Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File:                     608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier:          sx0PInf33i4Vxa1SYMTx7rnuLl8aLYlS2W275mob+2s=
Subject key identifier:   A6:D2:A4:18:21:A9:F3:26:88:DB:7A:42:5C:BC:B4:36:F0:1B:81:78
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer:       /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial:       745AF9A25818E5E28D11D260078376FC54DC00B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number:          01ED
Signing time:             Fri 12 Jun 2026 18:25:59 +0000
Manifest this update:     Fri 12 Jun 2026 18:20:59 +0000
Manifest next update:     Sat 13 Jun 2026 21:12:59 +0000
Files and hashes:         1: AS215375.asa (hash: DZVi1/CK4GG1KrRT85oiZ+YijHbp2KXSyTjCgdv/hPU=)
                          2: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: 8fQA1ASs8pFf77wMj2WrkD/yNrt7Rk2/ORV78hu7Z5o=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5a:f9:a2:58:18:e5:e2:8d:11:d2:60:07:83:76:fc:54:dc:00:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
        Validity
            Not Before: Jun 12 18:20:59 2026 GMT
            Not After : Jun 13 21:12:59 2026 GMT
        Subject: CN=A6D2A41821A9F32688DB7A425CBCB436F01B8178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:67:54:67:87:ad:99:34:25:bc:9b:a7:55:5c:
                    ec:79:b8:78:5a:7f:c5:57:3c:3d:a5:f5:74:8e:59:
                    44:cc:fe:07:9e:af:0d:af:35:7b:37:c5:4d:20:66:
                    be:39:91:dc:b2:38:8f:7d:fb:f4:c2:12:39:ba:86:
                    78:0c:d1:f0:e3:26:93:4d:22:c6:3c:d4:22:ac:2f:
                    62:af:cf:ef:7a:39:85:a7:66:bf:95:35:6a:6e:23:
                    b5:ce:1a:8e:9d:de:71:c1:1d:ae:09:53:2d:1e:7e:
                    50:be:7c:47:fb:12:fc:00:20:02:81:22:ae:1d:48:
                    b8:76:49:18:ca:f8:3a:4e:bc:31:b4:79:60:3f:05:
                    42:43:ac:c1:78:bb:70:63:a8:d9:2f:0f:f8:61:1e:
                    57:3d:59:4c:b2:49:b0:46:70:fd:6a:e8:82:9e:b7:
                    8c:5a:3c:29:51:92:61:df:f6:d6:3f:8b:7c:33:11:
                    f6:82:46:13:a6:48:07:c2:af:67:9a:bc:ca:a2:cb:
                    9e:c5:ea:88:9d:77:f2:a7:f3:2b:ec:df:e9:e2:14:
                    23:07:1c:f3:18:e2:dc:a0:76:95:95:cc:d9:c9:65:
                    cd:9a:28:99:a3:bc:ab:55:90:15:68:6a:2a:2b:22:
                    6c:be:bf:c2:69:d3:78:bb:df:be:5a:fa:56:89:bd:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D2:A4:18:21:A9:F3:26:88:DB:7A:42:5C:BC:B4:36:F0:1B:81:78
            X509v3 Authority Key Identifier:
                keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:19:ed:71:43:7d:38:26:cc:91:65:d1:30:ae:14:0f:3f:32:
         1d:6f:d1:d9:11:7c:59:a5:91:d2:19:76:63:42:95:d2:64:a7:
         68:e3:6c:4e:a1:a8:b6:26:c9:37:e5:ff:c3:93:cf:8c:97:2a:
         41:0f:7d:a8:6b:e5:b8:4d:9d:bb:3f:e4:c5:02:67:d4:60:1d:
         85:b5:b3:54:62:80:95:2f:ad:2b:1b:4a:ac:68:74:0d:85:9c:
         37:f6:d2:ef:38:3e:fa:7f:66:45:e6:39:43:25:91:1d:2a:2c:
         d7:29:42:48:77:e4:07:1e:80:51:93:08:d8:3a:b4:a3:3c:c5:
         45:d9:fe:18:05:9d:8a:2c:52:62:62:31:79:5b:69:01:c0:ca:
         4b:45:cb:a3:99:e4:bc:54:eb:ce:e1:96:a6:09:fe:16:1b:ad:
         6a:6e:ab:2e:2b:47:54:3c:7b:65:c3:2c:c1:98:58:d8:b9:7d:
         5b:ed:bc:bf:5e:38:4e:42:5c:93:b5:e2:4d:3e:e6:22:55:1e:
         2c:f7:89:e4:5a:05:7b:2f:11:8f:9a:04:24:92:2c:c6:9a:c7:
         ec:2b:e3:0f:15:a1:9b:c7:94:d1:ba:72:aa:6e:8c:25:17:18:
         c9:b1:30:82:db:19:84:df:ab:57:28:1c:0a:fa:79:47:f4:27:
         1d:21:e1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:30:50 2026 by rpki-client