Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          6e/0ZpwFPYevIvxLfh0eKR/A2llTflO1wZnhbV0VGcQ=
Subject key identifier:   48:73:24:EC:04:94:2C:45:5E:4F:8B:A4:46:3B:75:7D:A4:78:F6:C5
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       179A65A3A772470FD0ED16E91FBCF0943BFE97D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05B0
Signing time:             Sat 24 Oct 2026 05:12:08 +0000
Manifest this update:     Sat 24 Oct 2026 05:07:08 +0000
Manifest next update:     Sun 25 Oct 2026 07:40:08 +0000
Files and hashes:         1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 5WyXyTmKd9mh1HPgSb+OWYk6OT4dXxLqo80MLr6ZG04=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 07:40:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9a:65:a3:a7:72:47:0f:d0:ed:16:e9:1f:bc:f0:94:3b:fe:97:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct 24 05:07:08 2026 GMT
            Not After : Oct 25 07:40:08 2026 GMT
        Subject: CN=487324EC04942C455E4F8BA4463B757DA478F6C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f1:21:14:fd:e4:a4:af:3b:dc:1d:0d:48:20:
                    48:36:2e:8e:a3:13:0f:d2:26:e1:e6:31:82:0a:4c:
                    aa:52:a1:f5:42:a8:27:cf:d4:a3:82:a6:0e:0f:56:
                    19:eb:0d:d6:75:a1:06:7c:9c:1a:ad:3a:7c:3a:63:
                    ea:24:71:51:2b:58:42:82:dd:c9:1d:9c:28:cf:71:
                    52:c1:fb:e5:6a:16:99:d3:3d:70:ee:a8:a7:25:4f:
                    2b:c0:6b:fb:06:b7:b8:42:eb:5e:20:16:dc:45:ee:
                    0e:4d:90:0d:07:1c:cc:f4:56:71:d4:e0:95:59:1e:
                    0e:c5:5d:4b:ea:29:a9:d9:8e:53:3c:65:30:99:59:
                    60:bd:d6:5f:6d:ab:38:ea:6e:8a:ab:7d:80:74:28:
                    49:1c:73:4c:84:92:e9:0a:64:a3:03:7b:a5:8b:1a:
                    a9:e5:e5:f7:9c:0d:f0:d0:5f:35:2d:e9:67:95:da:
                    ed:99:9d:a4:d3:65:d1:f3:d9:4b:d9:d1:53:0e:6b:
                    e9:78:a8:f1:82:7d:c0:ee:6b:46:9f:99:93:bd:ca:
                    e7:5c:89:50:3b:bf:2d:ef:6f:a5:73:7d:5b:1a:e5:
                    c4:b7:e8:9c:55:37:77:f7:37:75:24:bc:b1:72:82:
                    12:8b:e6:f3:3c:b6:91:11:28:1f:24:e8:a0:c4:2e:
                    2d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:73:24:EC:04:94:2C:45:5E:4F:8B:A4:46:3B:75:7D:A4:78:F6:C5
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c3:e0:b2:f7:86:3a:47:40:f0:df:57:18:c6:d2:0b:8b:e5:
         98:da:6c:e1:a8:69:29:1d:ec:ce:d5:0c:9e:c8:6c:c2:83:2a:
         ec:33:38:7d:70:bb:04:19:f4:e1:e7:d8:85:ff:a8:9d:eb:7d:
         79:2f:83:e9:b7:f7:ce:ac:69:a9:79:a4:77:d4:10:87:10:54:
         cb:14:35:4b:ed:06:6f:5f:b8:79:b4:93:dd:86:0a:13:d8:e9:
         db:87:32:13:55:65:04:c5:34:77:d1:b8:0e:83:e8:4d:39:61:
         f7:c4:b8:00:5a:54:b2:72:39:2d:33:72:b8:59:a2:77:d0:b9:
         78:9a:33:a7:72:2e:2f:5c:ff:f4:04:52:07:b7:80:7d:44:91:
         56:09:e5:68:b5:b3:e8:21:a1:e3:8e:2f:3b:94:da:37:6d:74:
         a8:29:29:71:0d:da:57:b5:dc:48:b7:fe:f0:b3:92:4e:1d:cd:
         c3:59:44:e9:eb:80:c3:86:4e:ce:81:4e:19:93:59:83:58:e5:
         18:b9:d0:2a:2f:84:7e:25:a1:b3:df:2b:9b:78:9f:a9:0b:ae:
         65:a4:c5:13:fb:1e:de:62:51:07:fd:03:84:4f:78:88:4a:c6:
         d1:fc:1d:b7:8a:c0:f7:8e:eb:16:53:29:e3:81:fc:7d:09:3e:
         ec:a8:76:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----