Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          olU12ICTr7r6KXfsk05EejbR79czEAx2lnKnGqpb7Zc=
Subject key identifier:   05:0F:A7:67:02:7B:1A:11:03:01:BB:E1:CD:60:91:A7:FF:2A:90:04
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       1085426BE66EF7003B25E185E036DA37B6691D8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05BA
Signing time:             Sat 31 Oct 2026 18:13:17 +0000
Manifest this update:     Sat 31 Oct 2026 18:08:17 +0000
Manifest next update:     Sun 01 Nov 2026 19:34:17 +0000
Files and hashes:         1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: k/4OpvsC4JPTdyBkOEdVORV6RYXVaz+on5wsNPUQ1p8=)
                          5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 19:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:85:42:6b:e6:6e:f7:00:3b:25:e1:85:e0:36:da:37:b6:69:1d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct 31 18:08:17 2026 GMT
            Not After : Nov  1 19:34:17 2026 GMT
        Subject: CN=050FA767027B1A110301BBE1CD6091A7FF2A9004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:92:b8:13:ac:91:91:7e:7d:53:72:be:bd:1c:
                    01:ad:d1:f3:e8:5d:21:35:a1:4e:95:67:f4:66:5f:
                    39:8a:66:b6:40:d6:7d:39:28:c1:62:eb:81:8a:17:
                    68:cc:04:26:a3:34:ba:89:69:29:8d:95:dc:15:0a:
                    b9:39:18:a2:0d:b2:10:12:30:67:3c:20:e2:c4:e8:
                    22:43:c4:25:81:2c:27:e9:bb:91:60:07:85:3d:72:
                    75:a0:c7:5e:3f:9b:a5:4b:da:48:54:76:d3:76:2c:
                    ff:9f:2e:4d:3c:61:64:94:b3:57:bb:f6:d6:14:17:
                    e9:0f:64:10:e8:81:85:a5:46:f4:4c:26:98:1c:65:
                    dd:b5:f2:ee:d6:23:89:af:b8:0c:15:08:32:a8:e6:
                    c8:18:a4:2b:63:8c:0b:4e:3f:9c:3a:00:57:c8:0c:
                    1f:cc:1c:81:dc:ef:57:95:0b:c9:b8:53:7e:c6:c4:
                    b5:d8:ad:bc:ea:47:31:23:cf:f8:b8:d6:32:56:57:
                    b3:00:e1:3d:72:7a:94:84:20:d6:33:08:8f:1c:91:
                    dd:7a:33:98:e2:0a:e2:93:ae:92:89:b2:6d:01:b8:
                    55:58:d8:d0:42:b9:07:aa:c8:22:2a:42:07:1e:23:
                    94:3f:3d:0a:da:51:25:d1:85:c0:5d:21:91:b8:53:
                    54:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0F:A7:67:02:7B:1A:11:03:01:BB:E1:CD:60:91:A7:FF:2A:90:04
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:4a:5b:82:80:7c:8f:98:ca:6e:08:0a:82:20:27:3b:05:f4:
         b8:c0:01:f8:10:2b:70:fa:4a:8e:a5:08:9f:fb:eb:7d:ed:ba:
         25:54:9f:4d:fe:94:01:16:88:a8:8d:9b:02:e3:3e:06:97:2c:
         17:d9:78:71:28:ab:0c:f2:9f:d7:94:2e:2a:5e:16:f8:53:03:
         33:1d:4c:4c:ae:0b:94:cd:c7:fb:b9:85:90:e6:61:d9:6b:f5:
         89:c1:8d:93:4e:ad:bf:c8:90:ba:75:be:22:8a:3b:19:68:70:
         a8:8a:6e:a7:73:20:21:a7:bc:50:6b:85:f0:65:86:84:26:8d:
         94:59:c6:09:1a:75:1f:56:4c:71:0a:e2:75:ce:9c:80:99:ab:
         09:8e:f8:34:63:39:c0:74:15:e1:3f:6c:eb:c2:ee:cd:b5:e9:
         e9:50:d5:a4:cd:46:59:2f:72:4a:41:d4:62:44:ba:f7:86:56:
         6a:66:cf:03:db:80:bf:5e:18:81:e5:4a:b4:3a:b8:3c:14:74:
         f5:b7:c0:ed:bc:bc:fe:74:3d:d9:be:91:66:af:e9:e2:22:16:
         a8:31:af:8f:52:65:a4:ec:23:e6:93:dd:39:0e:77:cc:98:15:
         95:53:27:20:5c:91:51:6a:07:f9:49:f6:4d:2f:cd:c3:ef:66:
         03:b5:85:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----