Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          USGzJwNEWqQKp0CW0k+z3oZlqju5+oeoVTz/eepMeZI=
Subject key identifier:   13:01:71:73:0F:DA:59:57:94:1F:52:72:CD:2F:C5:3E:A5:2F:F2:2E
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       6F9862E66504309B6902624A5EDBF8993C8246E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          0586
Signing time:             Tue 22 Sep 2026 15:51:06 +0000
Manifest this update:     Tue 22 Sep 2026 15:46:06 +0000
Manifest next update:     Wed 23 Sep 2026 18:36:06 +0000
Files and hashes:         1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: oAoC1PRB/CwwscO8V7RtduMMiEURdLzPfcAVpeQLwPQ=)
                          7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:98:62:e6:65:04:30:9b:69:02:62:4a:5e:db:f8:99:3c:82:46:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Sep 22 15:46:06 2026 GMT
            Not After : Sep 23 18:36:06 2026 GMT
        Subject: CN=130171730FDA5957941F5272CD2FC53EA52FF22E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:77:ff:de:85:f6:cb:74:c4:c3:89:37:bb:ea:
                    d6:c0:a2:35:5b:42:55:a0:31:f7:5a:03:1c:f2:b9:
                    28:96:29:18:36:13:66:26:c3:6e:87:b5:36:3d:ef:
                    5a:c5:2f:11:de:fe:d2:29:b7:38:08:01:c4:0e:11:
                    47:ce:67:29:1b:8a:1e:b8:91:ab:3a:33:08:c1:4a:
                    90:eb:0f:bb:f6:95:aa:1c:ab:ee:59:62:3d:df:3d:
                    6f:0c:7e:12:4f:bf:a5:ec:ff:03:84:8c:fc:c6:54:
                    f4:2b:a8:5a:6e:e1:ce:eb:dd:2e:90:9f:ef:7c:6e:
                    a9:5d:30:a3:7e:81:90:da:e2:81:b9:1d:9a:ed:0e:
                    80:30:3f:e0:e1:d3:8c:75:30:0c:33:b7:f9:a3:07:
                    8e:16:05:d2:84:7f:a3:a3:9f:f7:b1:1d:3b:c4:d8:
                    c9:9b:4d:26:44:31:15:8b:c4:d2:fb:fc:b5:1c:38:
                    a1:71:74:85:56:a9:12:ee:de:92:8b:95:9e:06:fc:
                    c4:9d:7f:0f:be:06:8f:03:91:e7:71:89:06:7d:74:
                    59:9b:9b:46:33:50:df:70:18:57:67:63:5c:c7:3f:
                    c5:f6:14:b1:a5:a5:ef:bf:9e:1b:0b:6f:0e:f0:78:
                    c8:bf:c6:c1:c1:c9:9c:57:83:b1:cf:a3:5e:d2:06:
                    68:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:01:71:73:0F:DA:59:57:94:1F:52:72:CD:2F:C5:3E:A5:2F:F2:2E
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:8c:6f:06:6c:ca:29:2a:24:16:bb:7f:90:fb:be:d8:67:ad:
         29:14:d6:3b:51:ac:b7:b7:8c:34:22:95:f0:19:af:83:fc:4a:
         04:48:41:f6:ab:7d:6e:4b:ec:59:2a:4a:9b:81:91:e8:52:3f:
         66:16:42:d0:d6:cc:92:7e:1d:5c:33:9a:fa:1f:47:f5:c2:a4:
         0f:3e:db:5b:7a:36:61:9c:77:fc:9c:9a:73:36:2b:46:ab:57:
         09:55:83:c8:97:d6:ca:a4:bd:e2:71:98:62:e0:55:59:14:3b:
         4f:28:8d:fa:1b:f6:04:f7:d1:e7:09:0a:96:60:0e:c2:5d:d3:
         d7:ed:13:2f:f2:a0:1f:9d:8b:d1:18:9e:0f:1c:8d:28:46:60:
         fb:04:4e:62:7f:ae:a4:b8:19:34:a4:85:a8:82:1f:00:59:d2:
         0b:42:71:fc:eb:b7:76:2f:81:0a:d4:88:cc:96:e2:e6:39:08:
         56:8d:1d:f7:de:09:13:1f:06:fb:53:81:31:d4:11:53:d2:d1:
         f1:07:dc:e2:ca:2b:62:02:ae:8e:ee:a8:a7:1a:14:59:37:23:
         75:0d:d6:b8:8e:a4:58:4a:25:4d:58:27:d7:9b:23:d8:86:94:
         af:16:0f:1a:68:be:62:5a:c2:03:53:6c:26:b7:48:96:17:45:
         b2:e4:fe:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----