Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          ULNp3eSn/gKludV8hMfxPXRTUDH5mV7C15cZQ8m9kRQ=
Subject key identifier:   8A:1D:2C:F4:FA:54:7F:D8:AD:71:E1:DD:E0:C9:75:8C:DA:89:81:DD
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       0D2D243F7DE2F6CC70203EA88D1F725A1143969B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          04E9
Signing time:             Tue 26 May 2026 07:51:20 +0000
Manifest this update:     Tue 26 May 2026 07:46:20 +0000
Manifest next update:     Wed 27 May 2026 10:58:20 +0000
Files and hashes:         1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
                          2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: XQYUG+hXqK3dvKbBRtZnoyBIO1PtWaxaeZCMQz1nRFE=)
                          3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
                          5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
                          7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
                          8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 May 2026 10:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2d:24:3f:7d:e2:f6:cc:70:20:3e:a8:8d:1f:72:5a:11:43:96:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: May 26 07:46:20 2026 GMT
            Not After : May 27 10:58:20 2026 GMT
        Subject: CN=8A1D2CF4FA547FD8AD71E1DDE0C9758CDA8981DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:e8:40:1a:14:00:b2:6d:5f:3d:d7:a3:d8:
                    c2:e7:6c:f9:00:f1:bf:99:1f:5e:7a:ff:56:71:85:
                    fe:3d:95:20:35:17:2a:a0:e4:91:9f:83:62:41:a0:
                    c0:ca:95:20:c2:23:24:f4:86:72:00:6b:6c:c8:1c:
                    d7:29:a9:ea:e4:db:bd:2a:2f:10:67:f3:e4:ee:38:
                    13:eb:9a:24:74:32:65:44:9a:9b:ce:43:6f:c4:59:
                    1a:98:97:17:e1:ff:7b:88:52:15:f0:c4:27:41:47:
                    33:0e:ec:b4:a0:97:a2:5a:4b:99:7e:ad:16:aa:d0:
                    ce:c0:bb:c4:dd:e7:83:55:a4:c0:db:29:28:ff:d4:
                    9f:be:e0:4b:b6:b7:28:35:72:94:52:7c:c5:d8:22:
                    44:88:21:dc:c6:1c:c5:b3:af:c8:dc:06:46:4b:0b:
                    8c:a9:90:21:60:9c:d3:db:ae:a6:0c:ec:42:f0:94:
                    2a:56:a3:4c:d8:f6:d4:8a:93:73:c5:ae:64:14:77:
                    0c:e5:90:37:70:31:81:10:c7:a9:ce:80:cd:f9:0f:
                    19:c9:c6:57:a0:a2:13:4a:77:ce:0f:0f:11:0d:58:
                    5b:6d:a0:69:b6:1c:5c:03:a5:70:6b:c0:df:7e:28:
                    00:13:53:2a:98:36:a0:ac:7b:b4:a1:08:16:ee:8a:
                    49:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1D:2C:F4:FA:54:7F:D8:AD:71:E1:DD:E0:C9:75:8C:DA:89:81:DD
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:de:cf:c2:ff:41:ea:63:ef:90:a8:bc:db:8a:78:73:5d:bc:
         da:da:41:72:39:db:aa:61:09:6f:51:e9:6a:66:1c:98:03:78:
         17:09:bb:99:59:77:aa:af:ff:55:0f:0e:e1:e0:40:b2:54:fa:
         70:2c:c4:ed:69:7c:67:ca:ba:e2:a1:5f:2c:88:2d:41:ba:79:
         3b:04:3b:77:68:79:7e:70:73:0a:71:2e:13:2c:a3:e9:1f:f4:
         d6:43:b6:12:9e:9f:c0:54:b7:fe:a6:98:ed:b4:c3:96:c8:eb:
         37:b3:06:46:cb:78:ea:df:82:12:d5:f6:47:d9:cc:03:a6:a0:
         d6:df:2f:2e:55:e1:c0:d1:e1:ca:2c:85:e5:b2:3b:ba:8b:d3:
         bd:07:09:9c:5f:78:04:97:49:71:70:e2:fc:4e:bc:56:36:e1:
         66:0c:9e:7e:29:df:a3:ed:48:01:0e:45:dc:d8:f8:b4:1d:f2:
         b3:32:00:c6:65:86:ff:a6:84:5d:eb:c5:ce:a2:c1:68:ca:39:
         4c:cd:00:5a:6a:82:d6:5e:57:d2:f6:81:2f:05:9a:87:b3:32:
         ee:e0:8e:2a:23:61:f0:f9:29:1c:26:b1:c3:2a:92:57:31:0d:
         ee:f9:0e:e0:43:73:0e:49:75:92:e6:d5:e7:9b:64:2d:29:e4:
         80:d2:dc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 15:49:55 2026 by rpki-client