Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          wZ6JfF7aZarjZsXELLGD3AL8qU4fAZS9tGBHcH4V8LI=
Subject key identifier:   8E:9D:36:B7:E5:B9:B9:41:85:E6:9A:ED:8F:59:30:FB:07:22:E9:1B
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       59EB2DC16339483B913360A30E36D1D762880B4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05AA
Signing time:             Mon 19 Oct 2026 20:51:18 +0000
Manifest this update:     Mon 19 Oct 2026 20:46:18 +0000
Manifest next update:     Tue 20 Oct 2026 23:00:18 +0000
Files and hashes:         1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: nFPYxJ9aU6IFM/Jm4H8WwC3INzZ3hS53Sm5av9RUS/U=)
                          7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:eb:2d:c1:63:39:48:3b:91:33:60:a3:0e:36:d1:d7:62:88:0b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct 19 20:46:18 2026 GMT
            Not After : Oct 20 23:00:18 2026 GMT
        Subject: CN=8E9D36B7E5B9B94185E69AED8F5930FB0722E91B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:82:d6:b2:65:c9:87:f0:30:f4:83:96:61:
                    59:3a:e9:07:eb:b0:09:e5:b1:00:38:f5:63:54:32:
                    77:5a:5f:23:67:c7:e7:75:99:c4:c2:bc:47:f2:1e:
                    28:56:01:39:ee:82:f0:4c:e7:5d:f0:40:90:ad:d2:
                    71:12:a3:1c:ba:dc:df:b2:c6:16:7c:b7:7d:8c:cc:
                    d6:c1:44:4e:8c:aa:92:de:6a:9a:99:7b:4f:d4:cf:
                    3e:2f:9a:25:15:3f:59:bb:b7:8f:d1:16:7d:f4:dc:
                    10:d7:bb:d7:98:8d:66:62:50:48:8e:b8:f8:2f:b5:
                    19:d8:f4:2a:6c:2a:f6:ed:97:96:f2:12:e4:54:50:
                    d1:4a:11:f1:b3:98:0f:c0:63:34:99:09:9a:c8:14:
                    6c:a2:84:1b:b6:27:8a:83:2f:f9:37:72:9b:a1:00:
                    e6:47:da:22:0e:8b:19:30:71:94:c4:42:c2:58:2e:
                    51:7e:97:af:b9:aa:82:89:47:03:e4:12:29:5d:f8:
                    2d:ca:63:3a:5c:d2:31:ef:cb:38:86:8e:72:f2:c0:
                    12:45:45:63:09:09:ec:12:10:66:e3:b1:89:c9:fc:
                    ed:a4:8a:16:ec:74:10:3e:92:c5:b9:13:b7:e2:14:
                    a7:51:53:09:c4:43:df:b5:eb:9d:db:d9:08:d8:fc:
                    37:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9D:36:B7:E5:B9:B9:41:85:E6:9A:ED:8F:59:30:FB:07:22:E9:1B
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:bd:d1:04:ca:d5:f4:29:ac:59:b0:bb:eb:8d:79:4e:23:df:
         36:07:af:b4:12:66:7c:f9:8e:22:df:db:48:1c:5f:71:74:0f:
         51:48:d3:cf:94:4c:25:12:62:04:0e:11:b6:94:d4:42:46:7f:
         5c:c7:85:ec:3d:5c:b4:d5:d9:73:80:82:10:50:21:1c:4f:77:
         b9:56:f3:e2:66:72:c5:dc:04:2b:27:72:db:f7:9c:01:ec:22:
         60:2b:98:99:6d:04:dd:4e:4e:7e:94:ff:b5:8e:7a:81:7e:2d:
         87:1f:94:f6:b7:45:43:cc:eb:43:47:bd:07:5d:70:fe:20:30:
         19:ac:49:2b:7f:76:ea:f3:28:d1:a4:ea:7d:34:98:cd:41:d5:
         ba:61:61:8c:13:4b:e5:d0:17:e1:17:66:eb:ac:67:31:2c:23:
         64:d4:f0:69:92:c3:a3:35:a7:13:8c:bf:a4:f1:62:25:d1:59:
         35:85:b5:e4:d8:68:5b:09:e5:f9:9f:15:99:5b:68:b2:41:df:
         01:0d:cc:73:5b:47:57:76:26:34:d4:68:21:c0:93:4d:7b:69:
         00:0b:e9:24:67:3e:c0:35:76:ae:44:cb:ee:11:60:75:55:d2:
         55:c5:5e:cd:80:dc:1f:88:d2:59:2a:ed:08:64:54:cc:83:12:
         db:50:23:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----