Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          PeLKV0larNzzMV3SOfeXSdpE7gDMHgQ7HFl8rAN5m9M=
Subject key identifier:   27:29:31:E1:FC:F8:E7:8C:57:4B:15:35:DC:27:77:E5:42:83:83:C6
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       342ED13FE9E5CDA9F4CA456AA297DBC910484B49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          053C
Signing time:             Tue 28 Jul 2026 11:26:59 +0000
Manifest this update:     Tue 28 Jul 2026 11:21:59 +0000
Manifest next update:     Wed 29 Jul 2026 15:12:59 +0000
Files and hashes:         1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
                          4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
                          5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
                          6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
                          7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: sxSmGTUbGo2wKB8aSKrdUaqharzf/xHq7lHTH1+qFl8=)
                          8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2e:d1:3f:e9:e5:cd:a9:f4:ca:45:6a:a2:97:db:c9:10:48:4b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Jul 28 11:21:59 2026 GMT
            Not After : Jul 29 15:12:59 2026 GMT
        Subject: CN=272931E1FCF8E78C574B1535DC2777E5428383C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9f:d4:05:3f:54:38:9b:73:c9:4f:6b:41:72:
                    89:da:ef:71:91:62:5c:62:bb:a1:fe:d6:05:de:e4:
                    d4:45:11:aa:3b:be:93:e7:ef:38:b9:9d:dd:30:fa:
                    51:d4:ca:6a:c0:3e:b8:b4:92:2a:a5:6f:10:5c:41:
                    8f:15:1b:01:f4:ff:8a:b9:81:fa:e4:fe:0d:68:3c:
                    99:26:14:21:43:a4:ab:a9:5b:14:27:77:c9:e0:4c:
                    b3:85:bc:fa:a9:ce:f8:02:f4:84:91:a4:9f:d3:2e:
                    57:58:08:62:bf:06:c9:b6:71:a0:34:53:4c:c7:86:
                    5c:59:5d:c4:70:2b:e1:b1:65:d9:5c:d4:14:0b:28:
                    de:d1:ff:83:e5:ab:27:3d:1a:c8:31:55:1d:cc:1b:
                    50:52:21:96:d0:bb:5c:81:97:95:f8:53:20:15:e9:
                    77:df:87:9d:f2:bf:48:04:b7:71:e5:c4:46:76:2a:
                    3e:4e:bc:48:1d:f5:29:24:b0:b3:86:86:5c:ff:d2:
                    5d:96:05:5a:0c:c3:c1:aa:c1:eb:c2:83:4c:38:c8:
                    81:d2:68:4e:d9:e3:de:bf:2d:0a:25:84:4f:e0:6d:
                    09:97:aa:06:d8:a0:70:db:ea:13:35:80:ff:ae:01:
                    98:39:b5:d2:d3:05:87:37:d9:1b:24:fe:1e:f9:36:
                    d2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:29:31:E1:FC:F8:E7:8C:57:4B:15:35:DC:27:77:E5:42:83:83:C6
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:af:c8:e6:f2:a8:8c:4c:3c:d4:7f:6c:eb:81:fc:ed:2d:a1:
         9d:8f:d1:48:28:0e:a2:62:8e:ac:5c:a5:ac:07:ef:96:49:d6:
         19:4d:e1:8d:67:f5:cf:d0:00:5c:93:8f:f9:7d:83:c2:7e:f4:
         5f:83:7f:17:7c:4a:3c:42:20:f8:7c:87:65:68:3a:ce:94:5c:
         3d:ba:1f:29:33:b3:a8:fd:e2:5d:43:73:1a:3b:93:c2:9d:ea:
         36:b9:54:e5:7a:d9:95:6c:ee:4d:ea:6f:97:1f:36:b6:d2:05:
         0c:2a:24:4a:b7:e1:cb:ae:8b:bd:1d:d1:d1:d3:9f:ca:43:ab:
         eb:ac:7e:b5:ef:3b:75:33:8e:2b:af:f3:41:f3:7a:ca:60:5e:
         dc:81:c6:c7:4f:84:3d:ef:8e:a2:df:42:c4:3b:ae:fa:c5:83:
         d7:34:02:33:e9:b0:f8:4d:ac:33:c0:1b:5f:3e:a1:b3:3d:9f:
         40:eb:c6:82:a9:7b:fa:77:9f:50:b9:f4:08:fe:73:15:f3:83:
         c1:a9:39:40:58:99:4f:27:92:06:bb:7f:43:d8:9b:98:b6:82:
         d2:bc:4f:5f:3a:1a:3e:57:b9:92:78:5a:0b:ce:e6:c6:3e:b0:
         bb:d2:b5:af:e0:b5:bf:93:b2:d6:04:da:24:76:96:9a:3e:ef:
         18:94:a1:be
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUNC7RP+nlzan0ykVqopfbyRBIS0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0
N2RjZWVlYTAeFw0yNjA3MjgxMTIxNTlaFw0yNjA3MjkxNTEyNTlaMDMxMTAvBgNV
BAMTKDI3MjkzMUUxRkNGOEU3OEM1NzRCMTUzNURDMjc3N0U1NDI4MzgzQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3n9QFP1Q4m3PJT2tBcona73GR
Ylxiu6H+1gXe5NRFEao7vpPn7zi5nd0w+lHUymrAPri0kiqlbxBcQY8VGwH0/4q5
gfrk/g1oPJkmFCFDpKupWxQnd8ngTLOFvPqpzvgC9ISRpJ/TLldYCGK/Bsm2caA0
U0zHhlxZXcRwK+GxZdlc1BQLKN7R/4Plqyc9GsgxVR3MG1BSIZbQu1yBl5X4UyAV
6Xffh53yv0gEt3HlxEZ2Kj5OvEgd9SkksLOGhlz/0l2WBVoMw8GqwevCg0w4yIHS
aE7Z496/LQolhE/gbQmXqgbYoHDb6hM1gP+uAZg5tdLTBYc32Rsk/h75NtIRAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUJykx4fz454xXSxU13Cd35UKDg8YwHwYDVR0j
BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx
MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm
Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03
ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD
Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhq/I5vKojEw81H9s64H8
7S2hnY/RSCgOomKOrFylrAfvlknWGU3hjWf1z9AAXJOP+X2Dwn70X4N/F3xKPEIg
+HyHZWg6zpRcPbofKTOzqP3iXUNzGjuTwp3qNrlU5XrZlWzuTepvlx82ttIFDCok
Srfhy66LvR3R0dOfykOr66x+te87dTOOK6/zQfN6ymBe3IHGx0+EPe+Oot9CxDuu
+sWD1zQCM+mw+E2sM8AbXz6hsz2fQOvGgql7+nefULn0CP5zFfODwak5QFiZTyeS
Brt/Q9ibmLaC0rxPXzoaPle5knhaC87mxj6wu9K1r+C1v5Oy1gTaJHaWmj7vGJSh
vg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:54:48 2026 by rpki-client