Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          qMXeJzNubg/IpQgjh/SHMP1V877V1MrTPSkPvLPR5nE=
Subject key identifier:   F7:D0:C4:DB:C2:3B:6B:55:B2:76:AC:2A:77:71:AD:F8:24:5E:6C:A5
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       796B71D8D10EAB8B5A53015F59AED9AE6F1507BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05C5
Signing time:             Mon 09 Nov 2026 03:13:25 +0000
Manifest this update:     Mon 09 Nov 2026 03:08:25 +0000
Manifest next update:     Tue 10 Nov 2026 06:05:25 +0000
Files and hashes:         1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: fLRwTsqAxbh/HT+8gwvR4BxrTENA7lRr/NcbixttdD8=)
                          6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 02:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6b:71:d8:d1:0e:ab:8b:5a:53:01:5f:59:ae:d9:ae:6f:15:07:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Nov  9 03:08:25 2026 GMT
            Not After : Nov 10 06:05:25 2026 GMT
        Subject: CN=F7D0C4DBC23B6B55B276AC2A7771ADF8245E6CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:9b:f7:20:8b:b6:00:8b:a5:7c:bc:51:2f:
                    d1:5e:9f:33:e1:0b:c7:ec:74:5a:f5:d4:08:86:45:
                    18:3d:f2:b2:39:e3:b5:c1:aa:8c:c1:b3:c4:d3:49:
                    6a:a0:b3:e6:b5:fb:9b:de:97:43:9c:98:3a:c3:3c:
                    bb:e9:e6:ae:fa:0f:d7:cb:d6:3b:c2:c6:c7:18:46:
                    aa:b7:a1:f7:27:c3:01:5a:ad:a8:07:e5:93:d8:89:
                    00:dc:5d:8f:a9:56:59:16:0d:c3:0f:4b:0b:95:36:
                    84:a2:07:bb:3e:52:11:f6:e3:6a:27:a0:0e:0e:d6:
                    7a:8d:2c:a1:0c:46:ef:42:93:62:c1:22:26:9f:66:
                    09:3b:ee:48:ba:78:eb:a2:b4:33:8c:86:4b:ad:af:
                    1c:c5:ff:77:ad:58:3e:5e:31:b8:26:b7:e7:ba:0a:
                    9a:55:17:73:7f:a3:01:99:d1:99:2b:2f:df:a2:5c:
                    d7:f0:21:71:1f:0f:32:84:20:99:1e:7a:7d:a3:69:
                    30:58:0d:0c:a8:be:6b:eb:31:1b:8a:57:e4:3c:b5:
                    1a:18:34:a2:a4:23:2b:8b:8b:56:09:cd:ed:d3:f2:
                    db:31:8d:53:b5:7a:1a:0a:e2:17:41:e0:9e:3e:ad:
                    2d:36:6d:4d:31:1f:d9:cd:b1:06:08:90:3b:6c:61:
                    78:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D0:C4:DB:C2:3B:6B:55:B2:76:AC:2A:77:71:AD:F8:24:5E:6C:A5
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d4:5b:3e:f8:e3:8b:fc:e9:d6:af:c6:fe:b4:00:43:59:63:
         13:39:61:2f:81:b3:72:f5:e1:50:84:83:cb:17:a4:12:22:be:
         64:3b:4b:f1:06:8d:4a:ad:63:b3:2b:e6:49:72:b8:47:32:92:
         e6:1c:ad:61:5d:c1:ff:6c:80:f2:d5:b0:5a:6e:8f:3d:6c:06:
         45:c8:23:4c:35:93:79:44:11:3f:bd:4e:a5:15:39:61:7c:43:
         5a:bc:a1:a7:e1:fc:f8:08:99:b8:8e:d4:ed:49:21:8d:fc:de:
         2b:93:d3:bb:d8:11:48:f5:d1:3e:9b:e8:a4:60:aa:35:1f:20:
         ef:f1:8c:67:2f:d6:01:ad:6a:ce:d8:43:00:55:7b:82:3e:f0:
         e6:4b:02:89:c7:98:d7:0b:14:7c:b9:5d:a4:99:1c:c3:48:a4:
         2a:87:d0:d5:93:4b:2c:6a:34:1c:e4:5e:f6:39:6d:04:50:ee:
         fc:1e:32:89:dc:4f:a1:1a:d6:3c:51:4a:8d:ae:d7:cc:51:d4:
         a5:a3:f7:04:a9:15:d4:50:ec:68:5e:b0:cc:d2:56:b5:63:a0:
         47:01:ac:6d:55:c1:b1:f5:ec:3e:7e:8e:0b:30:28:8f:56:b4:
         81:c5:e4:13:83:c8:58:8d:4c:72:6c:32:2b:35:32:5e:25:5a:
         20:a3:d9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----