Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          vsVLLS6+qxK+Qm8r3XkzoBbMgIIUiMksJXztB3bUVis=
Subject key identifier:   B8:5C:54:A6:5E:5D:38:AF:98:0B:94:C6:2E:55:49:4C:25:E9:AC:85
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       498B4B4A85E32411B470439BB6202930C0AB097C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05A1
Signing time:             Tue 13 Oct 2026 01:18:42 +0000
Manifest this update:     Tue 13 Oct 2026 01:13:42 +0000
Manifest next update:     Wed 14 Oct 2026 02:52:42 +0000
Files and hashes:         1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 7RkPd7eR0fJDKNa8M49T5DmyAWEWPp1bvhA5Wu+ZlaI=)
                          4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 02:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8b:4b:4a:85:e3:24:11:b4:70:43:9b:b6:20:29:30:c0:ab:09:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct 13 01:13:42 2026 GMT
            Not After : Oct 14 02:52:42 2026 GMT
        Subject: CN=B85C54A65E5D38AF980B94C62E55494C25E9AC85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:16:c1:5d:26:53:dd:41:9a:a4:ab:6e:0a:11:
                    7f:5c:74:02:e6:62:26:7a:d0:01:42:ac:2e:9d:49:
                    48:2b:98:f0:17:d7:86:bf:35:f9:c8:5c:01:5c:68:
                    c9:38:3c:54:a7:06:f4:5c:07:e2:6c:67:2f:87:41:
                    44:7e:17:81:79:7d:fe:7c:b0:1a:1d:38:ba:4d:76:
                    eb:44:79:5e:56:22:7a:c7:24:84:20:df:65:ad:54:
                    ea:14:67:9f:e1:56:39:1c:09:1f:a0:b4:41:0a:90:
                    b9:3e:34:9b:3d:65:e7:e5:12:44:04:a0:7e:84:ee:
                    07:4e:b5:eb:7d:94:d2:ff:8b:ee:22:d7:a3:7f:b2:
                    0e:9e:80:1a:ad:24:b8:4e:c2:6f:cc:2a:69:1f:c9:
                    ea:e2:62:fc:13:10:ad:9c:92:8f:fc:9c:cf:23:c8:
                    04:37:b8:41:30:1d:6b:ca:b5:d7:d9:16:ef:f7:a1:
                    e6:99:8b:29:71:f5:ef:dc:73:15:fe:54:6e:2b:f0:
                    40:5e:25:70:e0:26:79:e8:08:3f:2c:64:3e:67:df:
                    4c:83:67:e3:14:3e:22:b5:32:b8:91:ea:05:eb:93:
                    fa:30:6c:1e:65:31:04:7a:6f:37:84:8c:3f:2f:80:
                    4e:59:4a:62:93:14:66:f8:11:25:92:5c:3f:30:96:
                    3a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5C:54:A6:5E:5D:38:AF:98:0B:94:C6:2E:55:49:4C:25:E9:AC:85
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b6:43:08:ca:da:95:1c:38:81:da:f5:a2:4f:86:12:eb:a7:
         08:34:fa:29:4d:02:28:02:33:c6:62:96:a8:29:54:88:95:d2:
         50:5b:31:b0:25:fa:89:86:a3:dc:46:15:14:88:c7:d5:4f:01:
         f2:70:3f:2c:21:1d:54:f0:ea:c7:38:ed:c1:5a:60:f1:c6:1b:
         1c:d1:df:60:06:98:cc:a5:df:f8:d7:98:85:ee:9f:8a:ed:a7:
         14:5e:3d:60:d3:ae:87:eb:7a:8f:b0:93:37:11:40:83:dc:8a:
         06:e9:c4:a7:9a:7b:43:95:7d:55:dc:70:e0:75:bf:7c:6d:cf:
         01:5f:42:eb:18:f8:df:ec:df:d4:28:a9:0b:53:cb:da:73:e5:
         b2:b7:4e:e0:19:ba:bc:cf:90:ab:6f:2f:6d:c7:13:ad:87:d5:
         16:4c:10:88:98:84:80:8b:f4:c4:d4:d1:3e:10:bf:09:d0:cc:
         f0:57:5f:fe:c4:b2:c5:40:55:30:1a:f7:f0:95:d6:9b:e2:b5:
         20:3f:9b:34:26:d0:ba:c2:a3:9b:50:3d:89:4a:5c:94:3a:ee:
         b0:91:e9:e3:d5:8b:1e:ef:9b:54:6f:31:d9:83:bc:b3:fd:38:
         98:26:c0:88:43:fe:c1:a0:c5:ff:b4:74:23:fc:fd:b6:2d:08:
         84:80:a0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----