$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 6CC1SNpwD1XaFHrlh4Hi+RD8MpO6kybon9WNKKXxkVM= Subject key identifier: 0D:FB:11:AB:6F:D8:76:53:E3:D2:A4:33:FC:D3:06:AF:03:02:3B:1C Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 0D650A5D227AF402BCDFC5ED8FB2DEF5755B8205 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04CA Signing time: Sun 03 May 2026 02:10:05 +0000 Manifest this update: Sun 03 May 2026 02:05:05 +0000 Manifest next update: Mon 04 May 2026 04:40:05 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: hhY2u5d96pv085wk403z1YKffg+7JYKx/AYoIXd6D1E=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 03 May 2026 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:65:0a:5d:22:7a:f4:02:bc:df:c5:ed:8f:b2:de:f5:75:5b:82:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 3 02:05:05 2026 GMT Not After : May 4 04:40:05 2026 GMT Subject: CN=0DFB11AB6FD87653E3D2A433FCD306AF03023B1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:76:60:bb:18:da:0f:2c:88:85:90:4f:a6:b3: fc:44:18:ea:81:e7:35:bc:80:63:1d:0c:50:9f:97: fe:a3:b2:54:45:75:c5:65:82:36:c1:e7:92:22:f5: f3:17:bd:04:0f:ce:6b:f0:78:4c:8f:b3:b1:f1:af: 02:de:d6:2f:f8:36:b9:7a:6c:da:2f:7d:3e:3c:ee: 58:fc:c1:b6:21:d4:2d:8c:61:51:ff:1b:7a:cd:82: 24:92:0e:b0:01:8b:ca:7d:3e:7a:05:a2:59:43:35: 7c:eb:a9:39:56:08:04:db:e0:1a:4d:bd:4c:32:10: a4:c4:fc:f5:d4:80:34:d5:63:4e:29:7e:b0:3e:f5: 89:ea:19:69:c8:45:00:79:5f:22:8b:15:0a:4f:4b: 52:f8:66:9a:38:02:01:a3:64:8d:c8:bc:97:80:11: 26:d7:b7:3e:f5:b1:9d:b1:38:90:e9:74:83:2a:18: 80:cb:aa:ba:b5:e0:a1:1e:b5:da:d5:63:ef:55:c3: 90:cf:6a:48:4a:a9:f4:27:0e:0a:02:da:db:91:e4: ec:29:13:c7:d3:22:26:4c:26:f0:7e:d2:8c:8e:a1: 3c:a7:7a:29:ab:6e:49:22:7c:d7:e3:b9:c3:c6:28: e6:a2:36:bc:5c:9e:99:86:0d:24:18:33:47:5b:86: 5c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FB:11:AB:6F:D8:76:53:E3:D2:A4:33:FC:D3:06:AF:03:02:3B:1C X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:11:f6:d1:c5:ed:96:54:f3:1e:3c:a4:11:4d:a5:87:85:0e: fb:9a:b7:40:18:46:08:da:61:be:cc:b3:bc:31:2d:22:84:5d: dd:c4:fe:1c:c4:ae:a8:8d:44:09:f1:e2:9d:b8:8b:2f:d8:12: 62:e8:d2:71:74:d7:b2:25:03:a4:85:e1:75:5f:c4:9c:76:71: d1:b5:83:59:30:48:66:77:b1:93:0f:88:9e:95:7b:e8:8e:3b: f0:5a:0a:0a:45:bf:d2:df:84:fd:60:87:66:bb:be:20:ee:2d: f6:41:ae:51:8e:d3:24:49:5b:20:24:db:14:3d:7b:83:b9:c6: e0:68:94:d4:34:02:ce:8f:6a:8e:46:fe:b3:b4:1f:d6:40:60: 86:4c:fa:9e:0a:3d:16:69:e2:83:1b:df:e5:a3:c1:a0:d3:01: 85:3e:df:85:c5:c7:8d:ab:88:a6:b2:f9:69:26:05:3a:3d:87: b2:5e:70:68:10:a7:b0:fd:48:46:d7:1f:f7:83:37:c4:aa:6a: 70:78:6e:24:c0:fd:7f:c3:33:9a:56:67:b6:01:0d:73:87:b4: c0:53:15:ab:0c:81:76:28:b7:f0:e7:bd:ab:f5:25:a3:f3:21: ae:eb:65:65:2b:de:98:6f:f4:9b:6c:20:ed:b3:4f:0d:b8:a0: 6d:ed:22:b8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDWUKXSJ69AK838Xtj7Le9XVbggUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MDMwMjA1MDVaFw0yNjA1MDQwNDQwMDVaMDMxMTAvBgNV BAMTKDBERkIxMUFCNkZEODc2NTNFM0QyQTQzM0ZDRDMwNkFGMDMwMjNCMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQdmC7GNoPLIiFkE+ms/xEGOqB 5zW8gGMdDFCfl/6jslRFdcVlgjbB55Ii9fMXvQQPzmvweEyPs7HxrwLe1i/4Nrl6 bNovfT487lj8wbYh1C2MYVH/G3rNgiSSDrABi8p9PnoFollDNXzrqTlWCATb4BpN vUwyEKTE/PXUgDTVY04pfrA+9YnqGWnIRQB5XyKLFQpPS1L4Zpo4AgGjZI3IvJeA ESbXtz71sZ2xOJDpdIMqGIDLqrq14KEetdrVY+9Vw5DPakhKqfQnDgoC2tuR5Owp E8fTIiZMJvB+0oyOoTyneimrbkkifNfjucPGKOaiNrxcnpmGDSQYM0dbhlxVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDfsRq2/YdlPj0qQz/NMGrwMCOxwwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBH20cXtllTzHjykEU2l h4UO+5q3QBhGCNphvsyzvDEtIoRd3cT+HMSuqI1ECfHinbiLL9gSYujScXTXsiUD pIXhdV/EnHZx0bWDWTBIZnexkw+InpV76I478FoKCkW/0t+E/WCHZru+IO4t9kGu UY7TJElbICTbFD17g7nG4GiU1DQCzo9qjkb+s7Qf1kBghkz6ngo9Fmnigxvf5aPB oNMBhT7fhcXHjauIprL5aSYFOj2Hsl5waBCnsP1IRtcf94M3xKpqcHhuJMD9f8Mz mlZntgENc4e0wFMVqwyBdii38Oe9q/Ulo/MhrutlZSvemG/0m2wg7bNPDbigbe0i uA== -----END CERTIFICATE-----Generated at Sun May 3 05:07:42 2026 by rpki-client