Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          4p9GmyOrZj6U3mbDOdy240pQzbHaGoZTS68jAtKM+jM=
Subject key identifier:   65:13:6E:57:86:B3:19:AE:2C:3D:6C:92:92:99:38:B6:79:1D:0E:A8
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       094C35195A957BCCA951E7923815E533EABCF4CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05B8
Signing time:             Fri 30 Oct 2026 03:55:39 +0000
Manifest this update:     Fri 30 Oct 2026 03:50:39 +0000
Manifest next update:     Sat 31 Oct 2026 06:54:39 +0000
Files and hashes:         1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: wqIJthonAulr/eUO+hF+0qygKptyaUC/Cptm24Wy2bc=)
                          3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 06:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:4c:35:19:5a:95:7b:cc:a9:51:e7:92:38:15:e5:33:ea:bc:f4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct 30 03:50:39 2026 GMT
            Not After : Oct 31 06:54:39 2026 GMT
        Subject: CN=65136E5786B319AE2C3D6C92929938B6791D0EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:84:03:df:ee:71:e4:99:5f:5d:93:91:c6:9c:
                    6b:60:df:29:16:2d:2c:ef:1b:c9:02:61:75:a8:70:
                    9e:98:0b:69:c8:23:ed:e4:ef:20:e4:57:d9:7f:8b:
                    78:f4:c3:0a:30:2b:67:46:0b:29:e2:23:e1:df:eb:
                    4a:5b:66:74:31:19:87:b6:2d:53:40:7f:ef:4b:32:
                    c9:a5:40:76:8e:04:9d:74:02:6d:b5:9e:a3:1a:a9:
                    56:19:72:69:e1:fd:be:92:73:8d:d5:23:cc:91:3b:
                    e8:16:02:e0:81:d5:ea:72:59:56:44:42:e2:a3:04:
                    f3:9b:1c:1c:fe:2d:48:e4:b9:35:82:ab:29:53:e9:
                    4d:b5:0e:64:e2:16:09:b4:93:ce:c8:43:ab:be:1a:
                    26:d2:38:c2:2d:6d:50:2a:01:c7:e0:ff:43:bb:ab:
                    eb:67:43:50:f7:7b:24:e9:ba:9b:ec:b5:ce:2a:d7:
                    db:64:74:74:73:4b:85:91:81:fa:8c:2d:85:e6:09:
                    1c:8a:87:27:1c:d7:51:3c:a0:3f:54:00:a6:1e:81:
                    30:f0:54:a8:bb:3a:41:03:bf:af:c6:f2:aa:c0:02:
                    3f:8b:64:fe:b8:ec:6b:d8:b4:d8:b5:b9:ae:ac:41:
                    8d:5a:9f:a9:69:fb:69:a2:7e:6a:f4:05:96:26:9e:
                    30:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:13:6E:57:86:B3:19:AE:2C:3D:6C:92:92:99:38:B6:79:1D:0E:A8
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:dd:f6:d1:8e:19:78:9f:fb:f2:63:0c:0c:b9:43:6c:91:7b:
         b0:86:e7:54:90:07:79:36:c6:8a:aa:c9:03:06:74:87:99:69:
         8d:57:c4:43:66:71:79:ae:31:4e:ea:0d:2e:1c:f5:87:5d:ad:
         5e:69:ae:fc:88:9d:99:3b:ad:58:6a:e8:3c:44:62:d1:17:70:
         f1:63:43:af:37:0a:fe:bc:0c:98:52:1b:b1:57:61:77:59:0c:
         66:6d:8b:9d:e6:cf:92:1a:1b:73:7d:ad:8a:41:4f:ff:32:9d:
         df:2d:c5:19:09:ef:ac:86:81:5c:05:1f:d1:27:57:d8:ac:c3:
         d4:6c:ed:f0:46:d2:1d:a2:32:4a:a6:1f:66:97:c3:c0:cc:89:
         d6:ff:92:2d:4c:a1:08:b2:74:fe:71:73:6d:56:0e:0a:2d:5d:
         b9:74:5e:3e:87:06:8c:b6:7e:fc:d2:83:52:96:d5:a7:bd:38:
         dd:92:9b:56:d4:70:80:ed:a8:5d:59:95:8c:b1:82:4a:b5:0d:
         08:58:c2:ba:33:6a:12:ca:19:63:75:94:82:cb:25:bf:8e:10:
         4b:fd:f3:a0:b8:4d:5c:1e:d5:84:ec:76:08:25:7b:50:02:30:
         60:a1:75:d5:3a:40:95:eb:d5:d9:9a:6c:56:8f:b9:3d:c1:cd:
         52:5f:b1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----