Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          l91+8e15HA+Ctf9jwoZ5dxyrjzi5rN4NyD5v38O8MpE=
Subject key identifier:   41:E4:55:56:5E:8F:C2:C7:D1:24:80:AD:B0:86:F9:2E:71:D6:09:6B
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       3F9C760121E17821F0F0F91251F78D48C86BEA12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          058D
Signing time:             Sun 27 Sep 2026 23:41:36 +0000
Manifest this update:     Sun 27 Sep 2026 23:36:36 +0000
Manifest next update:     Tue 29 Sep 2026 02:30:36 +0000
Files and hashes:         1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: dRdi+LfpiDUhPIhhuOmUMk5Us2c0K0twjdGW9F6M0W0=)
                          5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 02:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9c:76:01:21:e1:78:21:f0:f0:f9:12:51:f7:8d:48:c8:6b:ea:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Sep 27 23:36:36 2026 GMT
            Not After : Sep 29 02:30:36 2026 GMT
        Subject: CN=41E455565E8FC2C7D12480ADB086F92E71D6096B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:14:5e:7f:ff:30:c7:cb:9e:d8:ed:f5:b3:1c:
                    d2:8c:17:8a:fe:21:96:a3:28:d3:49:ba:1f:fc:3f:
                    d8:e8:1e:ee:0b:fd:f8:27:89:35:34:8b:16:1a:45:
                    23:97:7d:e1:68:23:4b:32:78:05:0f:24:8d:92:fb:
                    02:fd:49:35:a3:36:b1:62:10:2b:1c:00:ee:bc:b0:
                    4d:98:c9:2c:3d:9e:32:3a:d7:19:e3:49:c0:f8:f0:
                    52:fa:86:ee:5f:d6:be:2e:bc:3a:5a:37:20:6b:25:
                    87:24:dc:55:0c:58:a1:e4:d8:fe:74:68:86:2e:26:
                    31:92:c7:ee:4a:79:61:e4:f9:34:ec:58:65:62:33:
                    ce:da:be:34:0b:00:a2:68:f5:b7:48:9a:5c:e7:e2:
                    24:8c:f2:7a:73:3a:80:80:bf:2b:6e:f2:de:2f:6f:
                    0b:6a:95:e3:47:86:87:69:f4:a8:bd:10:67:a6:79:
                    5f:9c:38:93:e5:11:a7:8a:d8:86:98:70:90:39:65:
                    b3:dd:ae:19:4f:23:e7:84:03:3f:5c:13:37:65:bc:
                    76:c0:0c:46:6f:2e:8b:b8:77:62:68:f1:9e:62:93:
                    39:87:56:c8:d1:fa:6c:76:62:27:58:47:16:c0:30:
                    11:93:c8:1b:af:2c:f5:44:4d:9b:c2:fe:37:12:b0:
                    98:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E4:55:56:5E:8F:C2:C7:D1:24:80:AD:B0:86:F9:2E:71:D6:09:6B
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:6a:9d:77:c7:b3:89:83:f6:ac:67:46:ac:92:76:71:e6:c4:
         55:84:70:f1:2b:ab:ff:96:fe:8d:69:85:16:09:13:d8:44:9a:
         eb:37:dd:5d:79:36:fc:5d:1c:61:72:ea:c3:b0:78:d5:04:a5:
         12:84:30:a3:b0:81:2b:6f:de:a9:60:08:98:0a:df:24:fc:28:
         c2:f8:43:8e:c3:ec:7e:9d:1c:56:34:38:91:44:67:1a:58:d8:
         12:ca:e8:4e:e8:32:63:d7:ac:58:59:ab:37:91:0a:90:88:4f:
         11:8b:9f:09:f3:e8:0e:38:02:c1:44:65:85:03:1b:7a:b5:fd:
         38:e3:7b:e6:7f:04:58:f4:3a:8d:3b:4b:d9:9d:41:c6:c7:59:
         7a:0f:1f:e8:e5:6f:66:fa:a9:11:ae:ad:69:5f:92:f6:6e:a4:
         d3:b0:98:ca:64:96:f0:1b:85:1a:5a:c5:3b:68:ec:03:d8:6e:
         63:17:f0:04:fb:92:95:b9:b5:f2:c1:ba:27:14:d8:f7:db:f2:
         86:83:2d:a1:f4:54:1b:de:c6:e4:26:37:bc:af:95:cb:2a:f9:
         31:6a:6d:b4:ca:9a:b8:8d:97:28:3c:c8:f2:bb:b6:f4:23:bf:
         fd:45:59:f2:0d:f1:b9:0f:fb:a3:77:be:8b:de:15:8c:92:f3:
         8d:57:4e:b1
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUP5x2ASHheCHw8PkSUfeNSMhr6hIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0
N2RjZWVlYTAeFw0yNjA5MjcyMzM2MzZaFw0yNjA5MjkwMjMwMzZaMDMxMTAvBgNV
BAMTKDQxRTQ1NTU2NUU4RkMyQzdEMTI0ODBBREIwODZGOTJFNzFENjA5NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkFF5//zDHy57Y7fWzHNKMF4r+
IZajKNNJuh/8P9joHu4L/fgniTU0ixYaRSOXfeFoI0syeAUPJI2S+wL9STWjNrFi
ECscAO68sE2YySw9njI61xnjScD48FL6hu5f1r4uvDpaNyBrJYck3FUMWKHk2P50
aIYuJjGSx+5KeWHk+TTsWGViM87avjQLAKJo9bdImlzn4iSM8npzOoCAvytu8t4v
bwtqleNHhodp9Ki9EGemeV+cOJPlEaeK2IaYcJA5ZbPdrhlPI+eEAz9cEzdlvHbA
DEZvLou4d2Jo8Z5ikzmHVsjR+mx2YidYRxbAMBGTyBuvLPVETZvC/jcSsJhnAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUQeRVVl6PwsfRJICtsIb5LnHWCWswHwYDVR0j
BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx
MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm
Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03
ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD
Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimqdd8eziYP2rGdGrJJ2
cebEVYRw8Sur/5b+jWmFFgkT2ESa6zfdXXk2/F0cYXLqw7B41QSlEoQwo7CBK2/e
qWAImArfJPwowvhDjsPsfp0cVjQ4kURnGljYEsroTugyY9esWFmrN5EKkIhPEYuf
CfPoDjgCwURlhQMberX9OON75n8EWPQ6jTtL2Z1BxsdZeg8f6OVvZvqpEa6taV+S
9m6k07CYymSW8BuFGlrFO2jsA9huYxfwBPuSlbm18sG6JxTY99vyhoMtofRUG97G
5CY3vK+Vyyr5MWpttMqauI2XKDzI8ru29CO//UVZ8g3xuQ/7o3e+i94VjJLzjVdO
sQ==
-----END CERTIFICATE-----