Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          ePhElnFRy08xZkQL6uf6a/egoO3OeT7vPY6NpPzKVs4=
Subject key identifier:   66:CA:33:2F:90:9E:89:C3:FE:A4:C5:CF:EC:FE:9A:5C:E9:45:72:2B
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       6677C8F6EB2A4656114AD06475871A8A58B54183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          0583
Signing time:             Sun 20 Sep 2026 07:49:54 +0000
Manifest this update:     Sun 20 Sep 2026 07:44:54 +0000
Manifest next update:     Mon 21 Sep 2026 10:15:54 +0000
Files and hashes:         1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: dpZy4a5UAsG4mnLrM1zh05z5AOL7MnZT/GoK+FBibD4=)
                          4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:77:c8:f6:eb:2a:46:56:11:4a:d0:64:75:87:1a:8a:58:b5:41:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Sep 20 07:44:54 2026 GMT
            Not After : Sep 21 10:15:54 2026 GMT
        Subject: CN=66CA332F909E89C3FEA4C5CFECFE9A5CE945722B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:e1:04:fa:a8:2d:02:cb:a0:a9:1f:cc:76:
                    33:1b:ba:a2:44:a6:a8:04:ac:f6:c4:20:0c:2b:d4:
                    4c:0d:e9:9c:18:42:f4:45:61:0b:41:32:34:64:f2:
                    89:aa:fd:8f:3a:98:74:68:30:3d:5e:7f:e2:e3:15:
                    fa:a3:6b:d6:9b:1f:6a:bd:43:42:dd:a4:57:a1:77:
                    ec:ad:48:a9:86:9c:89:4e:c5:e3:7c:86:9f:32:f9:
                    1c:93:bd:bd:68:70:61:e2:07:ef:c4:74:78:cd:ff:
                    f4:7f:92:f5:6f:74:fa:74:5b:64:8d:00:b9:7a:41:
                    e7:b8:70:f9:5c:22:48:74:04:69:43:4a:5e:f9:f8:
                    af:ea:b8:51:26:c5:32:de:6c:17:6b:8c:02:b7:34:
                    e4:6c:5c:8e:33:ec:15:eb:a7:ee:2e:88:61:0d:3e:
                    b2:4e:50:e3:7c:18:88:f7:13:21:6e:32:53:b1:81:
                    e3:24:eb:b9:d5:4d:53:ee:16:59:c5:50:32:cb:dc:
                    7f:dd:84:58:ae:12:9d:2e:fb:fa:25:c5:bf:a3:3b:
                    32:14:9a:80:48:85:24:bb:0b:52:dd:8b:5d:ea:37:
                    12:d3:af:32:c0:19:47:3d:02:6a:31:9e:78:80:ff:
                    65:3d:f1:cf:62:dd:fe:58:5b:96:71:99:af:7b:50:
                    0f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CA:33:2F:90:9E:89:C3:FE:A4:C5:CF:EC:FE:9A:5C:E9:45:72:2B
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:18:a2:3b:3f:65:7a:a5:6f:a7:76:41:ef:b3:02:9b:44:07:
         a2:0a:4e:c9:fa:a8:d2:96:ec:f9:44:9d:e8:35:fc:9d:57:d9:
         14:5e:26:5f:f7:42:8c:f6:b5:35:01:89:02:3d:b6:d5:2a:19:
         e9:62:86:09:a3:06:34:ce:89:e2:52:c6:e9:4f:74:d6:66:74:
         50:ef:89:03:2c:d5:6f:01:20:2b:ac:4a:ca:50:41:ce:ff:df:
         7c:84:54:d5:63:8b:32:ee:a0:d9:33:ab:05:0e:76:ff:71:38:
         8b:a0:ee:76:1a:06:82:3f:40:62:2b:26:50:ff:e2:a0:d0:12:
         79:fb:54:97:88:9a:f1:13:a1:c5:66:9d:45:b8:07:9b:0d:a8:
         f6:c1:55:ed:9e:61:af:7c:98:85:0e:09:20:f9:15:0b:75:e3:
         6d:ad:5f:a3:a5:cb:1f:b9:f6:22:d8:07:a6:80:9d:34:75:40:
         b3:21:78:6d:a0:a8:cf:24:a1:c4:57:81:9d:ec:8c:29:8e:e7:
         fa:20:5d:12:83:e5:91:00:25:b0:79:34:b6:3f:c4:01:7d:bd:
         3f:23:16:75:9f:09:fc:82:bc:21:f5:94:24:2b:a2:1a:b2:cd:
         88:49:30:8e:d0:89:2b:f3:e7:4a:2a:60:03:81:d1:2c:17:f7:
         08:da:a8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----