Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          gdKoPXiwMF1LfJNJL0GmCTwD1zvUpPUKiYv3DIcxsHg=
Subject key identifier:   23:F0:1F:1C:9E:98:48:BD:51:8A:2D:BC:71:EA:65:FF:BF:A0:31:DB
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       361A8AC0D1802C770E92EACAB538D12D4D71C3DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05B1
Signing time:             Sat 24 Oct 2026 23:40:50 +0000
Manifest this update:     Sat 24 Oct 2026 23:35:50 +0000
Manifest next update:     Mon 26 Oct 2026 03:00:50 +0000
Files and hashes:         1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: WohFES2RkkRrMLGFVktc34B7o6iGlUGncX1GggNLdcg=)
                          8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1a:8a:c0:d1:80:2c:77:0e:92:ea:ca:b5:38:d1:2d:4d:71:c3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct 24 23:35:50 2026 GMT
            Not After : Oct 26 03:00:50 2026 GMT
        Subject: CN=23F01F1C9E9848BD518A2DBC71EA65FFBFA031DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c2:9e:8c:2a:01:54:34:05:70:10:bd:f7:ed:
                    de:9c:a4:b8:e9:f5:af:2c:8f:eb:0b:53:7b:d9:57:
                    e5:68:bc:81:fa:23:bd:c3:10:45:c4:93:d8:d5:87:
                    f1:1a:9e:a4:e6:9a:16:7f:fd:d7:0d:88:1c:fb:cc:
                    e8:19:9f:1a:8b:51:bb:44:cd:b9:a2:50:91:a8:17:
                    3d:79:2f:2a:4a:45:98:b8:d1:ac:2a:5f:51:1d:1a:
                    35:bd:25:4a:7b:e6:4a:9e:98:c9:c1:28:41:8f:2d:
                    2d:b7:8c:57:94:bc:d5:37:42:ab:1d:d3:b2:1d:5a:
                    2c:b5:d7:d8:76:2c:0f:14:3d:71:71:3d:e8:51:23:
                    51:ea:a8:56:7a:df:54:91:0a:72:c9:ad:1e:24:c7:
                    12:37:6c:ae:61:66:3f:f7:99:86:e3:70:e3:50:97:
                    57:d7:6a:cf:2a:ab:93:01:50:38:21:ce:c5:10:ac:
                    dc:00:86:c3:95:85:b1:51:0d:3e:93:6d:71:ac:cb:
                    c5:a9:7e:b4:eb:8f:3d:ab:cd:ce:59:fa:5c:20:da:
                    8e:c9:3b:58:fe:3a:b5:70:72:3f:ef:82:18:75:74:
                    f6:54:5a:a2:c3:08:83:2f:62:6a:99:b9:5c:07:cb:
                    06:6b:c0:fb:90:d2:22:40:2a:c6:56:ac:47:83:fa:
                    e3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F0:1F:1C:9E:98:48:BD:51:8A:2D:BC:71:EA:65:FF:BF:A0:31:DB
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:97:d2:57:ba:54:04:e1:36:37:e7:f8:43:d4:ce:a6:d2:8f:
         17:b5:bf:f8:dc:ce:f7:d8:8b:e4:c8:c0:d3:5c:05:7c:93:af:
         c0:0e:95:2b:34:42:a7:bd:70:22:88:3a:91:9c:aa:ea:b9:f6:
         5c:35:cc:5b:41:86:bb:0a:cd:af:ff:22:2a:75:35:27:6c:db:
         0f:9e:48:79:0f:01:2c:f3:b4:a0:d0:e0:f8:52:2d:b9:07:66:
         78:38:bb:c5:bd:e4:7b:1c:06:e7:19:b5:86:4e:b4:cd:f7:41:
         9f:b0:36:f4:7c:5c:05:85:27:9a:8f:8a:6a:28:ad:73:00:69:
         d4:82:02:2d:10:a6:6a:a7:ae:9e:05:18:e4:ad:c1:65:dc:a2:
         b1:13:f4:12:4e:43:d1:77:e0:a7:ed:27:a8:06:8a:cc:f7:b8:
         84:db:3a:d6:2c:92:63:e2:e1:e8:5a:9d:30:37:26:12:d5:d5:
         b1:47:90:73:6a:ff:c2:47:88:e7:82:da:7d:23:49:18:34:ff:
         50:eb:1e:ab:21:88:13:7b:ac:8f:ea:57:8a:e1:46:e6:c2:0c:
         2c:f4:b1:4a:69:94:3d:8a:fc:83:ec:17:69:79:30:f1:9c:f6:
         51:a7:e9:4a:8f:7a:ab:29:91:76:17:b2:33:09:0f:d1:90:00:
         f4:9c:23:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----