Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          SrWNHzKGMh5+YrV2PxAJL8ZcFNfV8Ej2Xgrw9eeolFg=
Subject key identifier:   1B:B9:06:E6:62:63:3C:CC:49:56:DA:AC:D6:D8:F9:55:E6:2A:B8:4F
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       2DD8050853F396055845C53D358F5BC8A2BE3169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          058E
Signing time:             Mon 28 Sep 2026 18:35:22 +0000
Manifest this update:     Mon 28 Sep 2026 18:30:22 +0000
Manifest next update:     Tue 29 Sep 2026 22:32:22 +0000
Files and hashes:         1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: pdEW+X0qkl+zkj3OBxfEzj+Jq2c3YEkXXzwElL688wQ=)
                          3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 22:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d8:05:08:53:f3:96:05:58:45:c5:3d:35:8f:5b:c8:a2:be:31:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Sep 28 18:30:22 2026 GMT
            Not After : Sep 29 22:32:22 2026 GMT
        Subject: CN=1BB906E662633CCC4956DAACD6D8F955E62AB84F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0e:46:71:31:9f:35:3a:34:d5:8c:9e:7c:3b:
                    38:c9:04:42:08:ac:da:bd:66:ef:80:f3:7a:82:6a:
                    27:89:57:d6:4f:24:a4:9a:5b:ed:b8:a5:63:e6:f3:
                    49:c8:ea:d1:72:8b:89:c0:71:56:33:2b:d6:49:10:
                    e6:7a:a2:49:a1:31:d0:1d:84:57:22:d9:a0:7f:b1:
                    17:2a:e6:b8:26:4d:b1:8e:ac:d5:09:9c:a8:6f:4b:
                    77:d2:be:53:94:e7:b7:95:b0:f8:dc:2e:94:a5:c0:
                    4d:e2:e3:f1:07:b1:eb:fd:71:47:c1:d5:03:94:b7:
                    f9:89:b7:0a:8f:f3:1d:33:f8:24:74:80:98:b0:26:
                    f5:bd:a8:9f:ef:90:8d:ec:ac:f3:6e:1d:bd:00:50:
                    31:01:fc:20:97:8e:b1:ef:3a:44:e6:9e:6f:ac:56:
                    dd:a7:1c:cb:cd:2a:d9:06:42:06:b2:1a:24:41:fc:
                    a4:f4:52:00:f8:cc:e2:80:14:f9:b4:21:0c:59:91:
                    b7:38:0f:f9:10:7c:47:94:f8:f7:b0:d8:56:f4:40:
                    41:72:2b:e6:a3:57:f8:68:42:af:d8:7c:a2:13:37:
                    56:4b:da:ca:2d:2d:76:42:2c:31:2c:f6:ef:d3:2b:
                    7f:0d:ae:f0:eb:57:8c:46:1a:b3:ce:01:34:36:23:
                    ce:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B9:06:E6:62:63:3C:CC:49:56:DA:AC:D6:D8:F9:55:E6:2A:B8:4F
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:db:ba:04:b1:07:02:26:2f:07:cb:88:fc:60:b9:99:68:e3:
         24:7d:91:24:b3:4d:af:17:1c:10:25:69:34:33:f2:dc:31:49:
         2f:98:95:85:64:8f:75:fc:56:b7:bf:ae:dd:08:b1:23:5a:ab:
         14:04:0e:1f:ef:e3:ff:04:c4:36:e1:b9:6c:c8:e5:29:4f:a3:
         94:b1:76:eb:66:d2:1d:0c:4e:8e:ab:b6:ca:17:84:a9:33:4b:
         8b:70:14:b0:ef:29:0f:0d:cd:ce:28:51:a9:16:0c:02:37:0c:
         1e:eb:55:f9:fc:f4:31:fa:cb:e9:0d:a1:84:5a:3b:d2:89:1c:
         10:2c:68:8b:a9:a9:4e:5e:60:be:cf:57:ac:9a:fa:ca:0c:da:
         ab:b9:b8:5f:e4:28:eb:22:fb:c3:b8:07:d6:b8:ea:c9:c0:5c:
         0f:49:1e:21:0f:b3:dd:cf:71:a1:5c:e4:ba:08:5c:90:70:8f:
         9d:11:1f:77:3f:b2:ac:be:2a:5d:52:d1:81:28:a6:72:2e:18:
         6c:5b:50:9b:30:40:b5:7d:34:16:45:fd:13:4a:8c:9f:21:62:
         b1:e4:03:38:66:a1:f5:dd:9b:4f:7d:cf:35:d6:78:5c:69:42:
         b1:66:b7:d7:b0:87:df:d3:3c:9f:6d:39:e4:01:07:4f:63:93:
         6a:80:b3:8d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIULdgFCFPzlgVYRcU9NY9byKK+MWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0
N2RjZWVlYTAeFw0yNjA5MjgxODMwMjJaFw0yNjA5MjkyMjMyMjJaMDMxMTAvBgNV
BAMTKDFCQjkwNkU2NjI2MzNDQ0M0OTU2REFBQ0Q2RDhGOTU1RTYyQUI4NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeDkZxMZ81OjTVjJ58OzjJBEII
rNq9Zu+A83qCaieJV9ZPJKSaW+24pWPm80nI6tFyi4nAcVYzK9ZJEOZ6okmhMdAd
hFci2aB/sRcq5rgmTbGOrNUJnKhvS3fSvlOU57eVsPjcLpSlwE3i4/EHsev9cUfB
1QOUt/mJtwqP8x0z+CR0gJiwJvW9qJ/vkI3srPNuHb0AUDEB/CCXjrHvOkTmnm+s
Vt2nHMvNKtkGQgayGiRB/KT0UgD4zOKAFPm0IQxZkbc4D/kQfEeU+Pew2Fb0QEFy
K+ajV/hoQq/YfKITN1ZL2sotLXZCLDEs9u/TK38NrvDrV4xGGrPOATQ2I85FAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUG7kG5mJjPMxJVtqs1tj5VeYquE8wHwYDVR0j
BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx
MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm
Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03
ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD
Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtu6BLEHAiYvB8uI/GC5
mWjjJH2RJLNNrxccECVpNDPy3DFJL5iVhWSPdfxWt7+u3QixI1qrFAQOH+/j/wTE
NuG5bMjlKU+jlLF262bSHQxOjqu2yheEqTNLi3AUsO8pDw3NzihRqRYMAjcMHutV
+fz0MfrL6Q2hhFo70okcECxoi6mpTl5gvs9XrJr6ygzaq7m4X+Qo6yL7w7gH1rjq
ycBcD0keIQ+z3c9xoVzkughckHCPnREfdz+yrL4qXVLRgSimci4YbFtQmzBAtX00
FkX9E0qMnyFiseQDOGah9d2bT33PNdZ4XGlCsWa317CH39M8n2055AEHT2OTaoCz
jQ==
-----END CERTIFICATE-----