Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          rhxcNcd+2uTBDGeMqfUD4Kirytz5trg036Z0AO/GRSs=
Subject key identifier:   46:EC:60:27:B7:C9:84:3C:E9:FC:E8:60:D6:85:5E:35:7A:C7:AD:47
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       0D1867B07901BFCCED79EC63C996ECCF78073F96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          0585
Signing time:             Mon 21 Sep 2026 21:02:19 +0000
Manifest this update:     Mon 21 Sep 2026 20:57:19 +0000
Manifest next update:     Tue 22 Sep 2026 23:50:19 +0000
Files and hashes:         1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
                          6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: wcgB4FMVDktk8mmJpCFxpRuoEEIpbDr8u5uxZwn36ys=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:18:67:b0:79:01:bf:cc:ed:79:ec:63:c9:96:ec:cf:78:07:3f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Sep 21 20:57:19 2026 GMT
            Not After : Sep 22 23:50:19 2026 GMT
        Subject: CN=46EC6027B7C9843CE9FCE860D6855E357AC7AD47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:eb:01:df:25:6e:4c:ff:f6:b1:30:89:bf:e0:
                    10:25:a8:0a:46:5a:6b:b9:e1:57:7a:0c:87:17:36:
                    37:98:c5:c1:a6:78:bd:a3:0a:a4:38:ba:59:53:77:
                    64:8f:c4:85:6f:0b:99:c4:1e:3b:40:26:3a:f2:bd:
                    bc:40:94:8d:af:c5:04:a5:24:e8:5c:a5:35:51:e2:
                    c6:0b:44:41:89:8b:88:7f:72:fc:b1:95:31:86:df:
                    82:a4:16:a1:fb:b3:a2:51:20:f8:24:d1:2d:7e:34:
                    a5:a8:2e:8b:f9:1f:36:4e:42:b2:ff:ff:b9:02:29:
                    00:09:bd:a5:88:b2:5c:17:2c:6b:e5:96:00:dc:1d:
                    d7:50:8a:c8:d2:b0:15:0c:cb:fd:f1:92:46:b5:5b:
                    45:02:9a:c7:45:f9:17:d8:16:55:7d:1f:d3:d0:cd:
                    9b:22:e2:72:af:ff:2d:57:6b:1c:9a:8a:b6:7a:3c:
                    45:3b:6b:bd:9e:1b:18:c1:e7:cd:e4:9c:15:86:1e:
                    dc:c5:e5:68:16:44:2f:d9:c3:cc:4f:1d:df:90:3d:
                    b8:75:63:86:ac:51:78:c0:1a:39:dd:82:5d:6c:56:
                    4f:c9:7f:f0:f9:92:f5:65:15:a9:1c:04:8f:ea:3a:
                    e3:6f:40:86:1f:c6:09:e8:3f:67:64:e3:07:18:7e:
                    e1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EC:60:27:B7:C9:84:3C:E9:FC:E8:60:D6:85:5E:35:7A:C7:AD:47
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:5a:6a:13:da:d7:0e:53:d2:9c:7f:57:49:e5:e1:57:40:c3:
         22:89:02:09:54:75:2f:14:88:83:43:a7:40:aa:39:85:30:eb:
         bf:ad:52:76:0c:67:64:17:cb:7f:8f:c4:6f:e0:9c:d7:4e:64:
         2b:aa:95:f8:a1:36:4a:4f:36:27:b7:ca:c3:ad:9e:13:cc:74:
         cb:7b:4e:a9:b7:4f:9f:36:6f:91:5f:c1:ad:eb:9b:f1:8e:9b:
         8b:8e:0f:1a:1f:38:a7:5c:c3:4a:20:cb:b8:12:1e:87:a1:10:
         4b:f0:40:d5:89:eb:d5:fd:e1:f0:90:8f:40:c9:ad:ae:35:ff:
         8a:6a:be:c3:fd:6e:38:06:a7:f3:1a:20:d8:c3:7a:db:ab:03:
         bb:a9:64:e5:18:4d:14:f1:25:25:2b:79:dc:d4:4f:0d:60:a0:
         3e:19:ec:9d:56:46:68:e2:ef:d2:36:a7:69:61:6e:01:30:97:
         4e:a1:b3:08:68:dd:9d:1d:3d:8a:27:78:f0:6c:2a:ee:47:08:
         b7:59:4d:83:a1:d2:d7:f5:81:f9:bc:9f:fd:4f:88:5c:8f:ba:
         4c:03:8a:e3:b9:fe:d0:f5:b1:ab:9e:f5:f4:db:71:e7:8c:1a:
         1a:1e:29:17:ef:8e:b5:27:ff:f2:9d:7d:83:1a:3d:ae:37:42:
         23:f2:a9:c6
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUDRhnsHkBv8zteexjyZbsz3gHP5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0
N2RjZWVlYTAeFw0yNjA5MjEyMDU3MTlaFw0yNjA5MjIyMzUwMTlaMDMxMTAvBgNV
BAMTKDQ2RUM2MDI3QjdDOTg0M0NFOUZDRTg2MEQ2ODU1RTM1N0FDN0FENDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb6wHfJW5M//axMIm/4BAlqApG
Wmu54Vd6DIcXNjeYxcGmeL2jCqQ4ullTd2SPxIVvC5nEHjtAJjryvbxAlI2vxQSl
JOhcpTVR4sYLREGJi4h/cvyxlTGG34KkFqH7s6JRIPgk0S1+NKWoLov5HzZOQrL/
/7kCKQAJvaWIslwXLGvllgDcHddQisjSsBUMy/3xkka1W0UCmsdF+RfYFlV9H9PQ
zZsi4nKv/y1XaxyairZ6PEU7a72eGxjB583knBWGHtzF5WgWRC/Zw8xPHd+QPbh1
Y4asUXjAGjndgl1sVk/Jf/D5kvVlFakcBI/qOuNvQIYfxgnoP2dk4wcYfuFpAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQURuxgJ7fJhDzp/Ohg1oVeNXrHrUcwHwYDVR0j
BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx
MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm
Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03
ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD
Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVpqE9rXDlPSnH9XSeXh
V0DDIokCCVR1LxSIg0OnQKo5hTDrv61SdgxnZBfLf4/Eb+Cc105kK6qV+KE2Sk82
J7fKw62eE8x0y3tOqbdPnzZvkV/Breub8Y6bi44PGh84p1zDSiDLuBIeh6EQS/BA
1Ynr1f3h8JCPQMmtrjX/imq+w/1uOAan8xog2MN626sDu6lk5RhNFPElJSt53NRP
DWCgPhnsnVZGaOLv0janaWFuATCXTqGzCGjdnR09iid48Gwq7kcIt1lNg6HS1/WB
+byf/U+IXI+6TAOK47n+0PWxq5719Ntx54waGh4pF++OtSf/8p19gxo9rjdCI/Kp
xg==
-----END CERTIFICATE-----