aR+
L5OPZt2NaoknwppMfzHNqzb+OjE7B4qLf0FwY9jY11Zut1qipB+v3xrwd4BelA6i
+Q==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:36:22 2025 by rpki-client