Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          cT3YrQ03gMUJIkT9cGhmgP3hHMemSDrVY3VbUTly3hA=
Subject key identifier:   76:D6:97:74:8B:D5:72:95:9F:9E:6B:3D:23:45:5C:00:17:61:39:07
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       06EDEFB6FB8094A0A01B1429253187BDE7732F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05B4
Signing time:             Tue 27 Oct 2026 07:47:01 +0000
Manifest this update:     Tue 27 Oct 2026 07:42:01 +0000
Manifest next update:     Wed 28 Oct 2026 08:07:01 +0000
Files and hashes:         1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: b1csdTz/nDVkfAByKTsrq5YjPICY78x3IYND9MaWu58=)
                          8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ed:ef:b6:fb:80:94:a0:a0:1b:14:29:25:31:87:bd:e7:73:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct 27 07:42:01 2026 GMT
            Not After : Oct 28 08:07:01 2026 GMT
        Subject: CN=76D697748BD572959F9E6B3D23455C0017613907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:09:12:0d:d1:14:e7:e0:6f:89:6b:38:cd:8a:
                    74:b4:0d:ab:a7:ac:e2:26:df:a6:a2:ea:13:03:b0:
                    3f:8c:e6:e1:70:c5:fa:a4:56:81:35:18:24:96:71:
                    e6:de:4a:42:e7:37:bb:cb:98:f2:5a:a3:65:96:53:
                    75:dd:da:98:fe:c0:b3:89:c9:c9:9f:0c:2a:70:e0:
                    7c:7e:85:6c:02:f6:ca:25:4f:95:36:56:d8:13:27:
                    90:5f:fd:80:eb:f0:49:e9:6f:33:82:24:79:59:ab:
                    b3:4b:be:c2:86:83:71:d7:4d:69:78:92:2b:da:c5:
                    c1:1c:85:d0:70:89:4b:18:da:a1:03:6c:64:4f:a0:
                    64:84:8f:36:d4:d4:14:fa:56:6b:df:4d:45:d1:91:
                    e3:0b:c9:49:f6:eb:d6:24:db:98:54:1a:31:5b:77:
                    7a:66:fd:c5:37:50:56:29:d3:15:fe:3b:18:9a:9a:
                    81:69:7e:e1:95:0e:c2:13:53:ac:e9:42:2c:6d:73:
                    26:ab:5e:63:98:6d:d1:3c:3e:e6:3c:93:84:7c:52:
                    b3:c2:56:84:e7:ef:cb:4a:aa:ca:73:dc:54:7b:0f:
                    5a:e5:c5:81:90:bb:90:b7:70:ef:e4:12:9d:bf:06:
                    87:a2:b1:69:0c:cb:99:03:cb:b9:6c:cc:cf:fa:f1:
                    bb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D6:97:74:8B:D5:72:95:9F:9E:6B:3D:23:45:5C:00:17:61:39:07
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:96:83:05:56:45:94:b6:af:4f:0a:e5:94:91:c6:4f:82:3b:
         a6:3c:f8:b7:2e:53:f3:bd:19:93:7b:ec:98:af:0d:56:fb:33:
         ce:29:d8:b9:bc:d6:55:ad:c6:2b:ca:bc:36:63:f6:82:4c:ce:
         20:fa:87:bf:39:60:fa:20:ed:f2:77:11:63:c6:3d:97:5d:a4:
         13:70:95:8d:16:1d:c5:dd:14:bc:48:d0:98:3b:8b:64:bb:2b:
         bb:93:b0:87:f3:4b:d9:8e:49:a6:24:3a:61:42:c6:28:97:c8:
         74:7a:19:8f:d4:e9:dd:01:19:4d:98:ca:34:68:e9:34:47:cf:
         8f:56:d4:f8:30:31:f5:57:58:44:3c:77:17:fb:40:65:2c:67:
         c2:8d:2a:73:7e:6f:ff:d1:8f:37:26:8e:1c:ab:18:1f:3f:3d:
         90:ab:a7:75:51:c3:f4:65:cf:19:74:12:dc:f0:27:eb:4e:63:
         86:c7:39:62:b6:55:51:cd:18:62:b9:e8:2d:e7:5d:be:9a:09:
         2d:39:ae:d8:92:60:ef:09:95:a7:2e:1f:eb:ba:99:08:18:f9:
         28:45:6f:9e:19:96:37:7f:22:e0:97:e5:38:b9:dd:d4:94:58:
         60:1f:48:28:cb:45:00:97:01:25:ba:5f:e8:b8:0f:21:40:45:
         eb:38:63:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----