Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          3wW/bUd65aGaP5DM/ORLNBKi4Er1NX1xS4mmfT5SALk=
Subject key identifier:   E0:71:26:D8:FC:18:E0:B9:F8:02:19:5C:A2:80:A0:DF:7E:AF:40:ED
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       5B46E4AD9ADBBA82E1FA7506EE0A374AAB2D6C1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05A0
Signing time:             Mon 12 Oct 2026 08:10:17 +0000
Manifest this update:     Mon 12 Oct 2026 08:05:17 +0000
Manifest next update:     Tue 13 Oct 2026 09:17:17 +0000
Files and hashes:         1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 7YzlL8lrtB1Ev5wPR2fIHc1/G53I6XTHA8JWizC3J/s=)
                          5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 09:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:46:e4:ad:9a:db:ba:82:e1:fa:75:06:ee:0a:37:4a:ab:2d:6c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct 12 08:05:17 2026 GMT
            Not After : Oct 13 09:17:17 2026 GMT
        Subject: CN=E07126D8FC18E0B9F802195CA280A0DF7EAF40ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bb:aa:42:17:73:bc:c5:80:23:ff:14:88:09:
                    30:7a:1b:91:e0:08:05:e3:85:05:46:97:b2:00:ce:
                    dd:71:37:88:f8:c4:2b:e5:3c:cb:63:75:27:d6:ac:
                    bd:5d:6b:76:1f:73:24:ee:39:9a:58:8c:c0:9d:9e:
                    85:7d:6d:df:c1:1d:d6:c9:67:bb:6b:5f:5d:46:16:
                    b1:54:eb:de:79:ff:03:59:9f:16:87:df:2e:cb:3e:
                    bc:3c:40:bd:f9:fd:83:f4:b1:57:36:96:10:98:27:
                    58:be:fe:e6:1c:b7:c0:a2:c7:0b:58:cb:bf:6f:a4:
                    fa:f0:7a:5c:6f:17:cf:79:40:7e:a8:d8:90:c4:93:
                    6a:e9:0c:71:82:55:ef:f3:5e:ad:f4:84:36:a1:e5:
                    36:f8:a4:08:e8:3a:34:c3:ed:a2:f2:8a:4c:cb:3b:
                    13:80:b1:26:56:26:62:19:ce:3f:a9:84:29:46:6a:
                    9b:7b:7b:fa:1e:df:02:84:ef:56:0b:29:9c:d6:51:
                    2c:e1:5f:7b:d4:18:cb:16:87:4a:85:9c:26:6e:5b:
                    ee:ee:14:69:08:78:2a:a7:2c:06:ae:7e:d3:8a:da:
                    51:40:27:e9:e3:3e:72:90:aa:ff:3e:22:d2:fd:c4:
                    45:d9:81:32:b4:a8:1f:26:1f:3f:b4:66:b9:08:f4:
                    42:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:71:26:D8:FC:18:E0:B9:F8:02:19:5C:A2:80:A0:DF:7E:AF:40:ED
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:31:4e:63:ac:83:f1:37:1d:f1:cd:dc:6e:f5:d4:93:a8:01:
         e1:41:62:3d:56:2d:91:8f:a5:cf:5a:cc:1d:08:82:b4:07:ff:
         68:f2:f1:88:24:7b:37:ba:64:c1:e0:f5:5a:c7:e9:9d:11:c8:
         3a:8d:19:65:0e:ed:96:89:b8:a2:b3:13:63:57:97:25:1d:d7:
         9f:1d:1f:6b:1a:72:f0:e5:0e:79:e8:4a:62:f6:65:c3:14:ad:
         61:da:52:c9:0a:5a:74:74:ff:71:38:f2:67:07:25:23:f9:33:
         1c:bb:ef:00:e2:81:2f:82:f0:bb:50:c8:1a:70:0d:46:71:e7:
         25:40:45:2b:f8:12:fb:6c:bd:e2:4d:ac:bc:41:9e:46:86:87:
         51:b5:da:a7:96:8f:6c:bb:b0:4e:56:57:3b:a0:9e:bc:29:03:
         13:d1:83:d5:f1:06:52:4a:88:1f:e0:1b:0e:b1:21:dc:9a:a2:
         0b:82:ca:a1:65:6e:03:52:32:b5:8b:65:7b:bf:20:58:4a:45:
         f8:4f:a8:4a:fc:c2:92:9a:85:4c:2f:a2:2e:ab:fb:92:a0:1e:
         83:e0:b2:de:37:b9:dd:33:26:fd:94:82:70:ee:40:7b:85:a6:
         45:92:64:ef:5d:b6:0c:47:45:07:cb:25:5f:3f:60:72:19:fb:
         82:ea:ff:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----