Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          98RhnWxu5HzsNeDCfdkQF7B+qOIk7mBckjlUa4hbjx0=
Subject key identifier:   04:25:6D:9C:BE:7B:7A:4F:F6:CA:0F:C6:F9:69:FD:AC:EE:57:29:86
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       41D8BEC2D0F9C243EC520236152FBA148B61E24F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05C6
Signing time:             Mon 09 Nov 2026 22:07:12 +0000
Manifest this update:     Mon 09 Nov 2026 22:02:12 +0000
Manifest next update:     Wed 11 Nov 2026 00:34:12 +0000
Files and hashes:         1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: nu0q7zonJrz1Aw3btovM7/ULeMIHaqcqfgzi9M+gQwE=)
                          8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Nov 2026 00:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d8:be:c2:d0:f9:c2:43:ec:52:02:36:15:2f:ba:14:8b:61:e2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Nov  9 22:02:12 2026 GMT
            Not After : Nov 11 00:34:12 2026 GMT
        Subject: CN=04256D9CBE7B7A4FF6CA0FC6F969FDACEE572986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d6:07:32:c8:bc:ef:ba:7d:f1:80:5b:27:fd:
                    04:2c:44:fc:f2:2e:a6:30:de:78:e5:3c:ab:31:a6:
                    ba:76:ec:94:ae:e9:6b:98:76:ef:c6:f0:a8:7e:52:
                    b8:13:c6:e1:5d:a4:be:2b:24:ba:54:97:2e:e3:4a:
                    8b:13:ac:4d:dd:37:d0:5d:51:ad:77:a0:35:d6:93:
                    76:aa:91:d4:94:65:4c:06:52:b0:f3:ef:44:b6:20:
                    c0:60:cd:4a:08:d9:ff:dd:7f:db:9a:70:77:56:32:
                    1a:77:21:c2:52:31:8a:24:39:7b:c8:bf:87:33:39:
                    8c:df:2b:03:38:8c:c3:dd:aa:d3:a5:9a:46:a8:b6:
                    3b:cc:fa:6e:40:68:6a:17:e6:13:bc:92:ca:6a:45:
                    da:db:c2:2b:ac:46:69:40:3b:91:90:ea:1a:9d:dd:
                    d4:cc:ae:62:26:f9:65:aa:26:18:e1:b7:3d:a3:66:
                    e7:21:1f:d6:58:eb:f9:5c:24:b1:5a:f4:56:d5:0e:
                    67:e6:71:e6:37:bb:7e:9d:7e:0c:70:24:76:52:db:
                    43:f2:11:48:65:50:94:49:cb:7d:e6:5c:91:ca:2a:
                    18:e5:8b:00:77:14:f7:3a:d3:9a:5a:41:a9:5b:06:
                    44:60:d5:19:85:f1:9f:4d:3a:a5:e8:66:16:2a:13:
                    b9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:25:6D:9C:BE:7B:7A:4F:F6:CA:0F:C6:F9:69:FD:AC:EE:57:29:86
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fc:52:26:44:84:49:ca:54:fc:54:81:ea:16:72:04:95:23:
         80:9c:d9:72:82:84:dc:70:47:05:6a:0a:fa:9b:34:1c:a5:f7:
         eb:a5:52:57:f1:76:98:88:7b:d7:10:76:45:ed:62:0b:6d:89:
         04:25:49:24:1a:53:71:96:22:76:4a:7e:58:19:24:e7:e0:c9:
         cf:4c:81:b8:54:58:88:95:ec:60:f3:04:fe:54:51:0c:b7:fc:
         88:85:43:10:d9:9e:d3:11:99:37:9c:50:0b:7e:6d:e4:97:89:
         76:50:64:de:bb:2e:7d:12:89:00:9b:9e:39:e9:d8:98:45:87:
         cb:3e:2c:ca:5e:f6:71:ec:d8:78:b0:15:9e:40:a5:9d:e8:fb:
         77:61:6d:13:41:50:c0:32:ab:22:ac:aa:2d:1c:2d:8d:d2:b2:
         8f:0c:aa:04:41:a2:fc:ad:05:f5:25:63:13:7d:c1:73:2c:ca:
         58:c0:bf:12:83:21:06:2e:d1:14:cd:e2:15:0e:13:39:d1:0e:
         ed:5c:68:16:32:ae:44:83:b0:12:72:ea:78:ca:9f:07:7a:86:
         52:eb:e0:8e:fd:34:99:28:a7:69:2c:c4:9a:5f:b1:66:c3:5d:
         52:bc:65:7f:28:e4:03:ac:3c:e4:40:df:24:00:82:bb:cf:8d:
         1d:d1:6c:ae
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUQdi+wtD5wkPsUgI2FS+6FIth4k8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0
N2RjZWVlYTAeFw0yNjExMDkyMjAyMTJaFw0yNjExMTEwMDM0MTJaMDMxMTAvBgNV
BAMTKDA0MjU2RDlDQkU3QjdBNEZGNkNBMEZDNkY5NjlGREFDRUU1NzI5ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY1gcyyLzvun3xgFsn/QQsRPzy
LqYw3njlPKsxprp27JSu6WuYdu/G8Kh+UrgTxuFdpL4rJLpUly7jSosTrE3dN9Bd
Ua13oDXWk3aqkdSUZUwGUrDz70S2IMBgzUoI2f/df9uacHdWMhp3IcJSMYokOXvI
v4czOYzfKwM4jMPdqtOlmkaotjvM+m5AaGoX5hO8kspqRdrbwiusRmlAO5GQ6hqd
3dTMrmIm+WWqJhjhtz2jZuchH9ZY6/lcJLFa9FbVDmfmceY3u36dfgxwJHZS20Py
EUhlUJRJy33mXJHKKhjliwB3FPc605paQalbBkRg1RmF8Z9NOqXoZhYqE7kTAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUBCVtnL57ek/2yg/G+Wn9rO5XKYYwHwYDVR0j
BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx
MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm
Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03
ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD
Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfxSJkSEScpU/FSB6hZy
BJUjgJzZcoKE3HBHBWoK+ps0HKX366VSV/F2mIh71xB2Re1iC22JBCVJJBpTcZYi
dkp+WBkk5+DJz0yBuFRYiJXsYPME/lRRDLf8iIVDENme0xGZN5xQC35t5JeJdlBk
3rsufRKJAJueOenYmEWHyz4syl72cezYeLAVnkClnej7d2FtE0FQwDKrIqyqLRwt
jdKyjwyqBEGi/K0F9SVjE33BcyzKWMC/EoMhBi7RFM3iFQ4TOdEO7VxoFjKuRIOw
EnLqeMqfB3qGUuvgjv00mSinaSzEml+xZsNdUrxlfyjkA6w85EDfJACCu8+NHdFs
rg==
-----END CERTIFICATE-----