Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          inESbNiD30Zo5nxuCylS9oc0e5XE+ub4ouiBW+6kdAg=
Subject key identifier:   39:BE:A9:FB:C5:B2:A8:2A:80:B9:E5:D2:11:B7:A7:87:7C:A3:3A:13
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       6AA58DB82C5D28F90123A55A3A6811A243E9BE71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          057E
Signing time:             Wed 16 Sep 2026 12:41:42 +0000
Manifest this update:     Wed 16 Sep 2026 12:36:42 +0000
Manifest next update:     Thu 17 Sep 2026 15:14:42 +0000
Files and hashes:         1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: f9yed8mvnpCTkxaS7njtZqUy9TKwt8W/2ebqkvN5rA0=)
                          6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Sep 2026 14:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a5:8d:b8:2c:5d:28:f9:01:23:a5:5a:3a:68:11:a2:43:e9:be:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Sep 16 12:36:42 2026 GMT
            Not After : Sep 17 15:14:42 2026 GMT
        Subject: CN=39BEA9FBC5B2A82A80B9E5D211B7A7877CA33A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ec:57:f0:a7:fa:dd:aa:71:aa:4a:bc:d4:bb:
                    5c:b8:07:7e:a0:33:04:6a:b2:77:4c:52:13:20:23:
                    66:34:9a:b9:04:eb:1b:61:cb:5c:95:f8:08:5a:6a:
                    a4:79:31:d9:90:97:2c:9b:7a:40:46:c0:cd:57:30:
                    5f:84:7d:f4:c5:dc:e1:e6:d8:5d:32:04:10:77:ba:
                    06:8c:7a:ca:c8:d4:54:09:21:3c:fd:67:71:ec:b1:
                    cb:6a:b7:37:39:82:af:73:d3:05:47:54:f8:fd:5d:
                    e1:39:1b:36:06:d6:22:21:47:44:d5:12:e9:f6:03:
                    d8:c5:84:b8:79:05:a7:92:d8:60:43:be:c2:c8:28:
                    b8:e9:07:93:9b:9b:2c:09:63:cc:f5:6c:75:e6:f9:
                    b8:2d:9d:b8:50:d8:ce:43:4a:46:e3:fb:d1:3b:8e:
                    16:81:6e:51:a8:7c:b4:f4:8a:6b:8c:fc:78:44:9a:
                    ce:f7:4b:4b:27:6b:fb:8e:c6:41:02:4e:10:e9:7a:
                    cd:ac:cf:ee:fc:36:e8:6c:9d:a9:64:1b:00:dd:6e:
                    82:2b:38:8a:e9:8b:7b:28:45:33:f0:76:c7:54:48:
                    00:ce:7e:b4:3a:8c:08:82:ae:3f:d3:5d:9e:09:8a:
                    b3:1c:a5:ff:39:35:e8:c7:91:d8:6b:b1:0c:96:9f:
                    e5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BE:A9:FB:C5:B2:A8:2A:80:B9:E5:D2:11:B7:A7:87:7C:A3:3A:13
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:04:08:bb:ae:96:19:93:5a:79:15:c6:84:38:5a:1c:4a:2d:
         6c:14:e4:45:64:c2:16:c9:db:9d:cc:cd:0c:5c:12:07:bc:3a:
         59:86:22:1e:51:03:9c:1e:11:c6:35:52:0b:e4:a9:d0:70:dc:
         9b:1e:23:42:55:14:8d:10:6b:1d:7d:19:e5:8c:c1:5f:4a:f7:
         68:32:e4:9a:cb:5c:29:d9:b7:b0:81:23:38:d6:e0:0d:45:58:
         dc:1c:06:b3:81:82:fe:19:6a:d0:6e:3b:04:d8:48:11:c8:9e:
         48:f3:4c:c8:bf:86:65:b6:8c:90:8b:57:e4:a0:3d:e6:ca:24:
         bc:81:62:29:31:50:0d:3d:65:d6:f0:76:7e:f4:ee:3a:8a:3b:
         5d:78:49:88:32:cd:c9:5f:29:3d:16:28:e8:c3:55:36:0b:aa:
         2b:27:37:dc:80:69:46:27:92:c0:12:45:5a:33:40:60:9d:a9:
         0c:d7:ba:3b:9d:f7:25:ef:c6:23:19:14:a6:f0:dc:97:67:e5:
         7e:35:36:b5:39:91:af:b2:52:00:2a:22:d5:6f:7b:06:7d:07:
         f6:03:f6:80:b8:82:34:8b:74:34:5b:c1:31:f9:39:ff:9f:66:
         a7:06:32:00:04:dc:4f:e1:4f:14:d7:e3:ad:d1:5d:0b:c6:78:
         f3:cd:0d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----