Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          8ie9y01/e2aSDom+xFooTNXN6gD6iK8wfOgc7HYoEq0=
Subject key identifier:   26:F1:BC:5A:25:B5:69:13:FF:05:C1:45:42:FD:9C:58:30:ED:9B:8E
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       760BD36F565DC8919A3E6BAFCA0ECCB7429C39A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          0484
Signing time:             Wed 11 Mar 2026 18:49:30 +0000
Manifest this update:     Wed 11 Mar 2026 18:44:30 +0000
Manifest next update:     Thu 12 Mar 2026 19:32:30 +0000
Files and hashes:         1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=)
                          2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Pn4GDHpj5/Ge4cH2e4VLKt22Yw8MHZEh+rloAoHtDGY=)
                          4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
                          5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
                          6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
                          7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
                          8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Mar 2026 19:32:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:0b:d3:6f:56:5d:c8:91:9a:3e:6b:af:ca:0e:cc:b7:42:9c:39:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Mar 11 18:44:30 2026 GMT
            Not After : Mar 12 19:32:30 2026 GMT
        Subject: CN=26F1BC5A25B56913FF05C14542FD9C5830ED9B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d4:b5:c7:1b:bc:4c:85:88:6c:93:2c:8f:62:
                    3b:fd:04:32:1e:aa:b0:1e:95:19:12:03:08:4f:6e:
                    49:53:c4:f8:73:5c:63:3d:48:18:b2:f4:09:f4:5b:
                    ba:17:6e:55:70:d7:0d:a8:4a:86:0d:6e:70:7f:e9:
                    cf:6e:21:25:31:62:82:28:7b:83:d4:75:45:6d:d6:
                    df:96:09:a5:06:e6:82:b7:b2:b3:23:55:e3:82:a5:
                    d8:b0:5a:63:45:2d:31:2f:ef:5c:f5:1a:ed:31:9d:
                    70:5e:42:3a:50:f1:f5:ec:21:14:83:04:95:6a:3a:
                    e6:39:11:5e:b3:60:ba:cf:8a:11:35:bd:82:78:67:
                    72:b7:89:48:f7:78:0c:4c:e2:6d:50:8f:80:e9:52:
                    d2:b3:e9:f5:95:23:19:3c:af:fe:a1:3e:4e:f5:d9:
                    ba:e1:ac:ae:e4:83:8e:ba:5b:c8:be:4d:c4:32:f3:
                    bc:b6:62:61:d6:30:f0:e6:e3:f2:86:07:b5:00:94:
                    4c:21:1e:e7:a3:6a:b4:a8:3b:04:c4:d4:fd:07:9e:
                    da:8e:66:27:1c:12:5c:94:00:68:c7:a0:dc:38:d5:
                    80:a9:62:b1:76:3b:1b:23:15:56:2c:bd:a5:de:8c:
                    4e:e7:36:56:4b:63:c2:19:9f:cb:00:93:66:35:e9:
                    6d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F1:BC:5A:25:B5:69:13:FF:05:C1:45:42:FD:9C:58:30:ED:9B:8E
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f0:6d:8e:59:f8:c6:dc:9c:0e:78:70:f4:78:fd:92:15:5f:
         57:5d:a5:3f:c6:65:4d:29:4b:eb:04:ae:8d:a2:08:d5:20:ee:
         08:34:5c:81:3e:b9:80:98:80:95:fa:a9:f2:77:b4:c4:9a:0b:
         52:e3:04:63:f5:3d:cd:97:88:29:ea:3e:eb:81:f0:2d:6e:0c:
         00:56:a4:56:9d:e9:b8:23:0e:63:dd:4c:bb:21:88:0a:7c:e5:
         b5:26:80:f2:83:7c:49:3c:cb:57:04:89:79:4d:2d:be:7e:a4:
         b5:91:db:74:8d:41:22:e2:66:3d:2d:4c:62:19:73:2c:03:d2:
         be:b3:53:25:7c:67:c7:5c:8d:75:f2:b1:ad:bb:3a:a8:0a:58:
         aa:69:06:82:d7:17:df:08:d5:13:4a:46:bb:24:96:cf:58:d4:
         fa:dd:2e:5b:58:69:79:b1:92:48:df:a8:fd:9c:8c:3f:fa:a2:
         01:2d:76:ea:c2:77:a5:bc:41:94:b8:83:99:e7:a4:4c:3b:55:
         8c:41:b3:41:1c:b5:f8:0e:cb:8e:d1:57:d1:40:43:e0:09:8f:
         c6:6e:e2:34:d9:02:68:b2:2b:da:2d:16:b7:7d:84:55:88:07:
         26:6d:45:1b:c6:1a:01:3d:77:ef:68:e3:b5:14:1e:b3:18:b6:
         48:f1:44:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 04:50:53 2026 by rpki-client