Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          tndib2IEmKGSZVy6uqsytzOIK3k+UZb93q382YFb83g=
Subject key identifier:   75:0E:FF:3B:CE:17:EF:57:80:4E:3B:C9:A2:2C:8A:56:79:8A:11:57
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       103E52FCB7D3D4835702EE2704CDE97910543516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          0579
Signing time:             Sat 12 Sep 2026 16:48:23 +0000
Manifest this update:     Sat 12 Sep 2026 16:43:23 +0000
Manifest next update:     Sun 13 Sep 2026 18:12:23 +0000
Files and hashes:         1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: KlfW90+hocr4Pqv+8X6W2LGtqfnYX7FTnUrmfNBUBUY=)
                          7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Sep 2026 18:12:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3e:52:fc:b7:d3:d4:83:57:02:ee:27:04:cd:e9:79:10:54:35:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Sep 12 16:43:23 2026 GMT
            Not After : Sep 13 18:12:23 2026 GMT
        Subject: CN=750EFF3BCE17EF57804E3BC9A22C8A56798A1157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:b2:33:7a:24:0c:f5:c1:87:19:4f:da:66:
                    c3:b7:7c:2b:3a:ab:8b:60:9a:4c:63:1c:de:08:ee:
                    36:88:86:cf:7f:2d:b6:b5:c6:ff:e2:a7:61:71:c6:
                    cf:fc:f6:dd:3a:d1:41:85:34:9a:96:3a:e9:b7:71:
                    5f:c3:fe:a7:2c:a6:6b:77:ba:44:fd:a3:f4:5b:77:
                    1c:50:d9:44:d7:b7:39:05:4e:dc:f6:90:92:3b:89:
                    71:a5:af:ec:74:c0:6e:ba:d4:c0:4c:32:a7:a3:dc:
                    17:29:d9:89:63:2e:bc:19:10:6a:4b:46:dc:e8:05:
                    35:6b:5e:aa:f3:2c:a0:f6:e0:d8:06:7f:cd:e3:a6:
                    f1:9f:71:d7:ae:0c:df:3a:6c:6c:a5:9d:d7:18:05:
                    87:80:0b:ce:5d:d6:5e:e0:be:7c:6d:7a:db:f4:65:
                    59:49:68:dc:c1:36:6c:5d:dc:52:60:a0:d2:8a:6d:
                    3f:9d:81:e0:f6:aa:2a:45:ea:36:b6:31:ad:1b:56:
                    61:80:31:47:92:15:da:e6:39:f8:54:ce:1c:97:4d:
                    00:91:15:10:e3:f0:f5:1a:85:80:27:03:52:f2:d0:
                    f6:5b:30:fc:70:0d:ab:4e:fb:77:55:63:ed:b8:93:
                    c9:6a:da:0b:91:de:a0:3f:cf:8d:27:84:3a:8d:9f:
                    8c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0E:FF:3B:CE:17:EF:57:80:4E:3B:C9:A2:2C:8A:56:79:8A:11:57
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:66:cf:be:3e:ab:b3:3e:60:d6:c7:56:f1:63:03:3e:7f:f5:
         fd:a1:3e:65:2f:a7:de:33:80:25:60:fd:e5:a9:f2:0c:e1:eb:
         03:10:b6:a8:60:1d:bb:8d:3e:39:aa:9b:51:35:19:52:bc:a0:
         91:1e:1f:33:91:75:16:39:0d:77:7c:b3:1d:d6:9c:38:c5:81:
         bd:da:bf:3d:0c:b3:df:1e:df:d2:37:92:78:4b:8a:dd:42:dd:
         09:63:d0:c9:c5:eb:e7:f9:09:de:9d:9f:6d:89:c7:a1:ce:48:
         be:7f:35:2f:73:3f:8c:f5:06:8c:82:0d:a9:2f:20:3d:61:e7:
         8a:c3:08:20:17:7e:a1:b9:4e:4f:9a:c2:f8:53:d6:85:60:d7:
         68:17:85:b1:64:c7:de:a8:47:54:ca:e3:0a:ea:37:3e:d2:c5:
         cf:97:3c:b9:19:ba:96:9f:72:e8:a4:ad:78:99:01:b2:6c:b9:
         8a:7a:70:7f:8f:7f:15:e0:77:00:a5:d7:c5:32:c6:29:d5:55:
         0a:e1:e0:48:7f:b1:eb:e4:66:60:7b:e5:7a:e5:73:ce:fb:1f:
         41:ee:6e:ae:d4:38:05:fc:17:eb:45:54:a0:e9:bc:af:32:57:
         ee:ac:a5:33:55:b2:38:f2:d6:67:48:6e:c6:aa:64:50:39:7a:
         79:c7:3c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----