Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          H4hC1M9gNDmJQQoc+0zKFKaRmQfH+6xM70rvo2bgef8=
Subject key identifier:   78:5C:55:EB:D0:6D:4D:07:3A:DE:48:82:D8:B3:38:1F:CA:A1:04:FC
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       2B447D6D34E048F8915D87DF7E00C8BA7275D4C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          0589
Signing time:             Thu 24 Sep 2026 22:52:04 +0000
Manifest this update:     Thu 24 Sep 2026 22:47:04 +0000
Manifest next update:     Fri 25 Sep 2026 23:49:04 +0000
Files and hashes:         1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Bna7+CHph+urSwJFFE2IeB2jv9xWJ8dQET0DLtQ6UL4=)
                          7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:44:7d:6d:34:e0:48:f8:91:5d:87:df:7e:00:c8:ba:72:75:d4:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Sep 24 22:47:04 2026 GMT
            Not After : Sep 25 23:49:04 2026 GMT
        Subject: CN=785C55EBD06D4D073ADE4882D8B3381FCAA104FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7a:40:a1:08:61:8e:e1:9e:6b:0c:ab:50:cf:
                    38:d1:fd:4b:03:83:86:48:60:71:5b:47:b1:db:ff:
                    65:67:6c:5b:cc:22:de:a5:e5:69:9c:4c:d1:92:38:
                    d9:71:9f:f3:4e:80:cb:71:0d:31:97:6d:a1:4b:50:
                    45:e3:09:fd:51:2d:a9:b2:e7:70:15:83:f5:aa:b8:
                    44:33:c4:9c:c1:e3:7a:fc:1f:fc:8b:0c:4f:07:3d:
                    50:c9:17:8a:90:bb:28:29:ab:c9:fb:63:24:6f:2b:
                    59:1b:e7:00:cf:2f:18:97:c3:95:67:02:57:e7:20:
                    d4:66:37:15:c8:5e:c5:9b:34:46:d0:e1:f0:5f:48:
                    1f:46:28:33:67:6c:9b:f6:ef:0b:9b:5b:a1:f1:b6:
                    0c:ec:9e:7c:29:21:dd:5e:a1:53:f2:06:69:4e:65:
                    a3:cc:30:6c:a0:0a:4f:8f:a7:58:4b:ff:3b:8c:58:
                    bb:13:d8:bb:bf:ce:17:63:aa:aa:35:b2:ca:c5:82:
                    d9:8f:1d:81:d2:7b:33:47:2d:04:4a:31:b8:1d:f5:
                    0a:08:cd:de:4d:ef:e8:22:d7:77:be:68:3a:2e:01:
                    e4:c3:9f:7b:ba:66:63:61:e1:65:7f:51:04:45:b3:
                    27:da:1d:82:1e:25:8c:b5:f8:31:d7:18:8b:4b:ca:
                    f8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5C:55:EB:D0:6D:4D:07:3A:DE:48:82:D8:B3:38:1F:CA:A1:04:FC
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:41:4d:17:4d:d8:e4:d7:07:0f:5c:b6:0f:de:c9:83:3a:0b:
         4d:53:b7:b0:7e:f2:c5:b3:22:66:09:17:12:47:fa:59:05:f0:
         9f:85:50:37:ed:35:7e:b4:b9:03:b6:e3:f1:c4:e9:e1:6d:28:
         f1:23:7c:c2:77:a7:eb:95:c1:49:50:79:0f:c0:de:37:0c:97:
         74:8b:72:4f:09:5c:a6:c8:eb:16:bb:f4:a6:70:ea:06:df:2c:
         97:94:44:8d:42:e3:d4:1f:83:b2:13:dd:a5:56:fd:d3:8e:3a:
         7a:3c:4d:d2:d5:7e:37:2b:13:65:48:1f:23:b2:f9:75:56:fc:
         ff:29:4b:0b:03:b6:d4:c5:9c:52:a6:68:21:0e:55:c2:3d:17:
         81:59:d2:74:73:cc:c5:33:8e:ff:ae:90:d2:7f:1b:d1:16:c4:
         2b:4e:bd:b8:cf:dc:a6:1e:e5:af:f9:1e:5f:aa:c7:ca:5b:98:
         18:5d:3a:f8:5c:0c:c8:9c:cf:65:2d:cc:75:11:13:eb:74:44:
         b1:d8:01:9f:ef:0b:77:0d:a7:e2:69:80:5f:e1:fc:47:dd:10:
         34:09:c8:00:8f:d3:7a:92:21:56:49:2b:90:d8:06:45:0b:a8:
         0f:0e:1a:7c:50:c1:d7:35:5d:91:0a:9d:d5:41:22:65:90:e8:
         1c:4a:e0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----