Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          IoC99/gRDMA5eTO1KGHq1eoI0+Aqp+Jl/RqSiBceROM=
Subject key identifier:   4A:A6:04:AE:B9:37:B3:96:D0:3F:D8:F9:55:E7:D1:E5:B8:6E:86:52
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       17380E0478E6CEF42962605A29F4545BDFD1950E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          059B
Signing time:             Thu 08 Oct 2026 14:47:28 +0000
Manifest this update:     Thu 08 Oct 2026 14:42:28 +0000
Manifest next update:     Fri 09 Oct 2026 18:00:28 +0000
Files and hashes:         1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: s3sbFahtCpuGAozPlj3Z3GdpeH0dw+76oQwMv+TNS3g=)
                          5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 14:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:38:0e:04:78:e6:ce:f4:29:62:60:5a:29:f4:54:5b:df:d1:95:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct  8 14:42:28 2026 GMT
            Not After : Oct  9 18:00:28 2026 GMT
        Subject: CN=4AA604AEB937B396D03FD8F955E7D1E5B86E8652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d9:48:e4:d7:74:dc:a3:e1:42:f8:c7:6e:31:
                    63:d4:85:8c:2c:04:c7:9c:51:ac:3e:a5:58:f0:f0:
                    81:c2:6d:67:03:80:5e:5a:a7:b4:ab:dc:f9:51:18:
                    ff:77:81:7e:e5:19:e4:cd:25:f7:a9:59:65:b5:dc:
                    93:bb:b4:aa:e7:e5:21:97:12:ba:3b:95:3b:5b:fb:
                    50:ca:dd:c1:6c:a9:e2:65:ad:01:1a:f5:68:5a:ae:
                    be:55:ba:03:ab:44:ad:de:d9:a4:cb:99:87:4d:48:
                    c3:1a:32:c9:98:ad:82:ad:7f:3b:3e:b8:c3:16:ca:
                    6e:20:dd:fb:8f:34:77:0b:34:f9:b5:91:dd:a0:03:
                    39:ae:0b:f7:ad:a9:ff:19:42:13:f6:30:7a:7c:8e:
                    c8:d6:a5:c4:30:0e:40:16:11:60:72:11:6c:eb:d9:
                    61:cd:ca:c9:b6:f0:f0:d5:b4:3b:96:a2:a7:cd:b2:
                    18:f2:be:09:7c:de:76:91:29:cd:77:ee:ad:81:47:
                    8f:19:16:74:0c:5e:4d:d0:3c:3c:a7:bb:53:8e:67:
                    f1:b0:9c:4b:68:e8:0d:72:e4:7f:b8:6e:4e:a7:b2:
                    8e:65:b8:0b:09:45:8e:cc:af:e8:c1:09:4b:13:79:
                    c8:88:4e:79:b3:c9:1b:b3:df:4e:6b:fe:06:44:72:
                    6d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A6:04:AE:B9:37:B3:96:D0:3F:D8:F9:55:E7:D1:E5:B8:6E:86:52
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:58:80:d1:54:1c:ed:b8:ab:bc:11:7f:50:20:0a:00:42:6a:
         7a:93:99:33:dd:b1:78:61:28:66:50:d3:58:86:1e:69:c8:3e:
         e3:80:a3:12:0b:e0:e9:bc:56:d6:05:c9:4e:73:75:6f:c4:9c:
         af:2a:79:45:39:e2:11:37:6b:53:19:e5:c5:c0:30:60:24:b4:
         01:dc:89:4a:60:ce:57:3c:57:bc:18:2a:b3:8b:c0:d2:1f:35:
         4a:06:65:80:7b:56:4c:9e:b5:d4:47:49:c8:d9:a8:7c:de:51:
         d3:a9:c3:25:f2:89:e5:4a:85:8e:93:aa:25:df:06:f7:5c:b8:
         f4:e2:83:69:88:04:b6:e7:a0:6f:46:97:5e:80:67:e1:4b:c1:
         16:1a:a7:e0:d8:dc:88:3c:06:ae:92:0f:08:d6:65:44:77:bd:
         55:3c:01:5e:84:71:ed:1d:45:91:6e:b7:cf:e7:d1:c3:95:c6:
         d8:10:4c:27:0b:31:41:fd:7e:de:7f:ab:53:93:24:09:a9:61:
         9b:3c:5f:76:58:0b:c6:1e:8a:a1:c0:ec:cd:2b:e2:97:b3:01:
         57:f7:70:1c:c4:0b:8d:a0:8b:4d:c3:78:de:9c:6f:e9:7f:39:
         0f:6f:d0:d2:7d:fc:21:95:f0:2f:70:27:c1:69:17:8f:56:ce:
         6a:d0:be:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----