Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          mqQO2Mr72a6OJhUNywI/9AoLycKkMWDgJpY7K3Iz3+E=
Subject key identifier:   3D:FA:61:88:D3:CB:D1:11:8C:29:E9:BD:3A:BF:0A:20:3C:06:D1:65
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       505F768C8D384E5F142EBE24FD35FA0C5CD00900
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          0576
Signing time:             Thu 10 Sep 2026 07:31:58 +0000
Manifest this update:     Thu 10 Sep 2026 07:26:58 +0000
Manifest next update:     Fri 11 Sep 2026 10:37:58 +0000
Files and hashes:         1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: HseaG3TWg2NjfcuJ+CyIYi49wG6Bdszl58pjr2oRxwQ=)
                          7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5f:76:8c:8d:38:4e:5f:14:2e:be:24:fd:35:fa:0c:5c:d0:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Sep 10 07:26:58 2026 GMT
            Not After : Sep 11 10:37:58 2026 GMT
        Subject: CN=3DFA6188D3CBD1118C29E9BD3ABF0A203C06D165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a3:7a:5b:44:b9:89:91:65:40:d7:a1:dd:14:
                    58:1c:c6:5c:f1:a4:61:29:af:87:85:6f:00:42:5e:
                    c6:a3:53:58:3c:9b:a9:93:5c:19:d6:66:a3:59:85:
                    a0:96:28:44:e9:14:a3:b3:9e:38:b7:e4:0d:bf:4b:
                    7d:2c:ad:83:fa:1c:ed:75:43:a0:25:db:22:f0:1a:
                    6f:fc:5b:a4:4d:49:4b:0d:d9:b0:63:5c:9d:ea:7a:
                    a7:23:82:fe:d5:a3:f7:3a:87:eb:c9:09:1c:47:18:
                    e7:7a:23:65:b2:bf:c4:d3:9a:45:9a:66:e3:8f:ca:
                    3c:a5:03:be:a3:ab:b8:1f:5c:af:5b:c0:39:34:12:
                    93:c2:0b:5c:5e:50:12:1a:7e:65:32:11:6e:f0:d9:
                    5a:af:45:55:93:8c:39:e4:53:da:ef:e5:b0:63:77:
                    93:80:05:fa:3d:11:dc:8f:18:0b:e7:29:2c:4a:7a:
                    9f:d5:47:3f:91:7e:6c:43:3c:31:92:14:f5:b3:29:
                    dd:fa:e6:a6:58:66:07:d0:dd:2d:88:ce:3f:0a:11:
                    9f:66:93:a9:c4:fa:4a:e1:2d:1f:fd:45:f3:bd:52:
                    bf:d4:7a:9a:bc:fd:a7:d7:77:d5:4c:bf:f8:cd:0a:
                    e1:94:68:57:5b:3a:77:36:e4:0e:86:45:42:79:ca:
                    d4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FA:61:88:D3:CB:D1:11:8C:29:E9:BD:3A:BF:0A:20:3C:06:D1:65
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:3c:26:44:7e:e4:df:25:88:05:c8:79:f9:a5:3a:1d:bc:7e:
         c2:25:ea:07:4f:b6:42:30:c5:19:c6:2d:cc:00:25:4d:4a:d8:
         11:67:2d:eb:f1:9f:23:24:d2:95:43:70:16:e9:41:a6:43:53:
         6b:df:36:42:e8:3e:4d:c5:5b:a7:d4:c3:b6:27:6e:ee:44:d3:
         af:3e:b5:9a:a3:8a:62:fa:15:34:f3:af:c5:e0:c0:bf:82:92:
         8e:54:35:c8:80:52:48:e6:a7:27:d8:cf:d6:c7:b5:c3:92:a8:
         95:9d:f0:76:b5:bd:8f:41:35:07:62:eb:9b:5c:2e:e1:b9:5b:
         d3:1a:c3:d8:83:b6:a4:f3:54:7c:24:47:0b:e4:a3:0c:b2:13:
         dd:4b:65:49:48:c6:a7:ce:37:76:56:e8:1a:3a:76:49:c9:84:
         a8:c4:e0:d6:1b:24:f5:05:05:85:8f:27:c7:93:21:d3:19:6d:
         03:10:a5:96:74:19:0a:d6:7a:a3:1d:34:a7:82:0f:27:f8:f9:
         6b:bf:7e:20:46:3f:3b:84:50:29:34:75:92:b9:04:1a:bd:29:
         53:89:c1:78:2d:cf:44:27:af:68:b2:d9:97:1b:f1:85:76:53:
         97:f2:35:59:40:41:10:1f:ba:26:44:51:17:fc:26:71:37:bf:
         d5:53:ff:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----