Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          Z9vTWjj6I8FLjrdZjs0uI46q+tvUQJCjJJlNVIdO5Y8=
Subject key identifier:   EB:52:53:09:1E:73:49:C0:EE:AD:35:E7:08:A2:67:CC:E1:74:07:72
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       444F35D93A3B50B53529755FCCFDC7CCC448037E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05A9
Signing time:             Mon 19 Oct 2026 02:27:38 +0000
Manifest this update:     Mon 19 Oct 2026 02:22:38 +0000
Manifest next update:     Tue 20 Oct 2026 04:50:38 +0000
Files and hashes:         1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: PbCtQ1IMmXdCx1vEjaaRWBrEqxBCk8wrcJmzMIvpw7E=)
                          3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 04:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4f:35:d9:3a:3b:50:b5:35:29:75:5f:cc:fd:c7:cc:c4:48:03:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct 19 02:22:38 2026 GMT
            Not After : Oct 20 04:50:38 2026 GMT
        Subject: CN=EB5253091E7349C0EEAD35E708A267CCE1740772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:de:8e:8e:64:fc:0a:af:55:95:4c:71:3a:8f:
                    07:09:33:3b:9a:5a:89:48:3c:43:11:42:0f:de:a3:
                    43:d4:36:be:5b:ac:b4:61:de:f0:14:92:91:9d:53:
                    57:34:34:7a:26:71:83:eb:9d:a7:b8:a3:54:70:6e:
                    ef:fb:b7:3d:11:ea:64:71:11:c8:b9:4e:e6:c1:4b:
                    dc:51:1f:a8:10:8f:64:83:16:dd:55:46:0f:74:37:
                    a6:b7:af:5b:db:52:1f:ac:f5:0a:2b:fa:c7:e4:56:
                    b0:44:13:91:05:ba:03:ad:0b:bd:94:a7:9a:00:d2:
                    b2:94:7a:b8:2b:29:ee:c8:04:7e:07:70:b8:8f:82:
                    1e:b4:fa:43:cd:d8:ee:80:3a:0d:0c:ae:58:0c:33:
                    fe:48:6f:5b:59:27:f8:33:15:e4:32:19:8b:16:8c:
                    07:27:7b:29:f6:24:71:f1:e7:6f:5e:0e:43:a3:da:
                    62:f9:86:be:1b:6a:58:4f:c2:4d:ae:cc:c2:0a:1f:
                    8b:49:de:5e:20:e7:60:a7:a3:70:01:d6:c2:43:48:
                    f0:37:42:c1:0b:b5:19:ab:2d:f1:08:d7:70:5e:1f:
                    9f:b4:8d:9d:b9:66:74:5c:6f:5f:8e:0f:bb:6f:d5:
                    58:7e:f4:35:98:30:1b:39:7a:2c:56:df:fe:f6:31:
                    a9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:52:53:09:1E:73:49:C0:EE:AD:35:E7:08:A2:67:CC:E1:74:07:72
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:88:19:68:79:0f:b9:68:aa:89:6e:25:5f:f1:f7:21:36:1d:
         d5:77:8f:65:12:cf:8d:31:22:45:94:a6:b6:4b:65:65:81:e0:
         d1:8f:7e:90:c8:90:2a:13:c8:c4:f9:c7:0e:b9:4e:e7:6f:d1:
         f5:71:94:42:01:c4:14:9a:16:d3:6a:5f:a9:d6:df:e4:fa:dd:
         14:8c:64:e3:39:52:62:a0:88:53:b3:42:fa:fb:16:41:b1:5a:
         32:58:f3:fd:ca:5a:ea:34:c8:b6:f7:c0:dc:54:db:d6:95:4b:
         d4:25:89:90:4a:00:88:74:4d:a0:49:ab:84:22:19:31:7b:e7:
         2c:82:41:95:d9:7a:20:6b:fd:1c:0f:2c:7b:4c:8f:12:c1:ee:
         c4:5b:4d:04:d9:5b:8c:22:39:54:3c:fc:8b:22:94:bd:7e:14:
         73:32:d5:d9:a4:1f:f0:54:76:58:06:b5:17:22:bf:4b:30:61:
         c1:d7:a4:26:4d:41:aa:18:4f:7a:dc:64:8c:9f:6b:ed:95:ff:
         48:72:38:d9:a4:7f:c3:29:dd:67:82:54:81:cc:29:6d:c7:60:
         31:d2:b2:94:30:1e:7a:13:7d:2f:87:5e:f4:d2:c5:ef:f1:84:
         37:4b:1d:c1:ac:88:cc:7a:f3:f3:db:5f:66:6a:88:42:9e:5b:
         f1:e2:ae:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----