Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          94Ce1zCaPxF3f3wCK8HUJbElwZCSvgmUXhVGGHMfuUg=
Subject key identifier:   C4:59:AF:C6:AA:72:E9:1A:2A:41:CF:AF:B7:9C:70:B5:7F:5C:50:D0
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       71399268A57D6394A7B4A02485A1878BB6F07865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          0588
Signing time:             Thu 24 Sep 2026 05:13:33 +0000
Manifest this update:     Thu 24 Sep 2026 05:08:33 +0000
Manifest next update:     Fri 25 Sep 2026 06:49:33 +0000
Files and hashes:         1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: //n5jlgO+bw88S1wKxg5AWr+H5A2m+KmTURoSIeO/Eg=)
                          7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:39:92:68:a5:7d:63:94:a7:b4:a0:24:85:a1:87:8b:b6:f0:78:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Sep 24 05:08:33 2026 GMT
            Not After : Sep 25 06:49:33 2026 GMT
        Subject: CN=C459AFC6AA72E91A2A41CFAFB79C70B57F5C50D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6f:48:7b:70:33:bd:f5:06:0d:09:01:76:a8:
                    cc:23:83:2e:54:ba:0b:7d:00:e7:98:03:b6:66:44:
                    ee:1c:e4:8e:58:4b:68:c6:3e:39:72:d5:e0:d4:b8:
                    63:cd:45:97:fd:e5:71:f9:c5:6f:03:66:eb:9f:4f:
                    1f:c9:d6:6d:d2:ee:ba:15:75:52:c0:a0:0a:1f:72:
                    5e:61:21:75:e5:67:6d:64:b2:63:93:f0:bc:8a:f1:
                    a4:c3:59:49:f9:db:a9:f6:2d:a6:74:fd:2f:64:e8:
                    55:71:a6:15:8d:93:fa:ed:8f:3b:59:bf:5b:9d:44:
                    a3:7a:e0:75:5d:f0:f1:d0:6b:c5:f6:e3:64:8d:6a:
                    f0:24:c6:1a:c8:eb:07:3a:f2:14:30:73:a6:f5:77:
                    82:d6:30:55:d8:45:64:74:aa:22:34:e5:a4:1b:6b:
                    93:56:ef:7a:86:82:a9:67:1d:e2:85:57:64:e2:9c:
                    a7:02:7f:5b:d8:d5:50:eb:13:77:1f:a2:f2:09:92:
                    a0:10:53:2d:ed:39:cc:ad:26:be:ec:41:96:c7:c8:
                    9f:2b:a5:c4:ed:c2:1b:02:d9:b6:a7:0a:e2:01:ff:
                    80:4d:e8:5c:98:ad:34:18:01:7c:ca:ea:fc:fa:5c:
                    f1:71:83:24:8f:57:06:c9:8f:87:53:57:c0:08:61:
                    f4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:59:AF:C6:AA:72:E9:1A:2A:41:CF:AF:B7:9C:70:B5:7F:5C:50:D0
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:1d:81:ee:13:1b:79:50:17:6a:61:d4:9c:9f:23:83:c5:b7:
         26:6a:a6:dd:49:08:29:54:5f:c8:f3:59:50:01:34:26:2f:69:
         b9:4b:41:c7:a8:01:6d:3f:1f:41:a4:e3:f7:4f:73:dc:94:ac:
         f3:f8:1a:6c:e0:04:1b:4a:43:55:24:bb:6e:0e:78:35:a6:e1:
         67:e0:40:27:74:76:83:af:5f:28:1d:5f:d9:06:8c:18:66:3a:
         5c:f1:3a:f8:f2:be:0b:b1:2c:38:53:e0:23:1a:aa:ba:e1:2c:
         9a:21:ae:9c:75:38:bb:bb:c6:9a:e8:f2:30:12:2e:e4:09:1f:
         70:3b:e4:56:f1:c4:a6:01:04:db:70:05:6b:b3:ce:c4:31:1f:
         e0:87:8a:9d:01:ff:38:7b:26:cf:39:d3:88:cd:07:65:e4:b0:
         e4:65:b1:ec:23:fc:c5:5a:c6:18:13:17:3f:27:a6:31:74:0e:
         2d:2f:b9:fd:1f:3d:98:48:08:c1:58:d2:b5:99:14:df:c2:a3:
         3f:8b:cf:7f:fe:82:fc:9d:1d:fb:85:96:49:fc:b1:00:85:63:
         e9:ed:46:45:26:a3:74:c7:b9:a1:78:6a:f0:4f:25:cc:80:fd:
         08:16:fd:52:e0:ed:ea:fc:14:a1:47:c5:fd:84:db:ec:79:aa:
         1a:bd:bb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----