Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          bQfW2soTqnndzML9eT/eHNpUKoH7ymGTIKTB4UCnA1U=
Subject key identifier:   F9:52:A2:F0:11:96:CB:18:8E:57:BA:5C:EF:CD:8B:A8:56:00:0C:18
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       0F112DAE9F2B2CCF6969FC089DEE9D64F7E5202E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05B2
Signing time:             Sun 25 Oct 2026 19:04:42 +0000
Manifest this update:     Sun 25 Oct 2026 18:59:42 +0000
Manifest next update:     Mon 26 Oct 2026 22:35:42 +0000
Files and hashes:         1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: ofgjxD9kLGCnDXxzzwA4+c2sEDyxhLCCJKDONkkqVAc=)
                          6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 22:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:11:2d:ae:9f:2b:2c:cf:69:69:fc:08:9d:ee:9d:64:f7:e5:20:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct 25 18:59:42 2026 GMT
            Not After : Oct 26 22:35:42 2026 GMT
        Subject: CN=F952A2F01196CB188E57BA5CEFCD8BA856000C18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:09:b4:0d:08:d3:51:7c:3c:fa:de:b4:0e:
                    d2:02:d3:ce:ba:f6:3a:d6:88:4f:6f:56:e9:66:18:
                    4f:0c:ff:36:f0:fd:f1:7c:3d:84:03:c6:35:28:6c:
                    49:d7:a7:02:38:07:68:22:ae:50:f9:2e:f1:c8:99:
                    05:e4:72:88:95:d5:ff:6d:ea:13:d8:d5:38:d4:70:
                    c5:7a:41:8b:d2:8b:7c:8a:71:cf:da:d7:33:29:3f:
                    b7:ea:cf:5d:f7:cb:48:fc:05:fb:1a:f5:97:2d:21:
                    ac:96:8b:a7:79:3e:d7:9e:b5:b8:4d:04:5d:2c:0a:
                    f5:ac:ce:0e:c2:e8:73:ca:02:a7:45:d3:6f:e1:2a:
                    7a:38:14:ab:07:ae:c0:23:12:6c:98:72:03:5e:c5:
                    39:55:9f:fe:ae:4e:4f:c9:99:64:8d:62:b7:18:21:
                    c0:eb:8a:a6:5c:7a:00:8c:16:2c:e0:73:7d:46:a1:
                    8d:e3:9b:96:80:ae:3e:31:0d:2b:e3:fe:56:ff:fb:
                    6d:7d:b5:96:8a:00:04:7a:49:f9:16:d9:82:30:ca:
                    15:fb:db:b3:81:02:fd:9c:d4:ed:d5:cb:26:53:4a:
                    8f:6c:c4:4f:01:9b:61:1c:f8:90:cd:17:df:c8:24:
                    f6:d1:97:a4:69:c9:39:9a:89:61:0a:37:b6:c1:d5:
                    14:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:52:A2:F0:11:96:CB:18:8E:57:BA:5C:EF:CD:8B:A8:56:00:0C:18
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7d:86:e7:66:19:1f:db:05:cf:b6:72:7f:f1:7c:df:8e:c7:
         3e:9d:81:6c:0a:ca:d7:48:36:42:01:d3:ea:a0:31:d9:f7:91:
         02:0b:c3:9f:11:eb:51:d9:d5:cf:37:0e:ed:5c:5d:bf:c7:ac:
         3e:29:fe:e7:5b:7c:c1:82:0d:15:2c:53:84:82:cd:0c:b3:6f:
         e1:03:ab:f1:b7:96:88:ab:38:ef:b7:d2:87:da:6c:32:17:46:
         71:46:e6:59:9d:25:34:f5:60:d4:52:82:1f:51:9a:6e:f4:bb:
         d0:91:b5:ef:0e:a9:30:42:10:c1:57:f6:fc:56:3d:91:0c:8e:
         6d:0f:b6:b5:76:bc:57:67:3d:38:31:f8:5c:f9:f8:36:b5:09:
         9c:52:a8:4b:2d:0d:b2:6a:f1:92:55:8c:6f:42:60:67:3f:e3:
         c4:c3:df:ce:42:34:91:59:59:47:db:e0:bd:0f:55:e4:4f:59:
         e8:ed:2a:36:23:75:84:e9:9c:89:1c:ee:79:30:58:a8:47:97:
         dc:8b:e8:2c:01:1e:72:85:36:90:56:1c:d8:68:bb:01:0f:5f:
         70:b7:ba:f0:8a:78:b4:84:87:03:ff:7f:f7:68:ca:44:07:bb:
         8d:b2:ec:8a:20:06:c5:b1:7a:82:3b:21:6f:2e:83:47:9c:8b:
         e8:83:9a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----