Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          Nj+/Rd+GKColqRqH65pUNn/sCQT44rU62KhDJVhxJVM=
Subject key identifier:   4D:7C:59:89:FF:7E:1D:9C:CC:A9:AB:82:B4:A7:AF:27:BF:65:FD:CF
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       71EAEDFBF070C770F0FCA148CD7F10059CA9C192
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          0595
Signing time:             Sun 04 Oct 2026 03:41:07 +0000
Manifest this update:     Sun 04 Oct 2026 03:36:07 +0000
Manifest next update:     Mon 05 Oct 2026 05:31:07 +0000
Files and hashes:         1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: NjA912JAxvy8CZCPKrZC/cPgR8B+X7/bLaNK02tb9bc=)
                          2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ea:ed:fb:f0:70:c7:70:f0:fc:a1:48:cd:7f:10:05:9c:a9:c1:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct  4 03:36:07 2026 GMT
            Not After : Oct  5 05:31:07 2026 GMT
        Subject: CN=4D7C5989FF7E1D9CCCA9AB82B4A7AF27BF65FDCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f3:a2:10:f8:7e:c3:c2:2f:5a:36:b4:e3:61:
                    6f:1e:74:0a:3c:64:5d:f0:7e:aa:c8:7a:fa:16:66:
                    1b:61:bb:04:de:de:46:bd:be:a8:41:d1:b6:9a:e8:
                    a1:46:bc:33:a5:b4:a8:5e:b4:a7:f5:3d:9a:60:03:
                    e5:ef:7d:4b:9c:fa:4a:47:28:d4:3a:62:47:0d:04:
                    0e:10:1b:28:49:fc:99:2e:07:4b:24:e0:d7:a3:18:
                    8b:a5:bf:71:4b:6d:43:45:88:1a:df:61:71:ff:ef:
                    6b:61:e8:aa:54:4b:4d:09:be:9e:fd:79:d5:26:2d:
                    b1:62:32:3b:ea:56:30:ee:2b:4c:b2:ce:74:f6:88:
                    77:85:e5:e9:f1:ff:ed:ef:0b:7c:6a:6f:67:57:47:
                    c6:1d:16:35:45:c0:7b:9e:81:38:b5:5d:fc:3f:6f:
                    3f:ef:46:b5:cd:b6:77:b2:64:6e:3a:90:5f:ac:b9:
                    2b:a4:79:89:18:00:35:30:5c:40:b4:82:f9:a1:33:
                    dc:c0:23:e2:23:46:bc:a3:85:40:34:08:f6:40:07:
                    01:61:b5:4a:5a:b9:83:d7:a0:e3:12:71:48:8b:07:
                    b4:e2:bf:f0:44:45:b8:ae:4c:6c:32:d6:7f:be:71:
                    ff:c9:4c:2a:ce:f6:a4:f2:2b:66:96:e8:92:e2:27:
                    e5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7C:59:89:FF:7E:1D:9C:CC:A9:AB:82:B4:A7:AF:27:BF:65:FD:CF
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e3:50:7f:02:a3:ac:cd:2f:58:4b:34:8d:8e:b8:10:8c:27:
         f6:bc:93:dc:89:dc:12:6a:eb:75:24:59:13:c3:b8:71:b9:2b:
         08:fb:3b:6d:c6:02:03:f6:9a:0c:ed:ba:fe:ff:e1:f8:b4:b6:
         91:4b:8b:33:63:96:fc:5f:cb:fb:de:4a:a0:69:6a:d4:4f:29:
         b2:d7:98:66:54:32:22:8d:f2:2e:4f:6b:0c:4a:63:f8:ff:74:
         70:40:45:3a:1c:49:ee:67:d6:2e:41:67:87:66:5e:c5:ce:0a:
         b9:74:79:ec:bc:86:35:ed:2c:c9:61:99:29:f4:fa:b3:48:ed:
         4d:00:f0:66:06:30:8f:35:fe:03:f5:aa:28:fa:63:f2:84:bb:
         3c:07:ae:c8:28:8e:95:a0:91:e2:ab:22:b3:7c:1c:21:e1:1f:
         3a:a8:c1:b9:6f:25:93:35:00:6b:3f:2d:60:9a:06:a8:a2:97:
         35:6c:db:6d:8e:fa:21:09:2b:a0:8d:07:a4:1f:20:36:97:b1:
         9c:15:39:c3:7c:db:0c:cc:ad:f1:30:04:59:eb:64:42:cf:ab:
         e3:9c:16:3c:57:5a:8c:f0:c3:4e:68:54:f8:05:fd:eb:16:3a:
         34:83:2a:fc:f3:d3:4f:ed:2f:d6:77:31:ec:8e:0f:e6:95:87:
         39:fa:c8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----