Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          c2Ik3aiaoAFN14IZ9/+ZQIuZr/Z0zflCY4pMWC1lCUM=
Subject key identifier:   CE:46:3A:C3:D6:76:56:EE:63:09:11:A5:63:B2:29:51:68:16:46:31
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       626BDEC7B49298261888535B30BC553489C5A2BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          0582
Signing time:             Sat 19 Sep 2026 12:46:06 +0000
Manifest this update:     Sat 19 Sep 2026 12:41:06 +0000
Manifest next update:     Sun 20 Sep 2026 15:46:06 +0000
Files and hashes:         1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: P6weZ+bGmalCO7l4cKJKwaTyHbX9iQH0ZPLVX4EbbQ0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 11:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6b:de:c7:b4:92:98:26:18:88:53:5b:30:bc:55:34:89:c5:a2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Sep 19 12:41:06 2026 GMT
            Not After : Sep 20 15:46:06 2026 GMT
        Subject: CN=CE463AC3D67656EE630911A563B2295168164631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:65:9d:fe:dc:bb:1a:72:41:01:98:da:f7:7c:
                    d7:69:41:f4:ed:db:09:0a:42:a5:cd:2f:08:d3:29:
                    d2:7e:0b:d3:27:33:76:83:07:3b:38:f6:45:56:4f:
                    64:6e:c0:3d:ea:e6:9d:a4:c1:20:9f:79:69:71:6a:
                    af:91:f6:37:7d:0e:02:81:b8:76:19:24:97:79:f4:
                    92:36:1d:65:89:49:c8:2d:d9:fe:1b:9c:31:26:fc:
                    bd:26:8e:10:1f:1f:8e:a5:8c:d5:d1:73:f0:c2:ea:
                    13:8e:ae:c3:f3:1f:0f:20:d8:06:15:36:a7:36:dc:
                    31:5a:33:a0:d5:25:d0:1a:55:01:66:06:41:76:86:
                    60:ce:cf:19:66:6e:c5:13:e1:47:f1:11:c9:66:cf:
                    47:49:3e:af:37:3a:d0:c6:0c:99:33:36:aa:d1:26:
                    55:d7:b8:f0:a5:6a:fe:4a:00:62:0c:6e:61:d8:1e:
                    3e:78:82:13:93:28:fe:2e:bf:60:21:e3:0c:87:3c:
                    74:c9:56:56:f5:2c:ba:53:f9:39:50:e6:43:61:74:
                    2f:ed:1f:58:f6:55:c7:7d:53:06:40:cb:ce:63:34:
                    91:2b:b4:6f:52:2c:38:16:8d:61:b1:67:48:6a:91:
                    ab:77:3c:c0:22:97:e8:cf:7a:87:8a:ae:66:e4:38:
                    d8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:46:3A:C3:D6:76:56:EE:63:09:11:A5:63:B2:29:51:68:16:46:31
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c1:26:50:70:20:37:24:0c:ce:e6:61:7c:e4:2d:42:9d:77:
         8d:38:4a:31:1a:db:da:c5:2d:0c:a3:4e:b4:99:25:85:8c:e8:
         bf:7c:09:ff:22:73:1e:c7:1b:0a:7a:fb:23:d7:d6:f4:a4:9f:
         cb:6d:5c:68:4e:dc:ad:19:66:e2:85:b3:a7:e0:bb:6c:52:3e:
         15:c4:e8:32:78:de:15:82:a0:cb:7d:ab:46:b5:6e:c3:1e:68:
         49:4b:cf:31:87:61:07:a5:18:1f:54:18:78:be:e0:67:6e:c6:
         17:03:87:d3:7c:0d:d0:5b:ec:3e:10:79:70:18:32:9e:ba:5c:
         5f:4c:fe:0a:ff:0b:7e:9f:fa:e4:86:5b:b7:1e:ea:cc:62:5a:
         a8:04:36:e5:4c:e9:fd:cd:1a:e1:c3:f4:a9:23:dd:ce:4c:dc:
         25:66:5c:ee:f4:17:41:55:4c:ce:70:ac:66:e1:14:34:ed:7b:
         79:c1:c8:00:78:66:4f:40:d0:43:ff:1b:a1:df:f5:10:f4:96:
         be:92:5f:9b:9d:21:00:3b:5b:ea:83:7c:99:b4:34:e8:70:a3:
         2a:35:8f:1e:2f:86:0a:11:c2:89:24:60:5f:61:2b:50:17:ed:
         f3:ae:f2:b3:58:f0:25:ed:24:42:27:ca:2b:ea:cd:a6:de:ba:
         20:59:ec:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----