Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          mLHQgqDzDAPZWS4kxsmNO6If34MngjxzfXICDIyQcHQ=
Subject key identifier:   5E:30:C1:87:60:E1:54:4A:3C:FC:16:85:6F:B6:D1:C4:7B:2B:6B:C3
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       0779E1A5B7229FD1B17768F3CBC361F3EA591322
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05A7
Signing time:             Sat 17 Oct 2026 15:40:42 +0000
Manifest this update:     Sat 17 Oct 2026 15:35:42 +0000
Manifest next update:     Sun 18 Oct 2026 16:18:42 +0000
Files and hashes:         1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 9aCoCH0EiwF4gw3mzqY1ZmBO/hHaPDR1j9Cz+tTXwE8=)
                          6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 16:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:79:e1:a5:b7:22:9f:d1:b1:77:68:f3:cb:c3:61:f3:ea:59:13:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct 17 15:35:42 2026 GMT
            Not After : Oct 18 16:18:42 2026 GMT
        Subject: CN=5E30C18760E1544A3CFC16856FB6D1C47B2B6BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:13:08:9a:62:9f:0a:bd:21:d9:d6:ab:02:
                    27:36:ae:6a:e4:0c:d2:0d:f8:3d:02:39:d3:d9:bc:
                    b4:a8:c9:ce:16:62:5c:6f:62:f6:5f:69:1b:93:88:
                    b8:4f:28:bf:42:03:40:26:b4:73:ee:15:31:2c:78:
                    f5:20:fe:37:bd:68:45:7a:23:8b:31:73:5a:ed:dd:
                    e4:6e:4b:e9:14:ce:a9:a6:d5:f1:09:7f:ed:50:db:
                    71:65:71:1e:2e:32:0c:9e:24:07:f7:67:af:81:4a:
                    53:b0:c9:e3:ea:a1:ba:b8:96:0c:1b:f5:3a:7d:f4:
                    e8:08:0f:17:fa:c4:2a:91:ed:db:59:ec:fa:e9:e7:
                    e6:55:61:0e:9e:a5:26:30:9e:12:5b:5c:4d:f6:25:
                    05:53:7d:13:20:73:5a:c8:14:1c:cb:25:0f:35:0a:
                    2c:54:19:cb:42:87:05:ed:57:b3:83:f4:41:8f:de:
                    27:43:4f:52:00:9e:b5:f0:e6:95:1f:7f:44:4a:c3:
                    08:61:0a:8d:c7:ce:c2:71:46:6b:78:66:37:20:f0:
                    4c:cf:88:09:13:b3:61:57:7c:ae:25:9a:ea:66:48:
                    44:40:14:1b:2d:e3:1e:1f:86:05:93:0b:77:81:2f:
                    45:39:67:9d:90:25:fa:6d:ab:31:df:7d:ff:fa:0f:
                    39:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:30:C1:87:60:E1:54:4A:3C:FC:16:85:6F:B6:D1:C4:7B:2B:6B:C3
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:14:d9:3a:26:da:5c:ba:ad:c5:e3:8f:87:d9:6f:c8:07:47:
         55:dd:bf:1b:a2:39:0c:ad:d1:92:4f:b2:66:e7:32:d7:46:79:
         04:be:3e:d0:95:94:3f:52:64:dd:cd:dd:00:a3:9e:c3:99:cb:
         9c:3d:64:0f:b8:53:f3:0a:31:b7:2c:84:a9:69:a9:79:73:9f:
         92:0c:c7:57:bd:f7:ef:75:77:33:2a:f6:29:be:bf:95:ea:bd:
         ca:d0:83:c3:1a:f7:c9:78:0d:0b:80:a5:b9:72:d2:be:5a:56:
         20:09:b3:cf:7b:9a:f4:d2:dd:e2:15:f9:5f:1a:84:18:4a:c8:
         48:92:cc:c3:82:4f:cf:ba:c3:fc:a6:90:cd:df:34:f1:a0:81:
         ba:ba:bd:46:09:28:8e:b3:3d:f5:ef:89:a7:d4:1a:2b:6d:1f:
         88:b9:50:e7:b7:30:8c:99:d5:11:87:c5:2e:f7:30:4a:e2:d0:
         53:90:cc:06:a5:cf:3b:0a:0e:2b:11:0a:d1:43:0f:59:0b:19:
         db:c0:84:e9:ce:85:8c:f2:87:9d:aa:38:be:ca:69:50:d4:e0:
         2c:cc:8e:6d:aa:4a:5b:97:6d:b8:bd:3b:d3:fc:15:a3:2c:4c:
         e4:ee:ad:c0:48:c0:e9:b8:27:7f:1e:2d:da:55:a8:80:18:99:
         b4:fd:ff:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----