Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          QmH8E4MlGmK4H+cwnQVe64oWG2S7o8bRgXILB3v7slY=
Subject key identifier:   86:A3:73:3E:9F:24:F7:5F:98:EA:88:13:68:3B:DE:03:5C:97:29:E4
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       554AFC3CEC978699ADAED1856F2A7FBC70DEEE4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          058C
Signing time:             Sun 27 Sep 2026 04:27:46 +0000
Manifest this update:     Sun 27 Sep 2026 04:22:46 +0000
Manifest next update:     Mon 28 Sep 2026 07:37:46 +0000
Files and hashes:         1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: cNrQ5OWeHB0moSQJMCXXzK9ewBx7ul01k9srHmwuNXg=)
                          6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4a:fc:3c:ec:97:86:99:ad:ae:d1:85:6f:2a:7f:bc:70:de:ee:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Sep 27 04:22:46 2026 GMT
            Not After : Sep 28 07:37:46 2026 GMT
        Subject: CN=86A3733E9F24F75F98EA8813683BDE035C9729E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9b:a2:1f:09:b6:37:0f:a4:e9:c2:86:11:3f:
                    79:05:56:d0:d0:c4:46:f2:a0:20:57:c8:2f:ac:e0:
                    50:94:1c:ed:5e:02:1e:0e:2c:19:d6:35:01:b4:12:
                    61:e6:54:61:06:56:38:c6:f9:00:3b:d1:0e:e4:0a:
                    3b:aa:5f:19:7b:28:3f:c9:11:bf:f7:54:86:a2:8c:
                    ca:2b:43:24:0d:ef:1c:93:ba:61:e2:79:48:72:19:
                    eb:a9:8d:dd:3f:46:aa:f4:5e:53:ee:12:e9:23:5d:
                    e2:00:79:95:c8:ce:1f:11:68:84:7a:c4:b9:60:3e:
                    dc:83:40:78:19:59:6e:d0:6c:d1:65:85:b7:58:02:
                    36:d3:56:3e:07:47:02:36:4a:22:e5:b6:3c:9a:82:
                    d6:38:b8:58:13:77:d7:b8:6c:1e:89:92:ad:39:fa:
                    7e:e0:55:ac:ef:49:48:f5:60:5b:24:75:e8:90:91:
                    53:7f:99:d8:08:01:7d:a9:22:91:50:91:13:15:04:
                    e7:79:f6:33:16:14:55:ee:0b:5a:62:3e:48:a1:cb:
                    c3:fc:0e:7e:df:ca:e3:de:26:94:fd:e4:5f:c6:d3:
                    ad:ca:ea:7b:c2:a8:0a:c1:3e:61:ee:c6:70:1d:c1:
                    b0:a5:58:05:2b:22:fb:d8:d6:1c:3d:69:da:fd:a7:
                    3b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A3:73:3E:9F:24:F7:5F:98:EA:88:13:68:3B:DE:03:5C:97:29:E4
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b5:74:47:dd:ba:26:e1:3a:a2:41:41:8c:93:27:80:d9:56:
         98:08:d9:a3:d1:ee:42:65:79:fe:45:ff:78:d1:fd:3f:a4:8f:
         ed:f0:30:72:e9:35:22:ac:37:00:9b:49:e9:4e:b7:13:1c:e3:
         56:a7:3e:70:98:91:e2:5c:2c:51:96:cc:73:94:5f:8f:ec:45:
         c4:fc:49:81:35:78:7f:5c:8a:50:40:fd:a5:12:0c:80:75:0f:
         1f:80:48:63:28:69:5f:63:10:a7:47:23:50:be:9c:7a:cb:1d:
         0a:3a:61:34:c1:e7:c7:5b:2d:1b:37:c9:19:af:65:71:65:e4:
         12:04:19:e2:85:02:08:f1:1e:05:24:f4:40:58:04:32:78:02:
         38:a8:cc:6c:0c:5b:63:f3:43:01:7b:bb:c6:6d:34:ca:a2:d2:
         e7:85:94:74:09:47:fe:09:3c:f7:b2:9d:5c:5b:d0:e1:95:84:
         64:e9:0f:a0:cb:a1:e7:4f:72:bb:f6:f6:67:e1:b0:a8:2c:16:
         c1:91:6b:66:4a:dd:9d:f9:ab:b0:e8:53:63:43:e2:f2:36:da:
         49:f0:f7:07:f8:f6:6a:c4:98:5c:af:3f:71:c1:88:0e:c6:6c:
         5f:50:2d:8b:df:72:7d:6b:66:51:5b:f2:9e:b4:a6:80:3e:a4:
         f1:e3:01:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----