Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          NhII/X9aulfS2eiyq5TexXm2HkfNbD2oAZVXu62DLt8=
Subject key identifier:   E8:F9:62:AE:8D:C4:15:10:DA:7E:C4:13:07:D6:13:2C:AD:36:64:02
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       7237E29C7CCCCF746E8A15F93F92878A75F76781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05C0
Signing time:             Thu 05 Nov 2026 06:09:50 +0000
Manifest this update:     Thu 05 Nov 2026 06:04:50 +0000
Manifest next update:     Fri 06 Nov 2026 06:21:50 +0000
Files and hashes:         1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: rT8Y1vbsNSPuFs1dlX+Jz7qYlTZMDhAqPFZ4OZWSrSc=)
                          3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 06:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:37:e2:9c:7c:cc:cf:74:6e:8a:15:f9:3f:92:87:8a:75:f7:67:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Nov  5 06:04:50 2026 GMT
            Not After : Nov  6 06:21:50 2026 GMT
        Subject: CN=E8F962AE8DC41510DA7EC41307D6132CAD366402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ee:a6:41:11:91:ea:68:58:90:c2:e5:6b:0c:
                    dc:cc:d6:7a:10:c3:a6:12:37:42:c0:9a:29:f9:b6:
                    6f:da:8b:67:0d:c4:7f:f7:52:8b:34:dd:d8:91:cd:
                    c1:ab:4b:ec:56:51:e1:03:3f:02:2f:89:5f:5a:97:
                    13:eb:1f:57:28:58:8a:32:4e:8a:c3:51:75:4a:9e:
                    f0:1b:18:55:db:6f:13:c0:0a:b4:36:96:1c:c2:22:
                    28:ff:bd:8f:54:cd:fb:13:0c:1a:3e:14:ca:c0:6c:
                    9d:4f:91:da:8c:40:e9:7a:56:be:94:dc:54:8e:eb:
                    24:8c:9f:a7:34:7a:e1:ae:fc:17:27:6e:0c:e1:db:
                    5a:e1:ff:0a:78:3b:0a:43:44:f4:5f:a0:ed:93:fb:
                    d4:e2:b7:a3:52:cc:3d:da:00:e5:94:df:82:a0:2d:
                    77:67:f6:14:ae:68:43:cc:71:02:01:6e:a2:83:fe:
                    1b:ee:f2:25:c8:70:52:e0:f1:64:63:78:a7:96:fc:
                    5d:63:26:a0:73:a0:4c:9c:59:7e:b6:cc:4e:cb:f0:
                    49:6d:33:27:7c:35:8b:b3:6a:e9:7d:f2:a3:4d:d9:
                    43:46:c8:bd:cb:18:71:8b:64:1b:ca:dc:08:05:fe:
                    49:b4:2f:31:af:18:b3:02:61:3d:21:f5:89:40:99:
                    8a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F9:62:AE:8D:C4:15:10:DA:7E:C4:13:07:D6:13:2C:AD:36:64:02
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1b:e5:a6:ca:d2:49:a8:98:39:66:52:a0:f5:e9:70:4a:05:
         7d:10:5c:49:05:ae:83:e7:c3:7a:b6:db:00:63:9e:46:b4:98:
         5f:20:3e:92:3f:e8:79:2b:57:17:5d:d4:4d:4a:48:5d:87:a5:
         8b:5b:a7:f0:b1:4e:79:e8:f6:d1:ce:05:65:0a:06:8f:f6:43:
         f3:ee:5b:47:c5:12:2b:32:31:41:c4:29:4c:c2:c7:95:43:7f:
         9b:0d:31:f4:eb:39:61:eb:56:8a:4e:57:9a:8e:5a:0c:0e:e4:
         0c:a6:01:0e:a0:f7:0c:7e:93:ea:db:9d:f9:08:fa:bc:ba:aa:
         3c:87:19:fa:2a:a8:4e:7a:11:2d:85:fa:a7:e4:da:7d:20:ba:
         d8:7c:25:8a:86:20:ab:ff:29:da:de:d0:b9:a4:1a:2e:b2:b9:
         25:0f:97:5e:37:91:1b:f2:ec:82:83:83:4e:5d:12:12:be:50:
         37:06:55:83:0f:79:8c:21:6c:49:32:4b:e6:e6:4d:c3:1d:8f:
         d3:a5:3e:2d:21:c1:bb:62:e7:4b:07:ad:42:cd:66:25:fd:87:
         98:37:09:c2:5d:c0:17:db:b8:51:6b:b4:c6:35:7a:f8:e9:6c:
         c2:ed:16:ba:17:9d:3a:da:ef:0a:4c:84:0c:50:ac:be:c3:64:
         1c:fe:a5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----