Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          zAqjxZy9M+lJEWhxDB1O4G1cuPU9PB5awh7kvXS9EZw=
Subject key identifier:   7C:10:01:34:24:C2:2C:25:B2:C9:FD:57:9F:3A:8C:6A:A0:60:0E:F2
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       44BEC4FEC6359E78F4FDD3642FA6B1934CBE12CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          0574
Signing time:             Tue 08 Sep 2026 18:29:33 +0000
Manifest this update:     Tue 08 Sep 2026 18:24:33 +0000
Manifest next update:     Wed 09 Sep 2026 22:00:33 +0000
Files and hashes:         1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: o4Sf+wPXPQ+eP2wrLgJuOrXLDRpIeqe/3C9vvoctpok=)
                          8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Sep 2026 22:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:be:c4:fe:c6:35:9e:78:f4:fd:d3:64:2f:a6:b1:93:4c:be:12:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Sep  8 18:24:33 2026 GMT
            Not After : Sep  9 22:00:33 2026 GMT
        Subject: CN=7C10013424C22C25B2C9FD579F3A8C6AA0600EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:1b:83:b9:7f:f4:45:d7:58:2e:c1:61:d3:6d:
                    b2:76:30:c0:0b:74:ab:e7:aa:79:7f:1a:86:c6:ad:
                    63:a9:ea:bb:57:a3:bb:c1:eb:f2:57:33:82:6a:d7:
                    90:fa:bc:5e:e0:d1:66:5c:8a:64:f9:ae:7e:ab:c0:
                    d6:b8:26:4e:70:db:9c:34:e1:f2:dc:64:28:74:a4:
                    37:f6:b6:4d:e9:9b:d4:57:08:56:0e:68:9f:76:82:
                    3a:c2:86:98:ef:c7:7d:1b:67:48:e3:63:46:89:f7:
                    6e:a9:6e:4a:8c:a7:4b:56:7c:30:00:03:3d:c6:3b:
                    f6:6b:e7:74:7d:9c:0e:c8:3b:57:09:40:af:a9:28:
                    7b:4a:89:40:1c:cd:76:3d:a1:4c:ff:f5:4b:23:cc:
                    f4:86:63:eb:ac:84:37:59:72:ec:6c:1c:fd:74:e0:
                    4f:e1:18:a9:0e:db:e1:8d:a6:22:8a:0f:86:0c:a5:
                    1a:ab:f3:c3:c4:8b:3a:43:d9:c3:bc:ab:cb:ed:37:
                    1f:93:2b:e9:b0:da:35:c4:85:b2:83:f3:22:35:5a:
                    82:e0:cf:71:6d:eb:04:d4:ff:4c:89:eb:62:84:d5:
                    72:57:38:2a:b9:54:32:38:3a:0c:bf:69:06:38:5e:
                    3d:de:34:60:86:b4:11:b5:59:7a:b2:54:6d:e1:3c:
                    53:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:10:01:34:24:C2:2C:25:B2:C9:FD:57:9F:3A:8C:6A:A0:60:0E:F2
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ed:82:cd:4d:6a:11:2a:10:88:88:41:7c:a3:b6:0c:6e:41:
         f4:51:b4:24:75:a7:87:dd:b5:b0:8c:c4:39:27:fb:8f:76:a4:
         8a:24:99:99:6c:0d:94:3a:18:ec:5f:27:e4:ef:b5:44:7a:d6:
         1d:6a:f1:54:4b:6d:9b:d8:b9:b8:f1:58:d8:4d:39:8a:7b:d9:
         31:5a:6d:51:1b:0b:b8:0b:34:79:ea:8e:b4:6b:6e:91:d2:ae:
         f9:68:cd:42:4f:90:a6:7c:3f:96:28:cb:16:58:b7:75:17:f2:
         7c:3e:68:99:98:20:fd:89:3e:73:7c:2f:52:2f:d8:78:e0:a7:
         1f:f6:44:11:48:b1:83:84:56:bd:a1:7c:83:dc:53:54:ab:57:
         58:b3:7b:cd:c8:95:c7:92:53:86:29:a6:11:7c:f3:87:b6:0a:
         0e:91:e3:ba:15:a4:fe:70:81:46:58:1f:5a:bd:a5:1d:8b:9b:
         da:ea:b4:53:a5:03:4d:47:19:19:21:8b:a4:97:fa:da:50:b6:
         0b:e2:9b:31:bb:2b:1f:04:37:38:51:21:82:2a:a0:24:ee:94:
         d9:f4:ae:20:ed:92:b1:06:0d:a1:81:0e:bb:39:e3:7f:9e:63:
         ec:9b:8b:99:a4:28:8b:66:78:d5:4c:3e:3f:68:e0:b7:ab:58:
         38:d0:7b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----