Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          g+9CNw6r1heyjErO6skNcQvnzm8l8paBY/OLEVHVDiA=
Subject key identifier:   6A:1D:0D:67:88:46:84:4F:DE:9D:6B:46:F8:F8:34:2C:C4:30:4B:DA
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       4EB189793CC1272A923C2E7EE4E3E5D2A200419F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          057F
Signing time:             Thu 17 Sep 2026 07:15:24 +0000
Manifest this update:     Thu 17 Sep 2026 07:10:24 +0000
Manifest next update:     Fri 18 Sep 2026 09:15:24 +0000
Files and hashes:         1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Kfdkz1wSOSFMVlaMgzVoeYj5Bd5P4hQHve7cG14DRnw=)
                          2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 09:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b1:89:79:3c:c1:27:2a:92:3c:2e:7e:e4:e3:e5:d2:a2:00:41:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Sep 17 07:10:24 2026 GMT
            Not After : Sep 18 09:15:24 2026 GMT
        Subject: CN=6A1D0D678846844FDE9D6B46F8F8342CC4304BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:24:78:4b:84:53:02:de:51:e1:62:5e:07:03:
                    67:ea:10:ca:a8:4b:7a:4a:01:a6:aa:30:73:0d:91:
                    dc:a7:4b:0e:19:69:10:ec:e8:64:a6:80:8d:06:79:
                    89:5a:3e:35:7f:b6:e6:67:e3:a1:0f:17:83:e7:0b:
                    0e:f2:e8:25:87:87:b9:a1:08:34:c1:cc:86:5e:b8:
                    d3:c7:7a:f9:2f:25:17:a8:cc:86:c1:f1:d2:f8:42:
                    de:ae:11:00:63:d0:36:98:db:54:ab:d7:b8:a4:01:
                    34:91:93:1a:6a:3b:46:f3:b8:0f:14:2b:f0:26:17:
                    d8:2a:2e:b5:f0:04:ff:90:a1:34:0a:49:f2:75:03:
                    9c:25:0e:d7:7c:7c:6d:1f:6c:59:89:95:24:60:81:
                    a3:be:56:0a:cc:77:7d:f3:51:d3:c4:81:1d:8b:90:
                    5b:92:39:f5:cc:2e:c1:2c:de:4e:97:f9:c4:6c:bd:
                    d7:ba:1f:93:ae:7c:fb:e9:37:e9:af:26:e8:30:2a:
                    4c:c6:c3:56:5b:19:a9:2b:54:ca:42:73:70:bd:38:
                    90:bb:69:67:8a:11:3b:6d:3d:20:77:24:32:83:3f:
                    dd:b0:e9:09:f5:c4:86:91:b5:8b:56:d2:e5:9d:48:
                    9f:94:a1:36:ab:fc:71:fa:98:8d:13:91:75:cb:45:
                    39:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1D:0D:67:88:46:84:4F:DE:9D:6B:46:F8:F8:34:2C:C4:30:4B:DA
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:43:43:a1:45:70:9d:60:4f:b6:f6:4e:9d:f8:a9:84:15:af:
         78:5d:b2:ef:f3:a3:92:40:06:c1:6e:f6:0f:15:77:55:b3:38:
         54:76:61:94:14:8e:c8:26:53:04:6b:a7:d4:9c:36:4a:28:80:
         13:53:e9:36:45:1c:7b:58:72:ad:20:11:eb:9d:65:de:7b:ca:
         13:68:ac:81:fc:59:e2:21:b2:0b:43:c0:cc:cd:a9:53:e8:bf:
         44:4e:29:86:92:62:2d:98:ea:e3:52:46:96:3d:ee:1d:d2:25:
         8b:01:c5:d4:63:b7:73:0f:ad:4d:e4:77:d1:c0:c6:d7:f8:6d:
         41:d7:60:fc:0f:ec:57:d2:a9:04:e5:46:e6:09:d0:b8:cd:e2:
         77:ab:f9:36:bc:b1:76:a7:f0:32:82:d6:a7:67:95:cc:38:74:
         d9:86:9a:4b:c6:f3:37:86:b4:f6:9d:8f:1a:fd:a1:05:98:0b:
         2c:96:0a:7d:83:8d:1d:2f:31:65:bb:cc:dc:b8:8b:b4:0e:3c:
         d7:74:b0:0a:88:58:10:6f:5e:1f:2a:d3:28:4f:42:3f:9f:a6:
         2f:a3:3b:c6:9a:6b:62:d2:be:63:8e:a9:d2:4b:9a:6f:a0:a6:
         0e:87:04:75:ab:1a:b3:80:6f:a3:8c:68:3a:fd:fd:d9:33:68:
         50:af:61:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----