Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          9bTEiPfT7x9UWbNFL68ejkc65aXp+YzHGFCA7mBdEaw=
Subject key identifier:   D3:8F:45:61:89:FF:81:DA:9D:74:A7:08:DD:A2:77:84:25:29:22:5C
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       519D58BA557F63234E9F252FCA83BC1C4075F910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          046B
Signing time:             Sat 21 Feb 2026 03:50:17 +0000
Manifest this update:     Sat 21 Feb 2026 03:45:17 +0000
Manifest next update:     Sun 22 Feb 2026 04:43:17 +0000
Files and hashes:         1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
                          2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
                          3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: UjC2+xpM/1ji9nEixsMS43SK1RCznxTeRDNgicbXLGA=)
                          4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
                          6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=)
                          7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
                          8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Feb 2026 00:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9d:58:ba:55:7f:63:23:4e:9f:25:2f:ca:83:bc:1c:40:75:f9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Feb 21 03:45:17 2026 GMT
            Not After : Feb 22 04:43:17 2026 GMT
        Subject: CN=D38F456189FF81DA9D74A708DDA277842529225C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:a9:24:2e:27:33:4b:90:34:fc:c4:4f:6d:
                    1d:7e:e5:62:cf:45:76:a5:8c:cf:6e:a0:89:ab:b3:
                    30:a0:b3:5b:8d:6f:47:c3:ea:9b:d1:fe:1c:19:c9:
                    d2:7e:a3:36:ba:67:58:fd:4a:6f:68:c2:62:5a:26:
                    2d:d1:26:91:18:bf:5b:0e:5c:aa:4e:40:8b:47:48:
                    c5:70:18:20:03:9f:9a:0b:39:5e:cb:3f:b3:e4:01:
                    87:16:f7:aa:f3:89:d2:11:bb:24:ce:c4:cf:5b:d4:
                    82:a1:bc:67:10:05:2a:1d:3f:37:02:a1:35:ca:46:
                    2a:a3:1f:0c:54:ac:ab:16:be:f3:56:cf:14:49:ca:
                    01:94:1b:56:c7:6d:ca:4d:01:81:ce:08:49:3f:81:
                    fe:a7:3e:57:d2:cb:46:ea:4d:d3:b1:1a:83:fd:e2:
                    97:c8:ea:f3:85:e3:2d:51:0d:85:45:f3:4a:15:91:
                    38:66:ee:34:57:99:e4:78:2b:d1:cc:b8:0f:8f:5a:
                    31:57:9d:42:65:cf:45:6c:9d:c1:77:e6:09:a1:2f:
                    4f:ce:1a:28:b0:54:91:7c:7c:16:59:38:17:34:e8:
                    d0:b9:02:f3:72:7f:2d:e9:88:84:14:cb:14:74:e8:
                    94:18:97:26:39:a4:39:c3:31:51:29:4f:4c:8b:4e:
                    55:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8F:45:61:89:FF:81:DA:9D:74:A7:08:DD:A2:77:84:25:29:22:5C
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:af:e3:03:51:eb:da:c7:d7:e5:fc:e5:14:4b:91:33:b0:52:
         4c:75:87:30:9e:23:58:88:ac:cf:b2:74:15:89:f8:96:b1:60:
         4b:46:06:70:7f:d1:92:b8:7e:6d:5c:a1:fa:30:0c:07:18:70:
         f1:c8:15:f0:69:c8:c9:0e:88:3d:dd:e3:2a:4b:94:6f:87:fe:
         5f:25:3f:9b:c9:02:7f:68:51:b1:5e:93:97:fc:ff:9d:07:d6:
         6d:26:2f:a0:e7:8c:a5:c8:60:37:2f:3d:71:d9:a1:ce:bf:e7:
         2b:d3:ac:25:0e:61:fd:30:a0:b6:a4:a8:27:90:0d:a0:63:39:
         9c:03:5e:4c:45:06:6a:74:e1:36:ee:50:7d:55:cd:ae:d1:d3:
         82:15:fd:91:33:f4:b6:a6:1b:de:7f:92:87:2c:0d:ce:83:84:
         e3:ca:07:49:31:5c:5a:59:1c:e7:bf:20:94:18:37:48:c7:9a:
         9a:fe:a9:73:c3:72:9f:86:fe:0a:a2:dc:da:a1:cc:cb:58:bf:
         95:61:f2:85:75:ab:60:85:e7:a4:1c:33:5f:b4:1f:e7:85:8f:
         17:d5:b6:11:80:cd:e9:e5:4e:44:67:24:53:a9:71:08:2e:c6:
         70:bb:fe:97:32:5a:43:ce:bc:ac:02:0d:db:6a:60:3d:05:95:
         aa:bb:44:5a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUUZ1YulV/YyNOnyUvyoO8HEB1+RAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0
N2RjZWVlYTAeFw0yNjAyMjEwMzQ1MTdaFw0yNjAyMjIwNDQzMTdaMDMxMTAvBgNV
BAMTKEQzOEY0NTYxODlGRjgxREE5RDc0QTcwOEREQTI3Nzg0MjUyOTIyNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUpakkLiczS5A0/MRPbR1+5WLP
RXaljM9uoImrszCgs1uNb0fD6pvR/hwZydJ+oza6Z1j9Sm9owmJaJi3RJpEYv1sO
XKpOQItHSMVwGCADn5oLOV7LP7PkAYcW96rzidIRuyTOxM9b1IKhvGcQBSodPzcC
oTXKRiqjHwxUrKsWvvNWzxRJygGUG1bHbcpNAYHOCEk/gf6nPlfSy0bqTdOxGoP9
4pfI6vOF4y1RDYVF80oVkThm7jRXmeR4K9HMuA+PWjFXnUJlz0VsncF35gmhL0/O
GiiwVJF8fBZZOBc06NC5AvNyfy3piIQUyxR06JQYlyY5pDnDMVEpT0yLTlU5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU049FYYn/gdqddKcI3aJ3hCUpIlwwHwYDVR0j
BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx
MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm
Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03
ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD
Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcq/jA1Hr2sfX5fzlFEuR
M7BSTHWHMJ4jWIisz7J0FYn4lrFgS0YGcH/Rkrh+bVyh+jAMBxhw8cgV8GnIyQ6I
Pd3jKkuUb4f+XyU/m8kCf2hRsV6Tl/z/nQfWbSYvoOeMpchgNy89cdmhzr/nK9Os
JQ5h/TCgtqSoJ5ANoGM5nANeTEUGanThNu5QfVXNrtHTghX9kTP0tqYb3n+ShywN
zoOE48oHSTFcWlkc578glBg3SMeamv6pc8Nyn4b+CqLc2qHMy1i/lWHyhXWrYIXn
pBwzX7Qf54WPF9W2EYDN6eVORGckU6lxCC7GcLv+lzJaQ868rAIN22pgPQWVqrtE
Wg==
-----END CERTIFICATE-----
Generated at Sat Feb 21 09:22:14 2026 by rpki-client