Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          7Dol6YPIvWnLs98HYgnRLVISgVzVhfXaD89Vef8RtUc=
Subject key identifier:   AC:E8:99:E4:CC:48:8C:75:F2:2C:44:74:5F:B5:BD:BA:FB:8C:0F:CE
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       701D33FE234739DAF94BE501718EEA28AD1629F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05A4
Signing time:             Thu 15 Oct 2026 09:04:49 +0000
Manifest this update:     Thu 15 Oct 2026 08:59:49 +0000
Manifest next update:     Fri 16 Oct 2026 11:54:49 +0000
Files and hashes:         1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: fLtIQbXw9nkvrYkES33Fw8wahD3FDnsRkuUIYrw2qqg=)
                          7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 11:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:1d:33:fe:23:47:39:da:f9:4b:e5:01:71:8e:ea:28:ad:16:29:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct 15 08:59:49 2026 GMT
            Not After : Oct 16 11:54:49 2026 GMT
        Subject: CN=ACE899E4CC488C75F22C44745FB5BDBAFB8C0FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fc:12:79:80:c4:0c:3a:12:d5:9c:85:74:36:
                    7a:ec:c8:1c:0a:6f:67:46:dd:11:6f:6b:6c:22:83:
                    e1:0b:28:62:7a:8d:71:61:bc:f4:b9:d7:de:cf:cb:
                    61:6b:3a:a8:22:bb:58:3b:52:ba:ce:dc:2c:46:12:
                    ee:b0:db:33:e2:3d:31:ae:62:ed:ab:f5:25:9e:7c:
                    32:54:26:e8:d8:dc:69:9f:21:f0:cd:4d:03:03:8d:
                    4c:5c:ee:81:9f:d1:72:7b:4d:6e:fc:a2:b2:02:05:
                    35:b5:7c:88:9c:07:db:68:7e:fb:74:69:c7:7f:9c:
                    17:73:22:e6:89:20:4b:d4:ea:0a:3e:3e:a9:94:ca:
                    c6:6a:e2:87:95:e1:a8:55:9a:18:c0:6f:11:36:aa:
                    e6:a9:df:f1:f8:78:fd:90:ec:2d:53:43:8f:6c:16:
                    58:1d:76:6c:be:d3:e2:3a:0b:02:15:4c:15:4d:1e:
                    2c:ec:09:e3:ea:9a:e7:fd:6f:4f:85:f3:ae:72:e6:
                    a7:1c:0c:54:c1:77:83:56:9d:28:a8:ee:e2:c8:00:
                    b8:90:0c:20:93:99:19:9c:0c:58:07:ff:c0:a7:c1:
                    68:93:7d:d1:2c:68:be:d1:5d:66:75:d8:a0:c7:ba:
                    90:a1:21:72:c2:5c:fd:cb:6b:b0:91:38:da:23:2e:
                    b1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E8:99:E4:CC:48:8C:75:F2:2C:44:74:5F:B5:BD:BA:FB:8C:0F:CE
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:0c:54:69:10:0d:54:07:20:c8:e0:f9:f8:99:dc:b9:5d:4c:
         9f:e9:19:f4:7a:72:92:b4:20:36:2d:76:71:32:e1:7b:02:af:
         9a:33:17:f4:df:09:6f:d4:e4:5b:d4:5d:4c:7a:af:83:ad:05:
         39:50:c1:47:27:88:c1:e1:3f:a5:78:f7:89:a7:ba:b0:4f:f6:
         9a:45:6a:10:55:85:4e:a5:6e:14:ab:cd:24:8e:e7:ce:f8:6f:
         b3:cf:b3:f2:4a:f8:7b:a7:ef:e3:2d:2e:f9:b2:6b:4d:a4:8a:
         29:ed:ca:c0:46:73:e8:50:1c:0f:df:14:77:7e:43:1b:d0:31:
         5b:ff:87:f9:af:94:9d:3e:e0:d4:2b:a2:74:48:60:0d:2c:8c:
         9d:43:3b:29:aa:e9:c9:51:95:fb:f5:b5:af:4a:32:7e:3a:cc:
         3b:79:5c:01:bc:ca:c7:e4:34:6e:d9:b0:8b:fc:cf:06:95:21:
         dc:bb:9f:4a:20:92:58:7e:3e:06:68:6f:fc:89:f5:df:83:ae:
         36:24:12:6b:a3:67:2a:1b:68:8d:cc:86:c5:c8:95:04:21:3b:
         67:06:2c:d8:1f:06:48:8c:48:6c:02:5d:39:d5:88:1a:b1:74:
         6f:05:79:87:39:4a:1f:a9:f3:3e:4a:f1:08:fb:41:b3:7c:02:
         47:02:b4:13
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUcB0z/iNHOdr5S+UBcY7qKK0WKfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0
N2RjZWVlYTAeFw0yNjEwMTUwODU5NDlaFw0yNjEwMTYxMTU0NDlaMDMxMTAvBgNV
BAMTKEFDRTg5OUU0Q0M0ODhDNzVGMjJDNDQ3NDVGQjVCREJBRkI4QzBGQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/BJ5gMQMOhLVnIV0NnrsyBwK
b2dG3RFva2wig+ELKGJ6jXFhvPS5197Py2FrOqgiu1g7UrrO3CxGEu6w2zPiPTGu
Yu2r9SWefDJUJujY3GmfIfDNTQMDjUxc7oGf0XJ7TW78orICBTW1fIicB9tofvt0
acd/nBdzIuaJIEvU6go+PqmUysZq4oeV4ahVmhjAbxE2quap3/H4eP2Q7C1TQ49s
Flgddmy+0+I6CwIVTBVNHizsCePqmuf9b0+F865y5qccDFTBd4NWnSio7uLIALiQ
DCCTmRmcDFgH/8CnwWiTfdEsaL7RXWZ12KDHupChIXLCXP3La7CRONojLrEPAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUrOiZ5MxIjHXyLER0X7W9uvuMD84wHwYDVR0j
BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx
MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm
Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03
ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD
Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwxUaRANVAcgyOD5+Jnc
uV1Mn+kZ9HpykrQgNi12cTLhewKvmjMX9N8Jb9TkW9RdTHqvg60FOVDBRyeIweE/
pXj3iae6sE/2mkVqEFWFTqVuFKvNJI7nzvhvs8+z8kr4e6fv4y0u+bJrTaSKKe3K
wEZz6FAcD98Ud35DG9AxW/+H+a+UnT7g1CuidEhgDSyMnUM7KarpyVGV+/W1r0oy
fjrMO3lcAbzKx+Q0btmwi/zPBpUh3LufSiCSWH4+Bmhv/In134OuNiQSa6NnKhto
jcyGxciVBCE7ZwYs2B8GSIxIbAJdOdWIGrF0bwV5hzlKH6nzPkrxCPtBs3wCRwK0
Ew==
-----END CERTIFICATE-----