Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          np0zHXf0FTnoAj4uaJAo8nJQq2Q5qWoGYrPmeEwRspU=
Subject key identifier:   E6:91:23:89:77:61:CC:03:DA:78:D6:BA:E4:99:0E:E8:DF:14:6D:5E
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       52F5DE0D30A3FBD9D396E3C746A97B82110ED11A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05BC
Signing time:             Mon 02 Nov 2026 03:39:59 +0000
Manifest this update:     Mon 02 Nov 2026 03:34:59 +0000
Manifest next update:     Tue 03 Nov 2026 06:45:59 +0000
Files and hashes:         1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: OCEh0o0BMwfS3dPcfvRrvCTYe+MKL8VvwB2S1fQlnEo=)
                          2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Nov 2026 06:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f5:de:0d:30:a3:fb:d9:d3:96:e3:c7:46:a9:7b:82:11:0e:d1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Nov  2 03:34:59 2026 GMT
            Not After : Nov  3 06:45:59 2026 GMT
        Subject: CN=E69123897761CC03DA78D6BAE4990EE8DF146D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:33:c0:48:74:8c:9b:0e:7b:05:96:db:a8:e0:
                    1d:95:36:b5:bc:df:85:ed:61:a5:88:3d:4a:39:b9:
                    2d:be:4b:76:20:bd:ce:b2:69:05:86:a7:0e:1a:de:
                    71:07:2c:65:0a:e4:d5:5a:c9:b0:7c:d4:d9:53:a6:
                    69:5a:82:20:86:42:dc:6d:8c:97:a6:78:84:00:65:
                    a6:99:94:2a:fb:95:b6:95:7f:0c:65:8b:e7:c0:c2:
                    29:8e:55:a8:18:9f:cb:59:01:20:65:cf:90:21:6b:
                    75:c4:22:26:e5:15:bf:fe:6c:73:30:60:3d:08:81:
                    c5:39:74:02:a9:14:46:74:88:47:44:34:10:2d:f3:
                    7d:0b:1b:8c:36:d9:90:48:66:32:87:fe:83:52:59:
                    80:0c:33:3c:32:0d:e4:c9:2e:48:f2:82:30:9c:0f:
                    ad:a0:67:fe:a1:f1:fd:2e:99:82:78:06:11:5b:f8:
                    f1:51:d6:38:ff:21:b5:d9:1f:5d:c0:bd:88:1b:5b:
                    63:64:c6:fd:33:db:db:63:37:4f:cd:6f:a0:f0:a4:
                    df:a2:d3:68:e1:a3:45:44:f6:e6:8d:37:e5:d8:d3:
                    c0:87:3f:6e:5e:31:c7:a3:21:bd:0b:f8:e4:48:ad:
                    32:61:41:27:c1:47:9b:fa:05:77:f8:61:ee:98:11:
                    7e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:91:23:89:77:61:CC:03:DA:78:D6:BA:E4:99:0E:E8:DF:14:6D:5E
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a1:5c:d6:0d:7d:dd:9a:95:40:7d:9c:e4:35:49:ac:fe:07:
         12:22:7a:39:27:4e:12:05:8a:5a:2f:17:86:a8:f3:d8:4f:43:
         a8:40:00:53:13:b8:b5:71:9e:19:c7:78:39:7c:a2:22:73:d6:
         32:cb:e3:d9:06:f1:75:73:b5:d7:e4:7e:94:58:0f:d5:54:4e:
         ad:67:64:9f:58:84:39:d3:b6:e7:28:11:35:36:bb:d5:61:4b:
         32:ad:fe:72:52:ac:22:60:e9:a4:ae:60:7e:0e:4d:f6:3d:7b:
         3c:fb:ba:fa:40:44:6f:93:a4:65:20:a1:e4:ce:96:16:30:9b:
         c2:15:d1:52:2a:8b:b4:17:d1:9f:e9:0c:44:a8:78:6f:62:57:
         12:5d:f0:7c:9c:c6:c0:5b:a6:07:54:7a:4e:ce:c2:8b:3c:1c:
         c8:fd:12:5c:d8:bf:11:aa:70:a3:70:e6:7b:82:ea:68:e4:df:
         8c:c2:bc:17:cd:54:45:89:b0:9a:ab:16:2b:61:ec:2f:a7:73:
         20:c8:86:16:e4:53:d2:46:02:c7:a3:b6:cc:02:ec:98:71:92:
         c8:a6:8b:ce:b1:72:cc:31:0e:31:f2:79:85:78:e8:d3:c2:d0:
         55:1e:70:9e:f6:3e:26:2d:f7:bb:9a:b7:4f:f4:d1:f7:3f:1e:
         a2:c1:b7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----