Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          nF+gAvHz88suU85g6KaSKoDH0f7NHzyOJ5gz6RdKpqQ=
Subject key identifier:   B3:96:5D:1B:C6:18:5F:08:7D:3A:AB:C7:DA:F5:90:69:B8:27:18:A6
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       0A084C4A8267B64647B1B642066F4A0181DFAF5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05AD
Signing time:             Thu 22 Oct 2026 01:21:48 +0000
Manifest this update:     Thu 22 Oct 2026 01:16:48 +0000
Manifest next update:     Fri 23 Oct 2026 04:24:48 +0000
Files and hashes:         1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: NgsDquJNUUDUCEh3oe55XUHn5h/f4Li1OlBjMnSgJbI=)
                          8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:08:4c:4a:82:67:b6:46:47:b1:b6:42:06:6f:4a:01:81:df:af:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct 22 01:16:48 2026 GMT
            Not After : Oct 23 04:24:48 2026 GMT
        Subject: CN=B3965D1BC6185F087D3AABC7DAF59069B82718A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:27:b8:1c:be:fd:fc:34:63:cf:c8:45:1a:d8:
                    50:ae:81:15:64:af:50:cd:ae:a3:bd:ef:2d:76:87:
                    51:5b:11:16:a9:a0:10:56:52:d1:b7:4e:8c:98:ca:
                    ed:5f:fa:d6:d0:a6:a0:c9:4e:f2:90:a3:54:fc:01:
                    a6:fe:e2:15:a0:f6:9f:a0:d8:1e:25:26:e7:fe:d8:
                    96:46:82:9e:4f:51:ff:63:05:a4:da:53:32:2e:39:
                    ef:f0:61:f3:1a:9a:d1:5d:21:2b:e4:14:9c:67:a9:
                    36:6f:d4:50:99:b3:b4:5f:df:9a:0f:7d:6e:91:d7:
                    2b:62:e4:3c:11:3e:19:f7:d7:1a:f4:b3:41:dc:bf:
                    e2:cc:fb:84:6f:63:d1:f5:01:e0:83:44:8d:5c:5f:
                    32:06:23:4a:e7:26:76:b2:9d:bd:ae:ff:cf:af:f8:
                    4f:47:e9:22:3a:de:84:c4:21:09:de:3b:cf:5a:52:
                    a3:fc:7c:d3:6e:45:6b:a0:38:a3:03:74:12:dd:9f:
                    51:50:df:dc:17:ff:32:17:75:39:7f:00:20:dd:0f:
                    16:92:e2:bf:1a:42:42:0e:00:fa:13:9f:05:30:ca:
                    ce:f6:04:57:6c:26:cd:0c:c9:36:c4:9a:aa:15:f5:
                    5c:78:49:7b:3e:d6:ca:be:a9:9c:13:5c:bb:58:65:
                    eb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:96:5D:1B:C6:18:5F:08:7D:3A:AB:C7:DA:F5:90:69:B8:27:18:A6
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:fa:5b:6d:f6:0e:a4:93:1a:ce:20:40:e6:25:34:60:dd:af:
         50:2b:fc:3e:50:83:37:91:9d:b8:95:cc:a0:3f:cb:79:f8:b5:
         48:a2:a9:46:fc:42:5d:d4:8e:fd:49:b0:f8:13:a9:69:77:d6:
         1f:a6:f6:64:91:32:ab:f8:32:1a:07:18:4d:2b:75:b1:54:4c:
         a7:8d:8f:17:f9:00:4e:4a:c1:d4:ad:b6:72:da:20:4d:f8:59:
         04:01:c4:96:06:a9:78:13:2b:55:67:ad:ef:01:df:48:a1:d8:
         1b:44:78:4b:86:e0:ae:03:a1:1a:35:98:a1:f5:b8:54:f7:5d:
         0e:b7:c3:91:b0:fa:90:21:7a:c0:d0:07:38:e3:37:46:66:17:
         9d:d5:a3:92:d6:f9:a5:72:c4:2a:73:d3:d7:a4:fe:c0:bf:2b:
         1e:06:1b:90:2e:f8:89:4b:1f:b2:ff:4f:b7:b6:3b:34:01:0f:
         de:9d:71:c6:87:a4:af:ed:5d:8a:75:06:a3:d0:ba:4a:28:18:
         68:7a:6c:13:d9:55:28:a2:f3:0f:84:e5:e1:0f:89:0b:15:70:
         22:3e:65:c2:19:30:1b:ea:3c:18:4f:bb:22:a5:66:95:87:b4:
         9e:e6:94:7f:45:ed:ea:66:0e:48:6e:89:03:d7:41:bb:31:9a:
         cd:52:9c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----