Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          s5ORaOeLscFb4b5IXcyjSr6Yxul1TIHioMLj90GYLPc=
Subject key identifier:   74:CB:FF:A7:36:28:60:32:39:96:54:86:C9:75:EA:FF:AB:B8:C6:FE
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       712BA8A13D3838B081B0EE68176527C6595660D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          03CE
Signing time:             Thu 16 Apr 2026 20:55:01 +0000
Manifest this update:     Thu 16 Apr 2026 20:50:01 +0000
Manifest next update:     Fri 17 Apr 2026 21:15:01 +0000
Files and hashes:         1: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: ss/+qPruIYYgbMkprsj9oCWq1MvAS20uTHbAteVmTig=)
                          2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          3: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          4: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          5: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2b:a8:a1:3d:38:38:b0:81:b0:ee:68:17:65:27:c6:59:56:60:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Apr 16 20:50:01 2026 GMT
            Not After : Apr 17 21:15:01 2026 GMT
        Subject: CN=74CBFFA73628603239965486C975EAFFABB8C6FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:61:04:0f:01:5a:52:6d:47:89:71:f5:29:
                    95:a2:56:c7:c4:d6:64:63:e7:dd:6b:d5:75:61:ce:
                    86:78:2c:f7:b2:5a:1e:64:f0:48:e7:08:97:f1:40:
                    f5:db:f1:50:74:87:5a:d0:f9:d8:8f:03:60:3f:6d:
                    2d:66:44:51:0f:7d:af:04:c8:f4:c7:81:6c:12:a8:
                    ff:51:8e:69:cc:34:f4:39:8f:b8:aa:08:cb:76:ea:
                    aa:17:79:5b:7c:7c:51:09:e1:8d:63:e2:b3:46:46:
                    9a:26:d0:16:8c:88:ca:f5:f6:5f:ac:66:dd:b3:38:
                    62:e3:ad:62:2a:9c:f0:61:c6:06:5d:db:3c:e0:10:
                    c2:93:0b:50:aa:87:d3:26:e6:d9:db:4d:71:ac:00:
                    00:59:8f:aa:da:dd:36:90:b4:af:6b:ba:fd:ba:88:
                    d4:74:1e:e3:cb:11:db:c2:d0:3c:37:8f:d2:8b:cf:
                    e9:38:64:3b:1e:0e:1e:92:ed:a9:4f:69:c3:5b:fc:
                    db:ea:df:de:2d:8b:24:bd:92:6f:ba:0b:73:06:12:
                    e6:88:16:f1:56:c2:ba:c5:0b:ba:8f:b8:88:51:9f:
                    50:9b:55:38:67:7b:3b:34:6a:ee:47:4c:6b:c3:4a:
                    c5:51:9e:d8:a0:03:51:76:d6:58:5b:5a:44:33:eb:
                    c2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CB:FF:A7:36:28:60:32:39:96:54:86:C9:75:EA:FF:AB:B8:C6:FE
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:86:aa:92:3c:3c:b6:05:ff:3e:97:f6:e4:06:7c:74:b9:9c:
         f5:d9:ae:19:26:47:17:08:16:19:e5:df:55:6e:1a:13:0d:60:
         64:78:01:77:f0:43:7a:96:ea:77:1d:a4:25:0b:69:b2:5d:d5:
         cb:85:04:61:d6:64:02:75:a9:18:47:8e:0b:3f:a9:b7:3a:6c:
         e8:8b:fb:20:58:73:ec:c7:48:f3:0f:7e:4c:53:7b:74:82:02:
         26:bc:b3:08:9a:0e:21:bd:34:40:11:b3:20:43:90:7f:52:32:
         43:07:07:b7:f7:bb:06:5b:ac:1b:26:b0:8c:6b:fa:e6:cd:e1:
         8e:1a:e9:52:78:67:19:79:95:4b:99:b8:61:aa:98:4c:2d:d3:
         a8:7b:b8:10:04:1e:5a:e0:92:96:fe:65:d0:cf:62:af:2a:90:
         8a:10:c2:77:12:b0:d1:66:4d:52:3e:cc:71:44:f0:17:53:54:
         6a:0e:79:7a:c0:b0:16:b3:c1:22:37:fe:9a:8d:77:8c:d8:eb:
         b0:3d:da:3e:61:7d:ea:24:cd:05:8b:7a:cb:90:e4:60:67:24:
         8c:97:be:7d:fb:c1:2a:fb:5c:6f:77:cd:d9:94:91:15:e7:ac:
         a5:fe:2e:2b:67:b4:64:53:1f:5c:80:ec:b3:62:fc:8e:20:24:
         2a:5f:3b:e7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUcSuooT04OLCBsO5oF2UnxllWYNgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl
MmE1YmIzODAeFw0yNjA0MTYyMDUwMDFaFw0yNjA0MTcyMTE1MDFaMDMxMTAvBgNV
BAMTKDc0Q0JGRkE3MzYyODYwMzIzOTk2NTQ4NkM5NzVFQUZGQUJCOEM2RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCcGEEDwFaUm1HiXH1KZWiVsfE
1mRj591r1XVhzoZ4LPeyWh5k8EjnCJfxQPXb8VB0h1rQ+diPA2A/bS1mRFEPfa8E
yPTHgWwSqP9RjmnMNPQ5j7iqCMt26qoXeVt8fFEJ4Y1j4rNGRpom0BaMiMr19l+s
Zt2zOGLjrWIqnPBhxgZd2zzgEMKTC1Cqh9Mm5tnbTXGsAABZj6ra3TaQtK9ruv26
iNR0HuPLEdvC0Dw3j9KLz+k4ZDseDh6S7alPacNb/Nvq394tiyS9km+6C3MGEuaI
FvFWwrrFC7qPuIhRn1CbVThnezs0au5HTGvDSsVRntigA1F21lhbWkQz68JbAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUdMv/pzYoYDI5llSGyXXq/6u4xv4wHwYDVR0j
BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0
OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL
bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y
ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE
N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoaqkjw8tgX/Ppf25AZ8
dLmc9dmuGSZHFwgWGeXfVW4aEw1gZHgBd/BDepbqdx2kJQtpsl3Vy4UEYdZkAnWp
GEeOCz+ptzps6Iv7IFhz7MdI8w9+TFN7dIICJryzCJoOIb00QBGzIEOQf1IyQwcH
t/e7BlusGyawjGv65s3hjhrpUnhnGXmVS5m4YaqYTC3TqHu4EAQeWuCSlv5l0M9i
ryqQihDCdxKw0WZNUj7McUTwF1NUag55esCwFrPBIjf+mo13jNjrsD3aPmF96iTN
BYt6y5DkYGckjJe+ffvBKvtcb3fN2ZSRFeespf4uK2e0ZFMfXIDss2L8jiAkKl87
5w==
-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:31 2026 by rpki-client