Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          ql1cwDiY6Ql9JoQ8pn35XsPjIxsjGjf6VqAJo9s67/E=
Subject key identifier:   1A:BA:D6:E4:04:E3:5C:07:82:B5:77:41:24:8D:28:F1:BC:37:71:26
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       14B792554749195028CB8591870281ED8A163BF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          0599
Signing time:             Wed 07 Oct 2026 04:50:42 +0000
Manifest this update:     Wed 07 Oct 2026 04:45:42 +0000
Manifest next update:     Thu 08 Oct 2026 05:43:42 +0000
Files and hashes:         1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: /iC2kudMbo2sFrZG9l63fY0BoH/OesT7qv1dxtD8yEA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 05:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b7:92:55:47:49:19:50:28:cb:85:91:87:02:81:ed:8a:16:3b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct  7 04:45:42 2026 GMT
            Not After : Oct  8 05:43:42 2026 GMT
        Subject: CN=1ABAD6E404E35C0782B57741248D28F1BC377126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d3:23:67:0a:ff:bc:4a:82:ff:cb:61:95:29:
                    43:5a:79:da:ee:c9:3c:97:99:88:85:92:17:40:c4:
                    a6:b7:c8:ed:c2:04:ec:35:06:f1:60:ae:03:be:20:
                    e5:07:d4:8d:a0:a1:86:87:70:d6:08:a1:7c:f1:a8:
                    05:f5:48:25:04:ef:9d:d4:97:fb:4e:f5:2f:27:61:
                    2e:5d:98:2e:2e:29:b9:d8:24:ec:0a:96:38:97:5e:
                    c5:8a:c9:74:fc:bb:a0:0e:55:64:d0:1c:d9:08:b0:
                    3e:f5:69:ed:f0:17:02:e0:ea:fb:60:0e:a7:f9:cf:
                    52:53:ab:cc:cf:2e:df:71:8b:ad:21:f3:57:68:07:
                    b9:4c:fb:3f:b4:05:b8:b6:a8:7e:49:71:91:c2:62:
                    93:82:b1:fc:50:ea:4f:dc:e0:f9:92:84:d1:91:0d:
                    1e:5a:42:b2:6c:bd:a1:59:21:22:d0:9b:42:b5:7a:
                    c0:80:65:40:43:22:a5:7f:fd:ad:ba:11:f5:c4:b4:
                    44:e1:5d:66:a8:3d:5e:93:a2:3a:43:3d:75:c5:09:
                    44:01:42:ad:2b:73:4d:03:79:0c:85:33:89:c7:fc:
                    fb:59:80:bb:a7:f1:a7:e9:b6:bd:3d:61:30:79:d7:
                    12:16:c1:fe:46:96:d6:2c:75:cc:d4:e0:24:1e:7c:
                    c4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BA:D6:E4:04:E3:5C:07:82:B5:77:41:24:8D:28:F1:BC:37:71:26
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ca:ce:fd:19:35:22:83:45:8f:4c:57:ab:74:a6:d8:18:d1:
         57:bf:08:90:ad:e4:e6:d9:19:94:d6:51:b6:91:57:5f:a5:eb:
         2e:af:e3:f1:c0:26:a1:c0:fe:b0:2f:95:46:81:68:a3:96:14:
         e2:1b:c6:26:54:c0:97:81:7d:c5:c9:3a:44:6f:8e:fb:14:f3:
         f4:3c:d7:e5:47:4d:cb:0a:b0:c7:dc:c5:e1:ea:96:03:c7:f2:
         b7:2f:6c:0c:53:72:e3:eb:bc:9f:1e:ce:af:d0:27:54:33:00:
         82:25:39:d7:84:50:4c:1f:e6:da:fa:65:00:5d:e8:9e:98:27:
         f4:d4:dd:54:ca:9e:ea:6d:e8:d1:d3:3e:c1:46:91:32:37:5b:
         f5:b2:e4:cc:23:a8:e2:c5:ab:c8:e2:76:c0:3a:be:90:22:8e:
         2a:61:01:5c:a2:5d:e2:30:bd:55:2a:2b:12:46:cc:e6:c4:1e:
         15:b6:72:54:a7:7a:3e:89:d6:67:78:54:95:83:89:4c:41:e0:
         e8:07:40:e8:4e:82:65:e6:4c:8e:08:34:ae:5f:e9:c3:54:6b:
         6d:f9:5c:49:a6:22:4c:ad:40:89:80:da:ee:12:c9:c4:f9:ce:
         1f:ed:6e:af:3c:0d:95:6b:03:9b:c9:87:7d:c5:c5:1a:f5:de:
         59:c8:86:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----