Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          nUMX0qsgo+U9zrzXSCVfTom8qghlI3d17fWLSMX5sCs=
Subject key identifier:   AF:3D:C9:5D:09:17:7B:40:AD:C4:2B:C6:F4:CB:23:9B:4F:0A:8E:DD
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       577BCFBE9CA0F3F4FF30800839320BCAA4380084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          03C5
Signing time:             Sun 19 Oct 2025 03:26:42 +0000
Manifest this update:     Sun 19 Oct 2025 03:21:42 +0000
Manifest next update:     Mon 20 Oct 2025 05:31:42 +0000
Files and hashes:         1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
                          2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
                          3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
                          4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
                          5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=)
                          6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
                          7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=)
                          8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: nlhe38fQVe/3gqco4Tnf1Zz2M7C0cbjYw2Lj7r9kr2I=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:7b:cf:be:9c:a0:f3:f4:ff:30:80:08:39:32:0b:ca:a4:38:00:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Oct 19 03:21:42 2025 GMT
            Not After : Oct 20 05:31:42 2025 GMT
        Subject: CN=AF3DC95D09177B40ADC42BC6F4CB239B4F0A8EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:ea:2d:33:0e:c1:b1:32:0e:d9:bc:15:bc:
                    ca:45:19:70:df:51:d7:1b:de:0b:09:f9:e7:f5:93:
                    43:08:be:c9:2a:eb:ad:b8:44:60:35:28:53:0d:5a:
                    be:30:87:6d:e3:69:1a:22:94:91:1c:d2:3c:46:f6:
                    5f:99:ac:47:29:a1:cc:99:84:bb:09:3c:dc:12:a9:
                    62:c9:3b:1d:57:b6:b6:38:9b:1d:8a:a6:87:fe:cf:
                    5c:6a:57:de:0f:53:d5:2a:0d:90:5f:66:5a:c4:2f:
                    bc:eb:c3:54:8e:21:48:b2:ff:72:b3:3e:b5:d7:76:
                    97:41:80:ab:07:e3:57:1b:39:76:ce:bf:93:9f:02:
                    18:29:a1:0a:f0:88:07:78:d3:2e:10:87:93:d4:0b:
                    e3:0a:cf:db:1a:27:62:d2:47:32:9b:96:d4:0d:b3:
                    9b:5d:4f:05:70:90:26:f9:dc:0a:7a:f3:c5:16:f4:
                    8d:67:4f:c5:f1:1b:77:04:66:cf:ec:d5:2f:eb:45:
                    25:85:69:75:bf:7d:90:68:b0:c9:ad:1a:d8:50:a4:
                    9d:47:9c:fb:07:24:54:03:8d:ef:77:db:0d:25:06:
                    92:01:a9:36:d6:b6:4d:27:0e:c8:81:9c:a1:14:8c:
                    03:5d:04:65:28:d4:3d:ca:40:5a:fc:04:a4:d2:20:
                    35:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3D:C9:5D:09:17:7B:40:AD:C4:2B:C6:F4:CB:23:9B:4F:0A:8E:DD
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:bf:2c:f5:af:a9:70:a4:d1:9e:78:49:e5:e0:d1:70:87:4a:
         38:91:6e:67:c6:96:5d:75:e0:04:77:c6:86:1a:b9:49:84:46:
         c5:cc:c4:e0:27:d2:ec:3b:c0:ee:f8:b9:68:3d:08:7d:4f:52:
         4c:28:1d:ce:fa:8b:0a:b7:d4:7c:58:e4:d1:74:f8:72:74:ff:
         ab:ba:b4:ac:80:18:b3:ed:89:64:4d:37:40:8f:99:d7:78:f2:
         76:eb:9d:24:e4:79:86:ed:e3:ca:71:b0:1e:5e:1f:7a:be:39:
         a1:d5:f3:82:09:12:0c:96:a3:b5:77:7b:9d:42:01:d2:7e:fd:
         02:ff:3e:85:00:ea:49:5b:0c:58:67:7d:60:63:ca:61:37:ad:
         b6:01:78:bf:44:8a:06:6f:70:c9:18:1c:ff:6e:12:e5:ce:5c:
         37:99:e8:04:9e:c9:10:a9:4f:44:a2:60:00:e9:19:19:71:94:
         4f:4b:a5:06:65:67:11:26:03:b4:59:fd:a4:29:94:2a:e7:2a:
         45:a1:d2:47:ba:28:fc:f4:10:b6:a1:32:e9:5c:ea:28:f1:81:
         28:c5:11:3f:19:15:d2:cc:a1:d7:27:ba:3e:f8:44:51:a7:c5:
         6c:3f:d8:c7:63:05:93:23:ce:b7:3b:45:cb:fb:9c:67:16:6e:
         b6:c9:99:8b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUV3vPvpyg8/T/MIAIOTILyqQ4AIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0
N2RjZWVlYTAeFw0yNTEwMTkwMzIxNDJaFw0yNTEwMjAwNTMxNDJaMDMxMTAvBgNV
BAMTKEFGM0RDOTVEMDkxNzdCNDBBREM0MkJDNkY0Q0IyMzlCNEYwQThFREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8+otMw7BsTIO2bwVvMpFGXDf
Udcb3gsJ+ef1k0MIvskq6624RGA1KFMNWr4wh23jaRoilJEc0jxG9l+ZrEcpocyZ
hLsJPNwSqWLJOx1XtrY4mx2Kpof+z1xqV94PU9UqDZBfZlrEL7zrw1SOIUiy/3Kz
PrXXdpdBgKsH41cbOXbOv5OfAhgpoQrwiAd40y4Qh5PUC+MKz9saJ2LSRzKbltQN
s5tdTwVwkCb53Ap688UW9I1nT8XxG3cEZs/s1S/rRSWFaXW/fZBosMmtGthQpJ1H
nPsHJFQDje932w0lBpIBqTbWtk0nDsiBnKEUjANdBGUo1D3KQFr8BKTSIDWFAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUrz3JXQkXe0CtxCvG9Msjm08Kjt0wHwYDVR0j
BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx
MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm
Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03
ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD
Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFb8s9a+pcKTRnnhJ5eDR
cIdKOJFuZ8aWXXXgBHfGhhq5SYRGxczE4CfS7DvA7vi5aD0IfU9STCgdzvqLCrfU
fFjk0XT4cnT/q7q0rIAYs+2JZE03QI+Z13jyduudJOR5hu3jynGwHl4fer45odXz
ggkSDJajtXd7nUIB0n79Av8+hQDqSVsMWGd9YGPKYTettgF4v0SKBm9wyRgc/24S
5c5cN5noBJ7JEKlPRKJgAOkZGXGUT0ulBmVnESYDtFn9pCmUKucqRaHSR7oo/PQQ
tqEy6VzqKPGBKMURPxkV0syh1ye6PvhEUafFbD/Yx2MFkyPOtztFy/ucZxZutsmZ
iw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:25 2025 by rpki-client