Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          yYATDeqII+bPGaptHMY6FPICixqUFLvVudEBI/XyQu4=
Subject key identifier:   8B:B5:D9:4A:B2:BC:93:ED:43:63:CE:EB:5E:33:C4:69:61:C9:BB:8D
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       6AD982A57DC7586DA4EB9D1986EEF42F19EE55AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          0598
Signing time:             Tue 06 Oct 2026 10:06:58 +0000
Manifest this update:     Tue 06 Oct 2026 10:01:58 +0000
Manifest next update:     Wed 07 Oct 2026 12:45:58 +0000
Files and hashes:         1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 7UhCuBrEFDlRNEAE8S2GwNdHjJRygn57N+UfpTCTxUk=)
                          3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 12:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d9:82:a5:7d:c7:58:6d:a4:eb:9d:19:86:ee:f4:2f:19:ee:55:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct  6 10:01:58 2026 GMT
            Not After : Oct  7 12:45:58 2026 GMT
        Subject: CN=8BB5D94AB2BC93ED4363CEEB5E33C46961C9BB8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:86:db:14:02:f5:47:26:c2:8f:cb:7a:05:2e:
                    34:cf:20:47:b3:6b:bb:75:03:41:32:e4:c5:ee:ca:
                    a0:71:57:35:80:46:98:03:41:79:f7:ca:ed:13:59:
                    46:29:ce:a3:04:0c:4d:2a:bf:f7:f5:36:85:5c:90:
                    ea:43:69:52:fd:23:b7:2d:d5:81:25:43:db:4f:9a:
                    e4:b6:5c:a3:5a:25:58:fb:cd:a9:44:4a:1f:b8:f4:
                    08:4f:1f:84:f8:c3:11:1d:26:53:27:1d:be:41:2b:
                    5b:b9:97:75:66:8f:69:b5:a0:ba:da:b0:27:9d:5a:
                    05:ea:22:0f:02:27:1d:3d:ca:25:69:15:bc:26:90:
                    ca:07:42:e2:a2:8b:e2:1b:0e:b0:cc:1a:22:5d:d9:
                    b6:4e:a2:88:5d:46:57:d0:97:37:ac:ba:5f:90:20:
                    08:c1:bf:44:c8:35:27:6f:db:c4:22:76:6c:0e:0d:
                    5c:12:e8:7f:ed:53:7c:30:c8:5f:f9:c5:06:ea:61:
                    ce:fe:ad:2f:1c:c3:3c:bf:e1:15:73:4c:5e:b7:87:
                    99:8b:7a:73:29:8d:0b:a6:f1:a3:8b:fc:17:11:12:
                    2f:36:be:66:62:d3:a2:b0:c7:19:36:65:95:b8:0c:
                    dc:d1:4f:a2:28:73:54:3d:90:5b:8e:26:13:d2:ff:
                    cb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B5:D9:4A:B2:BC:93:ED:43:63:CE:EB:5E:33:C4:69:61:C9:BB:8D
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:5f:fa:c2:ef:07:03:dc:e4:0f:50:fc:92:c7:94:ca:6c:41:
         ea:3e:ac:82:69:cd:0f:6b:89:39:20:43:07:14:95:2e:2c:8b:
         38:3b:0d:7a:92:4b:fe:3e:7f:a5:a7:86:df:23:01:51:37:48:
         c9:d1:8a:12:1c:f2:c7:bb:e5:28:85:91:68:5c:15:06:37:56:
         54:15:bd:9b:43:38:fe:91:9e:d6:bd:73:a5:26:a3:a9:1f:43:
         04:f6:83:cd:67:c4:ae:a8:90:1c:1a:21:64:38:b8:19:d7:34:
         d1:7c:1f:43:06:3e:dd:42:1d:db:70:17:b4:d0:29:58:c5:b8:
         fc:d0:5a:17:81:b4:b0:93:79:2e:fa:a6:6c:9b:e4:5b:03:be:
         fd:65:44:b5:51:d4:00:8b:32:be:7f:72:91:8a:63:6c:b3:1f:
         be:25:46:2a:3d:f6:ce:7d:8f:ec:57:25:ac:37:30:29:58:0b:
         6e:5a:40:d9:68:ba:9a:45:f9:37:a0:6d:22:a5:96:b9:f5:fc:
         93:60:1a:1f:2f:94:40:6c:80:4d:f6:fd:ad:dc:d2:d1:ba:a0:
         b6:2c:69:be:32:a3:45:f5:3f:a0:38:05:42:ec:18:c9:62:04:
         15:90:2f:4e:c2:a8:c0:8c:9b:74:41:0e:10:8e:43:91:3b:73:
         30:34:7c:c4
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUatmCpX3HWG2k650Zhu70LxnuVa8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0
N2RjZWVlYTAeFw0yNjEwMDYxMDAxNThaFw0yNjEwMDcxMjQ1NThaMDMxMTAvBgNV
BAMTKDhCQjVEOTRBQjJCQzkzRUQ0MzYzQ0VFQjVFMzNDNDY5NjFDOUJCOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRhtsUAvVHJsKPy3oFLjTPIEez
a7t1A0Ey5MXuyqBxVzWARpgDQXn3yu0TWUYpzqMEDE0qv/f1NoVckOpDaVL9I7ct
1YElQ9tPmuS2XKNaJVj7zalESh+49AhPH4T4wxEdJlMnHb5BK1u5l3Vmj2m1oLra
sCedWgXqIg8CJx09yiVpFbwmkMoHQuKii+IbDrDMGiJd2bZOoohdRlfQlzesul+Q
IAjBv0TINSdv28QidmwODVwS6H/tU3wwyF/5xQbqYc7+rS8cwzy/4RVzTF63h5mL
enMpjQum8aOL/BcREi82vmZi06Kwxxk2ZZW4DNzRT6Ioc1Q9kFuOJhPS/8uxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUi7XZSrK8k+1DY87rXjPEaWHJu40wHwYDVR0j
BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx
MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm
Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03
ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD
Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAel/6wu8HA9zkD1D8kseU
ymxB6j6sgmnND2uJOSBDBxSVLiyLODsNepJL/j5/paeG3yMBUTdIydGKEhzyx7vl
KIWRaFwVBjdWVBW9m0M4/pGe1r1zpSajqR9DBPaDzWfErqiQHBohZDi4Gdc00Xwf
QwY+3UId23AXtNApWMW4/NBaF4G0sJN5LvqmbJvkWwO+/WVEtVHUAIsyvn9ykYpj
bLMfviVGKj32zn2P7FclrDcwKVgLblpA2Wi6mkX5N6BtIqWWufX8k2AaHy+UQGyA
Tfb9rdzS0bqgtixpvjKjRfU/oDgFQuwYyWIEFZAvTsKowIybdEEOEI5DkTtzMDR8
xA==
-----END CERTIFICATE-----