Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File:                     608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier:          3FqTpE07vuxhcyb+UuQt15GnadVBNgqp4wmX9EckXAM=
Subject key identifier:   C6:EF:BB:C0:19:75:34:E1:DD:AC:05:1E:24:8C:69:DF:63:CA:5C:6C
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer:       /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial:       18D1F66C08BB9C0F4ECCE1CD3A0F34394A8892F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number:          019E
Signing time:             Fri 17 Apr 2026 12:29:44 +0000
Manifest this update:     Fri 17 Apr 2026 12:24:44 +0000
Manifest next update:     Sat 18 Apr 2026 13:27:44 +0000
Files and hashes:         1: AS215375.asa (hash: e0esF+VqvtsleiiMJnSuBMND1Z/LxmcXfmjsUwN+NLI=)
                          2: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: kuWqSD5WTjuuhxZHgoJ9eHLwowQjj7p2HEmXj4EHRa0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d1:f6:6c:08:bb:9c:0f:4e:cc:e1:cd:3a:0f:34:39:4a:88:92:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
        Validity
            Not Before: Apr 17 12:24:44 2026 GMT
            Not After : Apr 18 13:27:44 2026 GMT
        Subject: CN=C6EFBBC0197534E1DDAC051E248C69DF63CA5C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a5:ee:98:06:1e:38:28:1b:8d:6c:92:59:f6:
                    12:40:4c:14:82:45:16:76:74:f7:f1:e1:ad:8e:eb:
                    db:bd:50:55:ce:1f:94:fb:4c:b3:10:b4:a9:e5:46:
                    dd:19:5e:b8:84:76:d3:4b:cf:81:85:d3:37:59:c4:
                    b4:95:de:17:70:68:c8:93:f4:80:78:27:37:59:d0:
                    03:e8:dc:e9:35:71:e3:c5:ae:66:5a:29:72:1f:ba:
                    f5:89:43:7e:84:77:d2:96:38:d6:91:7c:ab:95:fe:
                    ae:29:7a:1b:46:4d:83:2d:fc:86:21:27:da:7c:5a:
                    23:94:ec:f3:98:3c:27:e5:e5:a6:56:93:91:a6:f3:
                    30:d4:08:11:f8:02:9a:a4:5b:08:1d:1b:36:cb:f3:
                    d6:55:0a:4c:94:7c:67:f6:d3:7e:e7:37:36:fb:ae:
                    55:73:7d:45:8d:a4:e8:6f:49:18:c0:3f:73:32:67:
                    35:c5:f2:ee:3c:ea:21:89:e2:ce:8c:52:20:72:00:
                    17:c4:8a:fa:e6:e9:d1:1d:b1:86:3c:5f:b3:9d:41:
                    94:7f:82:1e:93:92:fc:83:91:6f:30:10:17:42:4c:
                    d3:2c:e0:56:ce:ea:07:8b:c1:a6:eb:1e:9a:d0:3e:
                    90:eb:81:7e:88:89:52:e6:02:1d:28:13:17:46:1c:
                    33:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EF:BB:C0:19:75:34:E1:DD:AC:05:1E:24:8C:69:DF:63:CA:5C:6C
            X509v3 Authority Key Identifier:
                keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ce:3a:b5:95:b3:c3:7a:f6:f1:51:71:40:0c:46:9c:c3:cc:
         08:9f:1f:a1:3e:2b:75:ff:c3:47:3f:7b:8a:91:40:e6:15:98:
         dc:87:eb:71:53:cd:84:8d:b7:14:10:43:1e:14:9d:7e:bc:1e:
         5a:72:d9:19:78:f2:68:5b:c3:68:2b:4f:81:02:87:f5:e4:ba:
         de:df:8a:d8:1c:a9:27:50:11:61:4c:64:ae:81:f3:b1:0a:2a:
         b3:0c:04:84:ea:b5:48:98:27:ef:0b:6f:00:eb:1d:66:8c:c6:
         45:4c:69:bb:09:a7:69:a1:3a:8d:71:ab:85:56:98:e2:15:57:
         9f:9b:b5:ce:4a:87:fd:d6:fb:63:44:06:6a:a3:cd:5d:4b:ee:
         cc:ec:6a:07:0e:a4:a3:2a:3b:1e:c4:b3:0c:91:ad:c5:ab:ce:
         11:f4:c7:b6:ed:9f:b7:1c:88:a1:70:ce:81:91:63:99:17:0e:
         c5:b1:0a:9f:01:d9:52:40:16:81:e9:37:ca:b8:fc:d8:2e:c3:
         df:0b:2c:4d:4d:49:4f:58:15:17:e7:f7:23:84:a0:7d:83:27:
         14:42:24:f5:ee:59:3f:a3:6b:e6:0c:2a:3b:a6:8f:f0:9b:18:
         ec:0d:7a:e0:ec:14:25:1f:c2:36:96:91:dd:f4:61:f3:a1:b3:
         6b:20:19:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:08:19 2026 by rpki-client