Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          +cDy/o7fuMl3ySfzJoTu3ks5ZVRaI9fW/epFk8SB1yg=
Subject key identifier:   15:34:C6:4E:EC:19:4C:80:2F:22:A4:61:11:29:78:B8:34:48:0C:35
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       54B6593759D68B731DB794D28C1A6793C7C65F41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          057C
Signing time:             Mon 14 Sep 2026 23:14:14 +0000
Manifest this update:     Mon 14 Sep 2026 23:09:14 +0000
Manifest next update:     Wed 16 Sep 2026 03:05:14 +0000
Files and hashes:         1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: RsJetWENHXEcne6u0nzrh86xLJ0PfbEPd6SnY8CePbI=)
                          6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 03:05:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b6:59:37:59:d6:8b:73:1d:b7:94:d2:8c:1a:67:93:c7:c6:5f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Sep 14 23:09:14 2026 GMT
            Not After : Sep 16 03:05:14 2026 GMT
        Subject: CN=1534C64EEC194C802F22A461112978B834480C35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:4c:8d:d5:b3:d1:a1:f0:14:0a:92:56:2d:
                    58:b1:a8:72:73:ca:86:e6:08:5a:3e:c2:34:72:a0:
                    14:2d:de:e0:45:da:40:74:5c:c7:3e:8a:7c:a7:ba:
                    7f:a5:43:51:45:1e:cb:5b:2e:d9:11:49:29:7d:b0:
                    e5:f3:7c:99:e3:07:fc:c7:00:63:a9:48:26:23:c8:
                    e8:98:15:45:d4:94:29:fb:24:aa:5b:01:42:10:0c:
                    ca:94:84:70:6c:a5:89:1b:1b:d9:69:2d:23:51:ce:
                    d2:ab:be:f6:14:ed:72:78:67:0d:ea:4c:2f:d8:d3:
                    f6:b4:f1:41:88:a7:e6:c1:ba:a4:86:79:65:05:61:
                    8c:46:d7:b6:18:06:8e:6b:ca:8e:e0:1e:d0:e0:3c:
                    fe:ce:7a:dc:fd:76:f3:90:47:95:72:7a:93:66:24:
                    d8:91:a2:59:ef:9a:f7:4b:99:85:3b:29:39:99:ed:
                    0a:bd:9d:89:5f:13:90:5a:01:05:01:69:79:fb:be:
                    e3:51:dd:17:1d:55:a2:fe:2f:41:27:33:ee:85:c5:
                    44:31:ec:63:34:a2:71:6c:9a:c0:e9:46:fe:8a:c8:
                    a2:5b:f1:6d:be:9f:d9:64:ba:a2:1a:08:0e:e7:35:
                    20:b7:8d:d8:bb:1b:7f:22:30:0f:5b:e6:e7:06:ab:
                    8a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:34:C6:4E:EC:19:4C:80:2F:22:A4:61:11:29:78:B8:34:48:0C:35
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c4:a1:33:71:0d:3d:2f:a8:6e:ca:2b:75:84:32:62:02:16:
         d0:a2:3c:3a:6f:97:06:96:21:0c:cc:70:6f:99:0a:5f:6b:3b:
         b2:34:79:b6:9c:3c:19:7a:ef:80:b0:b3:25:77:c4:51:07:1a:
         c4:53:58:8a:87:63:ef:51:89:9e:8a:bb:1a:d6:41:39:ba:47:
         63:37:d4:6d:75:6f:4f:b1:d3:71:5f:19:f9:e2:eb:30:73:a2:
         f9:e8:f2:b3:5c:85:51:63:7e:b6:b6:2d:ce:16:fe:e4:5b:08:
         11:ca:42:07:21:92:46:98:00:67:8e:d1:e7:98:d6:02:62:d7:
         17:bc:1e:31:e0:70:fb:e8:04:96:0c:4f:35:93:5b:dc:02:f5:
         95:69:a9:55:6d:bd:14:a3:cb:91:b1:34:0b:8a:d8:07:ce:8a:
         91:1a:2e:c7:37:13:5c:bf:07:29:a3:41:fe:3c:51:bd:b3:b6:
         1d:52:6d:9d:26:03:1e:8e:22:d6:69:79:a3:3d:fc:e0:c5:9f:
         70:47:64:0a:15:30:4f:d1:71:5a:cd:32:a4:2f:8f:4f:d2:54:
         a5:81:f8:19:dd:3f:86:b5:ec:21:a4:12:f3:40:2e:a9:62:54:
         b4:94:d7:cb:62:f5:5e:96:b3:55:7f:e4:d7:f1:c1:cf:b9:ad:
         78:ec:87:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----