Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          ezs3Ol4fbAGQWnocGf4a9+H36NMyzoa1aT7fFqj2+6o=
Subject key identifier:   E0:5B:B5:FA:22:FE:0D:B0:5E:B7:9B:78:27:83:7F:72:10:DE:46:59
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       054C6C17FD6D1D7132AF055F65BCF20DE9BD4F2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          050B
Signing time:             Sun 21 Jun 2026 09:09:21 +0000
Manifest this update:     Sun 21 Jun 2026 09:04:21 +0000
Manifest next update:     Mon 22 Jun 2026 12:05:21 +0000
Files and hashes:         1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
                          2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 6lkHISpOpXelDUh2w4RRGmdxNhnwE6LgW+UdHYRDcIE=)
                          3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
                          5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
                          6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
                          7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
                          8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4c:6c:17:fd:6d:1d:71:32:af:05:5f:65:bc:f2:0d:e9:bd:4f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Jun 21 09:04:21 2026 GMT
            Not After : Jun 22 12:05:21 2026 GMT
        Subject: CN=E05BB5FA22FE0DB05EB79B7827837F7210DE4659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:95:81:37:87:fc:c2:36:da:7d:a2:79:aa:
                    47:09:e3:b1:27:06:92:25:29:31:cc:3e:8a:5d:55:
                    81:0b:d5:c1:e3:fe:55:c1:40:8c:e2:2f:78:ea:de:
                    e5:03:af:16:34:a8:f6:6e:0d:88:14:69:f1:ad:e1:
                    83:5c:e1:57:86:26:3b:94:82:e2:05:7f:f1:e2:c2:
                    56:1c:18:bd:2e:92:88:7c:58:f7:2e:b0:ce:d4:ba:
                    1e:9d:69:55:b5:85:84:1c:da:8b:99:f0:7c:7c:f0:
                    b5:23:3f:af:fc:da:75:79:3c:43:42:cf:1e:96:63:
                    1a:a7:bf:fd:ae:ae:f1:c2:3c:3b:c8:a2:49:71:0c:
                    a6:0b:9e:0b:10:52:75:30:9c:aa:e6:97:b9:d8:08:
                    1d:d9:ef:93:d5:c0:9e:37:27:a7:ad:29:75:d3:1f:
                    d1:e2:46:ec:2a:15:49:98:2c:a7:49:00:de:4f:9c:
                    39:13:12:68:1c:04:8b:3b:59:94:d3:04:33:21:a8:
                    fb:db:0b:70:c3:e8:69:38:6b:e6:48:48:9e:9d:18:
                    45:0d:80:1b:34:fe:e1:73:78:00:83:69:14:b6:12:
                    e3:b4:3f:6e:c4:86:1b:a2:13:c5:fc:5f:c4:c7:3b:
                    8b:36:cf:1c:1c:7c:b5:9c:d8:df:da:50:c8:6b:c4:
                    e2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5B:B5:FA:22:FE:0D:B0:5E:B7:9B:78:27:83:7F:72:10:DE:46:59
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:8e:f5:32:6a:6a:de:34:2f:17:34:c1:67:e9:a5:e5:09:87:
         67:49:28:bf:34:ad:3d:96:95:c8:16:ed:7c:a2:a0:0f:c4:94:
         19:08:dc:d0:c0:42:a1:76:ed:4a:2f:a3:d9:1f:c7:3a:df:8f:
         fd:7a:08:fd:d5:65:85:1d:67:cc:8a:16:ba:a1:2b:cf:1d:50:
         f0:43:fd:ab:2b:ec:e8:15:30:8e:b9:93:88:d2:f6:cc:56:a3:
         be:b9:0b:e6:89:57:b7:17:6e:a2:fd:c2:d0:b4:e8:90:04:e4:
         ed:67:74:06:eb:3f:9a:9e:0d:84:1d:9e:85:75:d4:db:93:4d:
         70:7c:db:99:3b:b1:21:ed:c0:6f:76:7c:00:e7:04:86:af:b7:
         fc:5b:5e:dc:57:82:e3:9f:07:b7:97:51:f2:ba:55:73:6f:19:
         68:9b:39:b2:ca:0e:3a:17:44:d4:ee:d6:e2:00:97:24:cd:7e:
         1a:77:a2:78:11:c9:c8:33:97:d5:da:36:d4:96:c3:62:00:34:
         ff:f3:04:ed:6b:db:9e:8a:4f:d0:68:93:e9:29:8d:72:05:4a:
         d1:ac:e0:da:c4:6e:97:cc:0e:45:ad:49:dc:64:fc:45:97:f3:
         2f:0c:d2:d8:79:b4:a6:5b:9f:ff:5d:3d:1e:a8:8a:80:51:6e:
         d9:53:33:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 13:02:48 2026 by rpki-client