Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          gtOD9QOWHaINvSrIEuv2UkzFH6HE1km9v2u0E02N1go=
Subject key identifier:   31:87:5A:CF:7B:28:A0:A0:77:3D:88:DA:A2:05:86:16:13:8D:F3:19
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       2F7ED8BF8CD6BC2DEA0DFDF7947611D1B30C34FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05A5
Signing time:             Fri 16 Oct 2026 03:58:35 +0000
Manifest this update:     Fri 16 Oct 2026 03:53:35 +0000
Manifest next update:     Sat 17 Oct 2026 06:48:35 +0000
Files and hashes:         1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Acq/vdJZmyJe/tgNcDLujrrxW2mqU0wUWCw2NzhfuLw=)
                          3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7e:d8:bf:8c:d6:bc:2d:ea:0d:fd:f7:94:76:11:d1:b3:0c:34:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct 16 03:53:35 2026 GMT
            Not After : Oct 17 06:48:35 2026 GMT
        Subject: CN=31875ACF7B28A0A0773D88DAA2058616138DF319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:0d:c9:1d:6a:fb:f8:57:d1:9f:43:3a:70:
                    f8:aa:3e:a0:cf:a8:75:18:e1:4b:e6:f6:0a:82:f3:
                    30:e1:e7:0f:9e:4d:66:b7:40:e4:9f:e8:e8:2c:72:
                    95:74:69:4a:89:1e:b2:1b:06:c6:26:92:af:8c:22:
                    df:b1:3d:29:90:16:f2:08:4c:21:50:07:24:f7:4c:
                    7f:65:2c:0a:25:21:17:8f:f8:a5:4d:ec:ae:56:6b:
                    f3:22:64:e2:41:03:d8:16:ac:d2:3e:c4:9e:5e:7c:
                    18:fc:64:d1:78:af:56:75:3d:24:7d:42:2e:18:5f:
                    d2:1f:5f:eb:da:1c:c0:00:7d:ff:0b:63:b2:be:a9:
                    73:5f:ab:f0:d8:d7:be:bb:41:1d:1f:46:81:b7:e2:
                    4a:0c:0f:3a:3e:9b:8f:f6:2f:bf:0d:08:20:66:58:
                    5d:0d:27:19:18:3e:01:ac:15:19:bd:ef:bc:6d:6a:
                    a1:5f:15:3d:de:3e:d9:b5:4e:5b:ef:60:1e:f5:98:
                    55:79:41:a8:a7:4a:79:3a:97:4d:40:4c:b5:cb:fe:
                    88:ae:07:3b:e5:58:1b:23:c9:1b:73:02:cb:0b:27:
                    9b:d2:53:8f:f7:4f:d4:84:61:98:44:9f:f0:ac:5c:
                    10:4a:75:31:3d:6c:88:e1:33:26:fc:90:45:00:a3:
                    a4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:87:5A:CF:7B:28:A0:A0:77:3D:88:DA:A2:05:86:16:13:8D:F3:19
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:03:fb:a2:0e:e5:ef:5b:1d:ed:13:81:06:a3:4b:b3:eb:b0:
         cb:41:9f:2c:e8:7b:83:d2:05:10:85:81:65:28:f7:e7:ee:e9:
         b6:ab:c2:0f:fb:46:30:23:0b:21:15:7d:5b:3e:47:30:c8:46:
         4d:7a:7d:09:a4:22:94:b3:3f:ff:e1:c1:95:08:9f:0e:e1:a6:
         25:a5:c9:a1:ae:b4:87:4b:be:5d:c6:c7:ee:d0:36:fb:2d:19:
         80:30:41:5b:df:e2:c5:73:6a:b7:a7:da:7c:2c:de:0b:0b:01:
         5b:23:ac:32:1a:ff:2d:8f:a5:33:cf:ee:92:02:ef:29:66:db:
         62:53:9f:4c:5a:e9:fb:bd:d9:ee:82:99:fa:97:c1:f8:37:a5:
         9c:c3:83:82:22:5b:97:f2:a9:af:2a:b6:b9:b7:7e:c0:76:df:
         6b:9a:14:e6:30:67:d5:9f:8f:47:e0:2b:1c:66:fa:e7:92:fb:
         93:ed:42:93:ed:a9:a4:b8:9f:85:1c:7f:6b:74:e8:14:11:a3:
         36:3a:ca:92:e5:4b:62:dd:a3:7e:69:b3:84:46:e7:5c:cc:94:
         29:ee:6b:af:29:ab:8d:7b:c4:8b:9a:f4:81:be:93:aa:1e:43:
         f9:d2:45:be:5c:ef:46:65:37:4d:f4:eb:39:a4:1c:e0:18:eb:
         e4:2a:2f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----