$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: nFqGeSXzFToxaE7xNV5+bX02YIFS/o+ROpvYqbGNWsU= Subject key identifier: 8F:A7:1B:D4:A4:8D:67:CD:91:ED:58:E2:7C:6A:E6:FB:42:03:B8:D8 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 3B66DF1AC9CDE244D29A7AC08DC1F53753F9A1EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 050E Signing time: Tue 23 Jun 2026 19:15:56 +0000 Manifest this update: Tue 23 Jun 2026 19:10:56 +0000 Manifest next update: Wed 24 Jun 2026 23:02:56 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: gYQT4/v82kJ192adfv2VgzxBCJ9qIDSI81wRzCVP7bs=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Jun 2026 23:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:66:df:1a:c9:cd:e2:44:d2:9a:7a:c0:8d:c1:f5:37:53:f9:a1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 23 19:10:56 2026 GMT Not After : Jun 24 23:02:56 2026 GMT Subject: CN=8FA71BD4A48D67CD91ED58E27C6AE6FB4203B8D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:20:4d:ca:51:50:7f:37:51:7a:d9:f1:de:53: 56:3d:9f:03:ba:96:49:d2:7f:f9:cb:f4:8b:1d:c5: 34:d5:ef:d4:4b:81:c2:a4:cc:9f:82:a4:2d:27:17: 91:25:63:d4:4c:f3:de:c4:4d:9a:f1:08:52:4f:4d: 17:c5:5d:7e:60:10:92:04:16:51:90:a8:d7:65:0f: a4:2e:57:97:e3:99:8d:7d:f1:40:30:45:3d:4c:65: c5:5e:98:03:9a:9c:57:7d:35:54:15:0d:fe:f4:dc: 44:a8:8c:e5:1a:79:ed:c0:e2:ff:65:01:66:c7:e1: 9b:35:74:11:9c:fc:b3:0a:24:1f:4e:da:2b:48:87: 1d:98:e7:26:c7:e6:d7:8f:00:9e:15:11:b4:5f:8e: 9c:ce:7b:7e:8b:7b:4b:04:02:69:fe:b3:7b:7a:0f: 1d:47:2d:cd:4c:9f:38:d4:56:bc:09:7d:d1:35:77: c6:24:1e:7f:4b:4b:02:0f:23:bf:58:7a:36:22:b1: b8:14:98:21:3f:ab:e8:35:73:96:60:25:d0:fb:b0: f4:3d:6e:ad:91:dc:9c:b2:12:c3:be:ae:c7:c3:3d: c3:50:a0:06:45:f6:13:8c:ff:20:76:c1:85:b1:14: 19:ae:3b:e8:cf:92:1b:f5:8d:d4:eb:2f:6b:d7:07: d2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A7:1B:D4:A4:8D:67:CD:91:ED:58:E2:7C:6A:E6:FB:42:03:B8:D8 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:76:f6:4c:98:68:e8:3b:05:16:48:89:6c:ac:46:34:a6:14: 23:23:04:1e:77:5c:fa:d2:10:f6:a8:c0:cf:66:2b:2b:90:00: ee:41:57:17:6b:c4:3f:b2:23:49:7a:ea:1e:59:4c:66:26:1d: 92:a9:f6:7f:fe:ed:1f:91:ff:7a:21:dd:3c:0e:ad:85:ff:ed: c5:2d:e0:b3:74:1c:ff:46:df:6b:73:64:d6:19:c0:5a:98:51: 9e:eb:ee:69:b8:81:6d:17:17:62:4e:88:86:ca:f0:7f:cc:a7: ae:47:a3:e0:50:36:fd:a1:3a:08:8c:21:a0:36:4c:06:e9:40: 66:c8:c1:d2:13:69:81:95:a4:be:96:02:19:50:ee:44:4c:99: a7:06:91:83:d9:15:4b:ee:07:18:5f:b8:5c:b2:db:65:d6:a0: 6e:c6:21:99:0b:70:5a:54:0b:b9:16:cd:21:03:6e:48:01:72: 53:a9:9b:55:da:70:98:21:11:d7:41:e6:3b:e1:35:18:95:f9: 8c:28:e2:8c:d8:4b:85:64:16:b1:66:57:2f:3d:64:3b:3b:37: da:74:2b:ab:80:40:8a:75:aa:ad:90:fc:53:7f:31:c1:b5:ca: 83:d7:09:66:48:a2:24:c2:74:e0:13:d3:3a:fd:ec:99:43:85: 73:2c:1a:68 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUO2bfGsnN4kTSmnrAjcH1N1P5oe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MjMxOTEwNTZaFw0yNjA2MjQyMzAyNTZaMDMxMTAvBgNV BAMTKDhGQTcxQkQ0QTQ4RDY3Q0Q5MUVENThFMjdDNkFFNkZCNDIwM0I4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPIE3KUVB/N1F62fHeU1Y9nwO6 lknSf/nL9IsdxTTV79RLgcKkzJ+CpC0nF5ElY9RM897ETZrxCFJPTRfFXX5gEJIE FlGQqNdlD6QuV5fjmY198UAwRT1MZcVemAOanFd9NVQVDf703ESojOUaee3A4v9l AWbH4Zs1dBGc/LMKJB9O2itIhx2Y5ybH5tePAJ4VEbRfjpzOe36Le0sEAmn+s3t6 Dx1HLc1MnzjUVrwJfdE1d8YkHn9LSwIPI79YejYisbgUmCE/q+g1c5ZgJdD7sPQ9 bq2R3JyyEsO+rsfDPcNQoAZF9hOM/yB2wYWxFBmuO+jPkhv1jdTrL2vXB9LVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUj6cb1KSNZ82R7VjifGrm+0IDuNgwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHb2TJho6DsFFkiJbKxG NKYUIyMEHndc+tIQ9qjAz2YrK5AA7kFXF2vEP7IjSXrqHllMZiYdkqn2f/7tH5H/ eiHdPA6thf/txS3gs3Qc/0bfa3Nk1hnAWphRnuvuabiBbRcXYk6Ihsrwf8ynrkej 4FA2/aE6CIwhoDZMBulAZsjB0hNpgZWkvpYCGVDuREyZpwaRg9kVS+4HGF+4XLLb ZdagbsYhmQtwWlQLuRbNIQNuSAFyU6mbVdpwmCER10HmO+E1GJX5jCjijNhLhWQW sWZXLz1kOzs32nQrq4BAinWqrZD8U38xwbXKg9cJZkiiJMJ04BPTOv3smUOFcywa aA== -----END CERTIFICATE-----Generated at Wed Jun 24 13:53:39 2026 by rpki-client