Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          jy8yJEHBSf59S2fPG+qMJ/7MjNwDAR94mS+4jSS7fXw=
Subject key identifier:   B5:D0:F7:A6:7B:11:B4:5C:2B:2D:6B:D4:C7:D1:28:A1:35:2D:0C:B9
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       465180D0CC4797276C42D047373AA08D9EDDFB38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          0578
Signing time:             Fri 11 Sep 2026 20:59:26 +0000
Manifest this update:     Fri 11 Sep 2026 20:54:26 +0000
Manifest next update:     Sun 13 Sep 2026 00:46:26 +0000
Files and hashes:         1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: F+Mkv497E13iNgFm2alS4CnMIUJTu9AUmm3RjlgKPic=)
                          2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Sep 2026 00:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:51:80:d0:cc:47:97:27:6c:42:d0:47:37:3a:a0:8d:9e:dd:fb:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Sep 11 20:54:26 2026 GMT
            Not After : Sep 13 00:46:26 2026 GMT
        Subject: CN=B5D0F7A67B11B45C2B2D6BD4C7D128A1352D0CB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a3:01:0d:f3:88:ed:71:29:4d:da:d0:1c:9c:
                    af:cf:0e:0d:48:c3:08:20:4e:69:fe:df:29:1c:5d:
                    5f:33:89:51:50:a8:d8:dd:3d:44:19:42:6a:a0:f0:
                    a0:37:3b:5d:8e:a5:88:16:13:d3:7e:47:d9:b9:e6:
                    27:01:e7:3b:36:b2:18:39:81:e0:28:71:46:01:70:
                    4f:8f:82:27:df:47:18:26:4d:c9:f0:b6:3f:d7:42:
                    5f:0e:8d:9f:a2:76:68:35:5c:6d:6f:54:62:2a:c7:
                    95:3d:3d:25:d5:a5:a4:74:8c:f8:50:12:2f:28:f3:
                    cf:07:37:b8:1a:0c:7b:01:ab:52:77:3f:7f:e7:27:
                    ae:fe:41:28:13:1a:ea:45:00:e2:d8:c3:a0:8e:22:
                    23:48:96:2b:a3:7e:0e:94:e8:2e:09:81:1e:6f:95:
                    71:31:15:79:70:fd:7b:50:f1:7b:52:12:e2:6c:3d:
                    1a:b9:61:12:ab:48:fc:06:3e:be:f5:d4:cc:8b:eb:
                    b9:98:4d:59:fb:8b:b9:3c:1f:78:92:a4:42:95:e2:
                    dc:c0:eb:5f:93:da:a1:f4:f9:44:8c:d0:09:cf:59:
                    3f:53:65:b1:c9:bc:32:b2:35:73:af:2b:de:65:e4:
                    60:82:93:d4:60:92:9a:d0:b2:9e:59:60:a5:25:00:
                    6f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D0:F7:A6:7B:11:B4:5C:2B:2D:6B:D4:C7:D1:28:A1:35:2D:0C:B9
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ae:27:9e:0f:f8:88:e8:a9:48:74:0f:e8:c9:14:13:64:66:
         e2:2f:5d:b5:3f:ae:3d:cf:ba:b4:4a:0e:cc:94:af:6b:32:37:
         e8:20:64:dd:5a:f5:83:d6:95:0d:9b:2e:29:c3:88:b3:98:e3:
         7f:74:aa:71:26:01:e9:22:d9:40:20:f8:02:e4:4e:b5:6d:3b:
         16:8f:7f:b2:2d:a8:fc:d2:e2:ba:55:32:7d:32:eb:81:df:7c:
         14:a7:55:ca:75:91:19:d9:19:32:29:c2:70:9d:86:1d:a8:f5:
         a3:67:8e:76:1b:0f:7a:d5:32:fa:64:c8:f1:8a:04:eb:58:d8:
         f9:b2:3f:73:60:4b:28:1d:03:fe:e5:56:f0:4e:3e:bc:5e:ed:
         34:ea:56:8e:53:c5:2a:58:b1:c6:b8:56:8d:ea:c8:9f:ac:69:
         08:04:9f:bc:7a:aa:23:86:32:6e:2b:1c:fd:76:31:bf:1d:bf:
         39:41:7a:9f:d0:c5:bd:67:d4:72:d2:96:e9:92:24:9c:5f:56:
         ac:73:02:b2:d4:1f:07:5a:dd:1b:5d:b0:72:51:32:0d:7f:de:
         33:26:aa:dd:ff:7b:ae:c5:cb:4a:23:5f:e6:60:4c:92:95:0b:
         da:f5:00:76:25:17:79:3f:11:c8:4b:62:b1:4d:c9:14:29:ce:
         a3:6a:56:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----