Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          ZaCha+sj77OiXYlrhLgv253kH+QQSPrNtlIt3CSAdYU=
Subject key identifier:   4C:60:DD:E2:F2:31:EB:B0:DB:76:4E:F0:09:DD:9F:3D:05:FD:03:2A
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       378396ADDFB0653F44E68C78F6D3E9594C3B3A0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          05CD
Signing time:             Sun 15 Nov 2026 02:01:58 +0000
Manifest this update:     Sun 15 Nov 2026 01:56:58 +0000
Manifest next update:     Mon 16 Nov 2026 05:11:58 +0000
Files and hashes:         1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: QClxgRHC2E1s2CNLMRkJL65igmfsOXudG+RboPkwOr0=)
                          3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:83:96:ad:df:b0:65:3f:44:e6:8c:78:f6:d3:e9:59:4c:3b:3a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Nov 15 01:56:58 2026 GMT
            Not After : Nov 16 05:11:58 2026 GMT
        Subject: CN=4C60DDE2F231EBB0DB764EF009DD9F3D05FD032A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:17:d4:ff:5f:cc:60:3e:60:6d:9d:f0:23:e6:
                    dd:4e:86:a9:f9:4f:7c:12:57:f9:15:a4:83:0f:9d:
                    e3:29:c4:ff:33:b7:68:48:e8:13:1b:16:42:67:b7:
                    8e:be:e7:31:1c:68:bc:9d:e1:4c:16:03:41:e5:dc:
                    dd:2e:35:6a:29:7b:f1:7f:27:6c:e0:c1:a5:70:ca:
                    3b:04:d8:2f:12:4c:40:48:cc:1e:b0:f2:f0:84:f8:
                    a2:02:81:93:3b:cf:42:a2:41:ae:5e:ef:ee:1f:6c:
                    3c:9a:a0:e8:63:6a:06:04:4d:64:d9:fc:43:7b:94:
                    0d:f9:24:d4:c3:5e:fc:49:05:59:08:c8:67:54:52:
                    5a:7f:db:e0:f4:d9:82:c4:0d:25:87:4f:a8:87:42:
                    34:72:64:2c:48:d4:3f:64:2c:d4:50:de:54:5b:b7:
                    02:be:8f:3f:4d:6c:f5:e8:26:3a:53:ab:86:bd:64:
                    13:45:40:ae:1d:d9:99:9b:d3:83:c9:f2:82:ea:69:
                    dc:24:24:a4:2a:6e:c4:c0:81:2b:0a:50:fe:23:40:
                    df:83:9e:30:28:06:01:74:05:bd:e0:07:a4:cf:80:
                    bf:2a:0f:45:3e:c6:54:ad:61:55:c9:43:46:19:f7:
                    64:f6:b7:d5:04:67:98:bd:45:29:cd:01:4f:68:50:
                    68:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:60:DD:E2:F2:31:EB:B0:DB:76:4E:F0:09:DD:9F:3D:05:FD:03:2A
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ad:95:e2:f6:47:9a:27:77:f3:e6:7f:6e:76:22:c3:13:40:
         2d:f7:44:c5:b7:d4:8c:c6:3f:e5:57:40:41:67:ec:4d:be:2b:
         c6:a5:d3:0c:e4:17:73:7f:a4:55:12:a9:7a:8d:52:a5:16:36:
         89:4b:7d:23:c8:94:a2:35:71:50:a4:bf:8d:05:4d:2d:82:a6:
         fa:51:ba:ad:93:1f:27:82:9d:e8:ac:ad:55:e3:da:43:c0:e4:
         3a:46:fa:f8:84:32:98:42:1f:07:68:7c:30:8a:53:0a:b8:96:
         fb:3b:cb:ad:4e:ad:d9:6b:3f:1f:c3:78:47:b7:12:e0:8a:8f:
         83:8a:05:c4:d9:fb:cd:0c:36:5e:29:71:03:75:ac:ca:f3:a1:
         de:18:04:00:c0:df:c2:2a:3d:9e:98:ff:09:e3:09:5f:d8:c9:
         df:81:a2:65:2d:7f:3d:12:a1:8c:98:f3:0e:da:38:ec:00:d3:
         7f:1c:dd:b5:c5:48:5a:00:da:fe:c5:95:3a:1c:40:e6:45:d0:
         7d:a3:86:3c:f0:23:55:25:f9:af:16:55:5d:16:b2:34:34:e6:
         b9:b2:67:b3:4f:2f:1a:a6:51:37:dd:fe:1f:0b:d4:4b:2d:f6:
         de:fb:6c:97:61:18:80:aa:fa:9e:08:e5:f5:41:fa:1b:29:ca:
         5d:8c:93:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----