Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          WScbmKV/x9nzm5j64baufxVZhQDXf1ZxwJZ/zye75c0=
Subject key identifier:   B6:99:99:17:A4:84:9B:F2:D6:C5:44:9A:E2:46:73:80:3F:8C:5D:A9
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       52A85A4C18E929B69CCF8EFA5F39A23C8BBCC69E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05B7
Signing time:             Thu 29 Oct 2026 10:37:12 +0000
Manifest this update:     Thu 29 Oct 2026 10:32:12 +0000
Manifest next update:     Fri 30 Oct 2026 11:55:12 +0000
Files and hashes:         1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: +zRYjgATodGozXddevTHZleKQDWzh6P7Gj+s6ZfS2LY=)
                          2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a8:5a:4c:18:e9:29:b6:9c:cf:8e:fa:5f:39:a2:3c:8b:bc:c6:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct 29 10:32:12 2026 GMT
            Not After : Oct 30 11:55:12 2026 GMT
        Subject: CN=B6999917A4849BF2D6C5449AE24673803F8C5DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7c:3a:b3:81:16:de:e9:06:b7:0d:a7:46:78:
                    8e:89:c6:5f:e6:30:9c:0e:99:f2:5e:df:c0:d3:56:
                    3f:03:a6:33:4f:d2:4b:41:2b:1a:a2:eb:c2:80:ba:
                    a7:bc:bf:dd:14:dd:84:7d:36:99:96:95:44:21:87:
                    26:68:cb:0c:2d:40:9f:d4:ed:c9:10:82:0f:40:7e:
                    ea:7b:d2:9a:60:c7:ce:66:f0:96:5e:2e:57:dc:57:
                    b5:8c:5b:9b:3f:54:a8:fa:47:7e:37:73:c0:af:9d:
                    5a:d1:b3:cf:7f:4e:fa:7c:1e:e8:1d:79:7e:97:12:
                    71:a0:39:dc:98:8f:7b:0c:f3:b7:7f:b5:15:85:6b:
                    5e:1e:dc:bc:5e:bf:0d:86:d8:e5:32:6c:af:68:93:
                    62:b9:14:45:9f:db:96:96:a6:c7:1b:64:66:03:c8:
                    bb:f8:b6:c6:5a:d5:e3:a5:35:1a:68:f4:d0:bc:2b:
                    0a:2d:d4:89:f5:24:dd:16:02:d4:e1:5c:0a:d5:bf:
                    5f:b5:1b:91:2e:a7:fc:51:84:1d:90:65:b4:51:18:
                    18:0d:b1:b2:dc:a0:42:97:2b:40:6d:22:dc:fc:ed:
                    cf:0a:10:b6:37:ac:a6:44:60:35:50:de:8f:90:4f:
                    14:fd:21:18:22:b9:6c:25:da:05:9c:62:f3:a3:fc:
                    b5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:99:99:17:A4:84:9B:F2:D6:C5:44:9A:E2:46:73:80:3F:8C:5D:A9
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:50:1d:7e:60:b9:36:49:14:26:4e:b4:fd:6e:61:93:44:97:
         a7:9e:31:7f:69:65:4a:ed:a1:77:96:47:87:9c:54:c6:a1:4a:
         0d:9e:6b:15:94:5a:d1:bc:12:6a:d5:31:2e:52:d2:8b:4d:b6:
         6b:8b:8f:d2:8c:c1:17:e5:f6:24:4a:69:71:fe:4b:1d:cd:f8:
         54:30:76:88:32:16:62:a7:d8:17:fd:3f:d5:7a:cc:fb:c0:1c:
         ca:1a:53:ce:55:e4:a7:8f:4e:c5:d7:57:fd:20:46:a5:0c:87:
         a0:03:bd:50:83:0f:35:57:bc:70:10:11:eb:a1:24:bf:ee:72:
         a4:6c:f3:f7:aa:09:52:bf:cb:dd:d7:ec:29:29:a2:45:fe:bd:
         1e:8a:0f:58:00:61:4a:45:99:a2:5d:28:95:38:0c:80:31:ac:
         54:ae:89:c3:4c:8e:f1:b3:72:8f:3d:72:55:06:d1:4f:22:d9:
         a6:18:49:22:ca:2a:d0:d4:ef:d0:90:70:45:2d:1b:14:aa:51:
         a8:9c:98:06:1f:ee:69:77:c4:2a:ba:69:a7:93:ad:89:5d:2c:
         f5:7f:94:c0:37:8b:7b:f7:cf:69:f9:b1:8b:66:5c:e4:ff:8f:
         af:56:04:22:fc:da:80:34:0e:a6:65:a3:e9:dc:49:66:dd:29:
         fa:9a:14:eb
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUUqhaTBjpKbacz476XzmiPIu8xp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0
N2RjZWVlYTAeFw0yNjEwMjkxMDMyMTJaFw0yNjEwMzAxMTU1MTJaMDMxMTAvBgNV
BAMTKEI2OTk5OTE3QTQ4NDlCRjJENkM1NDQ5QUUyNDY3MzgwM0Y4QzVEQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1fDqzgRbe6Qa3DadGeI6Jxl/m
MJwOmfJe38DTVj8DpjNP0ktBKxqi68KAuqe8v90U3YR9NpmWlUQhhyZoywwtQJ/U
7ckQgg9Afup70ppgx85m8JZeLlfcV7WMW5s/VKj6R343c8CvnVrRs89/Tvp8Hugd
eX6XEnGgOdyYj3sM87d/tRWFa14e3Lxevw2G2OUybK9ok2K5FEWf25aWpscbZGYD
yLv4tsZa1eOlNRpo9NC8Kwot1In1JN0WAtThXArVv1+1G5Eup/xRhB2QZbRRGBgN
sbLcoEKXK0BtItz87c8KELY3rKZEYDVQ3o+QTxT9IRgiuWwl2gWcYvOj/LX9AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUtpmZF6SEm/LWxUSa4kZzgD+MXakwHwYDVR0j
BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx
MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm
Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03
ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD
Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlAdfmC5NkkUJk60/W5h
k0SXp54xf2llSu2hd5ZHh5xUxqFKDZ5rFZRa0bwSatUxLlLSi022a4uP0ozBF+X2
JEppcf5LHc34VDB2iDIWYqfYF/0/1XrM+8AcyhpTzlXkp49OxddX/SBGpQyHoAO9
UIMPNVe8cBAR66Ekv+5ypGzz96oJUr/L3dfsKSmiRf69HooPWABhSkWZol0olTgM
gDGsVK6Jw0yO8bNyjz1yVQbRTyLZphhJIsoq0NTv0JBwRS0bFKpRqJyYBh/uaXfE
Krppp5OtiV0s9X+UwDeLe/fPafmxi2Zc5P+Pr1YEIvzagDQOpmWj6dxJZt0p+poU
6w==
-----END CERTIFICATE-----