Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          3VwY3NdvphPBBtXe/Mxm2JFK2tI8h33vlA+TYKUtbnU=
Subject key identifier:   9A:60:46:5C:98:ED:70:BC:B8:AF:0D:72:F5:50:9F:57:D7:76:E0:6C
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       3BD30F59DBADE9D5A9D5C71CBD29D3E86EAC9588
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          0587
Signing time:             Wed 23 Sep 2026 10:39:51 +0000
Manifest this update:     Wed 23 Sep 2026 10:34:51 +0000
Manifest next update:     Thu 24 Sep 2026 13:10:51 +0000
Files and hashes:         1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
                          2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: CDeZ9Y00ptSFiQe8MgSo3Km29twZv/GVxf9b0rrpOu0=)
                          3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
                          4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
                          5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
                          6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
                          7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d3:0f:59:db:ad:e9:d5:a9:d5:c7:1c:bd:29:d3:e8:6e:ac:95:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Sep 23 10:34:51 2026 GMT
            Not After : Sep 24 13:10:51 2026 GMT
        Subject: CN=9A60465C98ED70BCB8AF0D72F5509F57D776E06C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fb:48:95:67:5a:0f:b3:a7:38:ea:ad:6e:7a:
                    a0:0a:f7:2c:7d:42:b2:a5:b0:c2:20:5d:43:fe:33:
                    90:73:55:f6:d9:5b:9e:4e:71:4b:0f:ee:ec:62:33:
                    57:ae:8e:00:19:08:e1:68:87:fe:9d:56:0c:29:03:
                    7e:57:19:d1:45:a6:fa:c4:c6:4f:42:3b:10:11:22:
                    8f:02:c7:f6:99:94:d6:19:e6:50:21:5c:c2:c3:cb:
                    b0:16:df:ff:7e:79:ba:fb:70:1a:de:18:2e:3c:72:
                    c3:2e:67:0c:0d:13:e2:0d:57:3f:f1:0d:64:3f:a2:
                    47:8a:79:44:7e:a0:59:aa:91:da:1d:12:35:9e:9a:
                    a6:dc:8d:3c:37:e2:7b:33:18:b3:1a:08:0d:8c:dc:
                    0e:65:df:83:4e:0d:53:d4:41:95:94:c5:13:06:50:
                    db:77:76:af:7b:90:23:18:87:05:de:dd:ba:91:1a:
                    e6:4b:2c:fb:64:70:5f:26:6a:74:60:44:20:ca:a5:
                    b9:3b:88:a2:d9:2c:08:c5:25:64:b5:f2:e8:ba:86:
                    c9:60:3e:69:ba:35:62:bb:2b:0b:ff:f5:95:13:4b:
                    d7:1b:60:6e:89:83:99:0e:65:7f:1a:9e:36:14:98:
                    69:90:68:43:bc:26:f5:72:79:86:a9:07:67:3e:16:
                    03:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:60:46:5C:98:ED:70:BC:B8:AF:0D:72:F5:50:9F:57:D7:76:E0:6C
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:45:07:de:86:a9:6c:64:53:4c:77:2c:96:9d:a9:fd:a3:e0:
         b7:51:42:4d:e0:90:ac:4f:e8:44:0f:d5:3a:6a:9f:11:8f:a1:
         b1:43:ec:18:e5:81:20:e1:fd:6c:80:ce:70:0b:fe:8d:d9:29:
         f8:01:38:5f:8b:0e:b0:06:48:61:7c:b3:f9:48:3a:38:c2:73:
         5b:9b:59:3c:94:32:b6:1e:13:92:a3:0b:8f:58:58:f8:43:4b:
         78:c6:cb:0c:f7:09:dc:46:d4:ac:b9:54:93:49:65:a3:30:75:
         54:f6:db:cc:a6:f3:7b:df:40:ab:83:9b:5a:c6:9f:14:8a:d4:
         a3:ef:8f:6d:bc:e4:8e:ee:0a:0f:14:4b:45:8d:02:d4:54:f4:
         3b:8b:23:28:4e:62:dd:e4:d3:c8:a4:6a:d8:34:d0:1a:5c:44:
         c1:e3:46:bf:57:4c:b8:56:6d:5f:81:39:ae:e9:ec:44:d2:97:
         e5:a9:8d:39:e9:97:cc:d9:fe:ce:7f:92:ea:74:b6:6a:1e:2b:
         d6:7b:f5:24:36:17:c7:bf:14:46:fa:8f:24:df:2f:12:27:df:
         23:64:62:33:29:4e:e8:1d:79:58:9e:40:99:1a:33:55:f2:78:
         7d:4b:c9:c3:65:91:04:d3:3c:31:8d:1d:64:95:e5:06:71:72:
         1c:45:e3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----