Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          LY3i80wYMYJ9sen1Q/n+b7/gV5PMWoLpQHKeLfK/8UY=
Subject key identifier:   F5:41:47:1D:BE:2E:1E:04:15:78:27:A2:05:2B:26:AE:17:F8:7F:C5
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       356419A9D63B19EEF18150133542A4D8CE21A368
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          0577
Signing time:             Fri 11 Sep 2026 02:40:47 +0000
Manifest this update:     Fri 11 Sep 2026 02:35:47 +0000
Manifest next update:     Sat 12 Sep 2026 04:57:47 +0000
Files and hashes:         1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: f7y24rXwD4Cbw0hVw7M1LzNT+pSM3YJxApmEMOvY69U=)
                          3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 04:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:64:19:a9:d6:3b:19:ee:f1:81:50:13:35:42:a4:d8:ce:21:a3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Sep 11 02:35:47 2026 GMT
            Not After : Sep 12 04:57:47 2026 GMT
        Subject: CN=F541471DBE2E1E04157827A2052B26AE17F87FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c9:e5:3b:3a:b0:cf:cc:a5:51:18:9a:3c:2a:
                    67:de:96:f8:69:47:b1:b4:d2:f5:c8:1e:07:36:5c:
                    f1:33:5d:b8:a8:3d:23:05:2b:26:59:a9:df:e4:77:
                    36:f0:88:17:b7:83:4b:1c:8a:08:1c:3f:bc:81:c2:
                    25:26:f7:86:9e:19:b8:df:55:61:f0:a5:42:87:6e:
                    fa:15:e5:22:d7:df:85:f4:44:3c:cd:18:92:3d:e7:
                    15:96:06:3f:24:b6:3e:6b:0e:db:73:a3:f6:61:cb:
                    8e:8e:73:c9:95:27:e0:93:46:ff:f8:1a:6d:15:6f:
                    23:2c:c4:98:49:df:72:4b:95:9f:99:1e:74:36:56:
                    55:e3:94:e0:2e:fd:e0:f8:f1:fc:0d:08:9a:27:30:
                    e9:da:e5:00:70:1f:18:8f:0a:23:66:a9:6e:41:7e:
                    77:b0:66:f0:a8:80:d6:9e:a1:04:d7:7c:45:b0:7c:
                    2d:e4:d2:5c:1f:d7:93:43:07:fc:cf:fb:78:6f:8d:
                    4f:2b:61:d7:3f:92:09:df:11:e9:72:70:3e:59:c2:
                    8b:93:94:16:88:d2:08:2a:54:88:b9:e5:97:bc:64:
                    3f:4a:02:1f:36:6d:0d:96:64:bc:db:fa:cb:60:fc:
                    24:7d:3a:21:4d:0e:5d:5a:0a:02:dc:89:ae:e7:b7:
                    70:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:41:47:1D:BE:2E:1E:04:15:78:27:A2:05:2B:26:AE:17:F8:7F:C5
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:aa:81:21:10:da:ff:f3:ca:41:50:ea:ad:92:c0:ff:df:4a:
         10:da:60:9f:25:d0:b6:da:84:7a:20:2c:6b:7b:e0:06:c0:25:
         40:ca:ee:5e:0a:c9:50:66:4e:da:a5:82:23:34:90:80:fc:a1:
         6a:92:60:87:99:c4:4c:50:f8:24:9c:44:cc:68:2f:2a:2c:9a:
         7b:b1:7e:ec:00:37:94:64:41:51:23:ae:b0:70:f5:74:ce:04:
         72:46:4f:28:aa:da:dc:9d:cc:fd:91:94:49:16:4c:e6:95:92:
         0a:06:fe:a6:a7:84:39:f4:86:98:0b:e2:95:c8:55:a1:32:51:
         44:0d:0c:10:1e:db:b1:98:8b:ee:97:76:07:2a:32:f0:77:e1:
         1f:fa:82:f0:89:44:38:b7:69:13:43:1b:cf:12:39:d4:8b:86:
         d2:e3:47:1a:74:49:c0:ba:3e:97:77:cf:03:f5:8f:99:6a:34:
         1b:9a:18:1c:19:ee:cb:3b:ef:f8:7b:a0:01:8c:ef:7d:aa:c5:
         f8:e6:7c:41:f9:ce:30:c8:b7:2d:c7:d4:b9:f4:9f:74:19:99:
         fb:82:35:35:34:d7:3e:80:11:7d:12:e2:c5:7a:72:2b:7b:9b:
         12:28:7c:00:b3:4c:8f:05:78:61:1b:5e:62:d7:7a:d1:6b:7c:
         e2:ba:ae:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----