Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          a2IgxOumPmC2cLtAQ5EAA/KrKYQbjGl09PhBnp3b3I0=
Subject key identifier:   11:3A:74:2B:71:F2:E0:31:6C:95:A6:D2:B5:B6:5C:4A:9A:8D:2C:E7
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       559BBB9B15D7D7AFBF71A3FDB5BC4A7CA1B7F5A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          059A
Signing time:             Wed 07 Oct 2026 21:44:04 +0000
Manifest this update:     Wed 07 Oct 2026 21:39:04 +0000
Manifest next update:     Thu 08 Oct 2026 22:44:04 +0000
Files and hashes:         1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: E3Cr72wkwi2tTuwmSiltunY7FuuAhg60KPVoFnuQiPo=)
                          5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9b:bb:9b:15:d7:d7:af:bf:71:a3:fd:b5:bc:4a:7c:a1:b7:f5:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct  7 21:39:04 2026 GMT
            Not After : Oct  8 22:44:04 2026 GMT
        Subject: CN=113A742B71F2E0316C95A6D2B5B65C4A9A8D2CE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:46:15:1d:ba:1b:7e:75:c6:37:0d:7f:bd:
                    df:5a:64:53:c1:29:c6:9c:68:7d:c8:a0:0d:ac:50:
                    22:55:8c:ce:09:d7:db:e3:5e:0d:d0:6b:a8:b4:fd:
                    c3:18:3a:ec:80:1a:71:a6:81:4e:00:e0:5a:ea:5b:
                    dc:dc:49:88:5c:1f:7a:fe:4f:06:a0:de:df:aa:55:
                    a0:ea:d9:ef:dc:61:5d:c9:87:1a:93:d4:c3:bd:df:
                    94:10:f7:51:b2:07:74:7f:e9:3f:b7:2b:3d:f2:24:
                    cc:b3:ad:b5:56:a3:c4:d2:1c:fb:68:7b:ea:36:ce:
                    d8:84:3d:34:6a:4a:35:59:24:d2:26:8a:fa:1a:db:
                    ff:f4:c9:e9:fa:99:43:9f:a0:e4:2e:80:e6:6b:cc:
                    a5:f0:4d:d7:5a:00:1a:9e:d6:7d:e1:e4:4d:19:7c:
                    ed:e1:27:90:00:c0:a7:38:06:d0:28:e3:bc:5f:89:
                    33:29:4e:f4:93:5d:6a:3d:2d:ae:59:b0:45:f7:52:
                    98:65:3c:15:0c:f0:22:cd:71:38:98:7a:49:e6:9d:
                    d8:0f:69:bd:e6:db:d2:af:9b:dc:b3:db:b2:c8:93:
                    9d:cb:bc:b8:66:16:7e:28:15:03:ac:ec:f5:2e:36:
                    79:5f:b3:9f:b7:15:07:8c:d6:c1:bb:75:72:83:46:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3A:74:2B:71:F2:E0:31:6C:95:A6:D2:B5:B6:5C:4A:9A:8D:2C:E7
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:cf:70:57:c4:83:4d:8f:39:4b:e4:cd:e5:3f:1e:d7:57:8e:
         05:14:4d:b9:8a:c7:97:cc:95:79:7d:14:61:56:10:47:41:1a:
         2e:cc:9e:55:ef:59:14:16:db:c8:17:f8:36:fb:11:c3:0f:2c:
         b7:8e:f3:a3:cd:6b:63:63:13:ee:b3:95:81:06:0e:75:9f:9e:
         58:de:98:5f:60:19:0f:39:26:25:21:23:41:20:ed:83:e6:7c:
         c6:a9:30:ac:d6:aa:c6:6e:45:70:e3:a9:ba:b2:3b:57:17:56:
         e0:a7:88:04:7f:e0:bb:8c:c2:04:ba:80:ec:b2:59:78:1f:c8:
         8b:46:8e:28:7d:71:8c:88:1b:35:ee:0f:4c:a5:83:6e:be:8b:
         1a:29:b5:49:a1:2d:8a:dd:e5:55:10:ff:7e:86:65:16:b1:37:
         df:ca:48:93:19:f5:00:13:7d:36:d9:17:f0:67:be:df:3f:33:
         65:27:75:e7:d4:89:0f:de:9d:51:f0:c5:ec:0e:8a:eb:52:85:
         ca:76:f2:16:83:f8:03:29:c9:94:52:08:88:83:78:8c:43:08:
         44:ce:71:03:82:05:53:af:64:80:07:ca:26:4c:85:da:6c:e2:
         ea:fb:b9:8a:76:b5:94:bb:b7:8e:2f:eb:19:77:86:1a:53:b8:
         07:d9:67:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----