Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          MY8Kv4UeYMz5/QmX3Mx4KD9QINBVzog6yW7LemTlTbs=
Subject key identifier:   4C:86:51:4D:BD:C9:0E:DE:FB:E0:81:D1:1C:4A:66:71:F3:41:64:E6
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       583E68F383366F75C10E2506FF0B84A43E452493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          03B1
Signing time:             Thu 26 Mar 2026 01:58:32 +0000
Manifest this update:     Thu 26 Mar 2026 01:53:32 +0000
Manifest next update:     Fri 27 Mar 2026 05:15:32 +0000
Files and hashes:         1: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          2: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          4: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: 3LUfl2fhzpA32/sUjtwzqEYnqrFzN6VQWWtVqDtVlsA=)
                          5: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3e:68:f3:83:36:6f:75:c1:0e:25:06:ff:0b:84:a4:3e:45:24:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Mar 26 01:53:32 2026 GMT
            Not After : Mar 27 05:15:32 2026 GMT
        Subject: CN=4C86514DBDC90EDEFBE081D11C4A6671F34164E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:29:48:32:a9:e0:f4:d6:7b:38:c0:b7:c5:
                    4c:88:6a:80:fe:63:5b:64:33:2b:5e:06:45:53:47:
                    25:74:cd:23:1b:9b:dc:fd:8f:c9:61:de:dc:6d:09:
                    e0:a0:72:52:91:1c:c6:bf:a2:f9:59:58:04:a0:49:
                    f9:61:b0:82:f5:be:76:84:df:14:11:01:43:44:a0:
                    6a:44:67:c9:28:af:17:e9:92:26:7a:08:ed:0c:7a:
                    93:47:bb:7c:b4:0a:39:14:d1:4b:be:ae:7d:dd:38:
                    83:df:69:db:7e:7a:73:71:79:9b:e4:8a:e6:94:d7:
                    51:a9:6e:e4:cb:8d:79:14:16:c4:36:bf:7b:f6:f8:
                    6c:3d:bb:c2:c0:92:4d:70:f1:60:d7:72:52:41:6d:
                    fc:93:4e:c8:ef:72:99:c9:54:c7:46:0a:9c:ed:ca:
                    71:31:b0:38:48:5b:f8:dc:ff:bc:6d:cd:a4:0a:c0:
                    64:90:87:22:31:de:2f:c0:c0:9e:ae:58:06:bb:16:
                    e2:22:38:ea:f8:4c:a4:43:88:ef:cc:13:0b:12:a5:
                    6d:d1:1e:4c:6a:54:50:f9:65:79:a4:cc:2c:e8:ce:
                    a4:3f:41:3d:d0:3c:dc:bb:93:df:ee:9b:27:dd:ad:
                    7b:ad:14:38:5b:2a:b5:7e:1a:f2:e2:7b:39:23:96:
                    72:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:86:51:4D:BD:C9:0E:DE:FB:E0:81:D1:1C:4A:66:71:F3:41:64:E6
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:6c:a4:15:f8:24:0b:a5:1c:bc:da:08:49:f7:97:c7:6e:43:
         52:03:5b:3b:bf:7d:cc:b0:4c:eb:5f:b6:87:0d:79:6e:0d:be:
         c6:d0:62:62:9f:22:cf:e2:fb:9a:0e:b4:53:c9:db:0d:3d:55:
         c4:08:26:d4:03:de:10:48:02:ec:6e:19:a9:f6:07:9c:9b:46:
         53:0a:bd:da:e4:bd:a8:b1:39:63:56:fa:95:6b:06:f9:ce:96:
         fa:9b:88:00:78:d6:38:ac:6a:18:8d:5d:6c:be:05:e3:c2:bf:
         d8:64:5c:68:7a:0a:3a:3b:d8:49:29:21:83:62:ab:59:36:66:
         fb:9b:fa:92:db:92:4a:32:52:53:3f:5b:42:8e:0d:20:51:fd:
         8e:0e:f6:1d:38:e2:65:eb:db:11:d7:3c:f9:28:28:2c:16:9a:
         1f:96:7a:a7:0f:fb:3c:07:e5:ea:de:5e:36:ed:55:9e:4a:aa:
         7c:bb:a3:c4:91:b1:83:44:47:76:73:53:67:bf:20:b3:92:3e:
         93:05:a5:bb:f9:27:e5:97:df:7c:05:80:e3:98:1e:17:37:1a:
         10:c2:30:4d:05:e8:49:87:c8:c3:ac:b9:99:64:60:b1:79:3c:
         21:9f:ad:18:f8:15:16:fe:0f:ce:b9:af:04:b5:53:c5:89:36:
         49:d6:80:d1
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUWD5o84M2b3XBDiUG/wuEpD5FJJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl
MmE1YmIzODAeFw0yNjAzMjYwMTUzMzJaFw0yNjAzMjcwNTE1MzJaMDMxMTAvBgNV
BAMTKDRDODY1MTREQkRDOTBFREVGQkUwODFEMTFDNEE2NjcxRjM0MTY0RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyiilIMqng9NZ7OMC3xUyIaoD+
Y1tkMyteBkVTRyV0zSMbm9z9j8lh3txtCeCgclKRHMa/ovlZWASgSflhsIL1vnaE
3xQRAUNEoGpEZ8korxfpkiZ6CO0MepNHu3y0CjkU0Uu+rn3dOIPfadt+enNxeZvk
iuaU11GpbuTLjXkUFsQ2v3v2+Gw9u8LAkk1w8WDXclJBbfyTTsjvcpnJVMdGCpzt
ynExsDhIW/jc/7xtzaQKwGSQhyIx3i/AwJ6uWAa7FuIiOOr4TKRDiO/MEwsSpW3R
HkxqVFD5ZXmkzCzozqQ/QT3QPNy7k9/umyfdrXutFDhbKrV+GvLiezkjlnJfAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUTIZRTb3JDt774IHRHEpmcfNBZOYwHwYDVR0j
BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0
OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL
bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y
ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE
N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGykFfgkC6UcvNoISfeX
x25DUgNbO799zLBM61+2hw15bg2+xtBiYp8iz+L7mg60U8nbDT1VxAgm1APeEEgC
7G4ZqfYHnJtGUwq92uS9qLE5Y1b6lWsG+c6W+puIAHjWOKxqGI1dbL4F48K/2GRc
aHoKOjvYSSkhg2KrWTZm+5v6ktuSSjJSUz9bQo4NIFH9jg72HTjiZevbEdc8+Sgo
LBaaH5Z6pw/7PAfl6t5eNu1VnkqqfLujxJGxg0RHdnNTZ78gs5I+kwWlu/kn5Zff
fAWA45geFzcaEMIwTQXoSYfIw6y5mWRgsXk8IZ+tGPgVFv4PzrmvBLVTxYk2SdaA
0Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:11:24 2026 by rpki-client