$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: VNE39mU9c9EpbMr05ANNEHY7Ai27RO1WT5V/RoLEqac= Subject key identifier: 91:1D:75:39:02:A5:10:54:77:94:02:B5:75:EE:18:69:15:7E:5A:33 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 595BC56DCEBD58F29E039091C555375512A611CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 049B Signing time: Sat 28 Mar 2026 19:46:06 +0000 Manifest this update: Sat 28 Mar 2026 19:41:06 +0000 Manifest next update: Sun 29 Mar 2026 20:05:06 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: vp73titdZmoHvbmej4vKs9huTz7buKrIE+9NHCT20kA=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5b:c5:6d:ce:bd:58:f2:9e:03:90:91:c5:55:37:55:12:a6:11:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Mar 28 19:41:06 2026 GMT Not After : Mar 29 20:05:06 2026 GMT Subject: CN=911D753902A51054779402B575EE1869157E5A33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e0:db:a1:fa:83:7f:a7:fc:17:88:f7:dd:af: 65:25:6a:8d:e5:d4:fa:ed:fd:67:e9:d4:f1:45:c4: aa:59:65:d9:4d:a8:0d:8b:c5:be:bc:5b:82:46:af: 0d:b3:47:99:93:a4:56:3f:29:3d:2e:48:14:ba:2b: a7:9c:0d:51:3e:06:a2:ad:ae:c2:be:cb:99:18:ea: e3:3c:c5:6e:eb:61:d6:14:0d:a6:c5:95:6a:b8:4b: b8:b7:20:b6:24:6e:b4:1a:af:5e:db:49:bc:6b:f4: d4:0f:8b:0d:65:65:28:7b:97:cf:62:76:a6:8e:32: 84:ad:f9:13:3c:79:ef:5a:10:28:8a:04:01:e7:d3: e2:ef:75:f2:09:8e:2c:16:d4:be:3e:4c:0c:6e:76: c1:a5:d2:10:46:4b:99:5d:56:22:c6:eb:02:46:f2: c7:67:f3:40:86:1a:c7:c8:f8:83:62:7c:84:d1:12: 7a:79:f8:4d:fd:ea:f2:62:2e:df:6e:d7:ae:ea:bc: 27:da:b7:54:73:6c:69:e8:7e:22:1b:9a:1b:09:68: ae:1a:9f:88:bc:ba:a6:57:6d:a4:72:b2:4e:fa:04: 32:75:0d:06:6c:11:e7:ce:08:f8:1e:5f:13:49:f2: 81:13:da:62:5d:fa:a1:c6:86:55:16:fd:82:f6:4d: 5d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1D:75:39:02:A5:10:54:77:94:02:B5:75:EE:18:69:15:7E:5A:33 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:cd:81:9e:60:fb:c9:4f:bc:dc:69:3c:18:e0:1e:1e:f3:db: d1:11:25:60:3a:4e:b3:b7:22:09:0d:a3:bf:b1:7f:29:27:0e: b3:e5:07:dd:39:c1:4a:29:82:91:ab:ca:ae:27:04:dc:a5:2b: b7:99:99:cb:96:ab:ee:7f:be:2c:77:d2:3d:93:7a:64:1c:2e: 08:7a:11:e1:66:50:81:4d:a0:3d:8d:4f:e3:d4:9a:7c:f7:61: 29:0b:d1:c2:23:51:f6:c0:16:17:d1:2f:9a:9e:1e:76:94:4a: ce:f4:54:a8:f3:15:80:dd:1f:8f:ae:b9:91:ab:8b:e6:00:73: bf:40:96:a5:14:78:eb:c3:1b:90:0f:25:6f:e3:5c:74:d5:31: 8a:38:be:9d:80:0a:6a:45:28:80:be:be:d7:3a:8c:84:9d:c5: 17:e2:84:78:24:e5:bc:9c:55:6c:90:07:64:1e:bb:3f:49:a0: 0a:bf:ef:99:cf:ef:7f:55:c8:d5:f3:63:57:ed:2f:54:e0:3d: 9a:62:9b:5b:f1:02:ae:61:7d:61:7d:2c:07:df:f3:57:04:6a: dd:a9:82:76:a3:70:a7:15:be:a4:06:2d:2c:74:62:a1:fb:0e: 99:7c:36:b8:9a:34:2b:1d:b5:f4:0b:8b:9b:f7:4f:44:a6:8f: 4b:93:92:21 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWVvFbc69WPKeA5CRxVU3VRKmEc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAzMjgxOTQxMDZaFw0yNjAzMjkyMDA1MDZaMDMxMTAvBgNV BAMTKDkxMUQ3NTM5MDJBNTEwNTQ3Nzk0MDJCNTc1RUUxODY5MTU3RTVBMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc4Nuh+oN/p/wXiPfdr2Ulao3l 1Prt/Wfp1PFFxKpZZdlNqA2Lxb68W4JGrw2zR5mTpFY/KT0uSBS6K6ecDVE+BqKt rsK+y5kY6uM8xW7rYdYUDabFlWq4S7i3ILYkbrQar17bSbxr9NQPiw1lZSh7l89i dqaOMoSt+RM8ee9aECiKBAHn0+LvdfIJjiwW1L4+TAxudsGl0hBGS5ldViLG6wJG 8sdn80CGGsfI+INifITREnp5+E396vJiLt9u167qvCfat1RzbGnofiIbmhsJaK4a n4i8uqZXbaRysk76BDJ1DQZsEefOCPgeXxNJ8oET2mJd+qHGhlUW/YL2TV35AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUkR11OQKlEFR3lAK1de4YaRV+WjMwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd82BnmD7yU+83Gk8GOAe HvPb0RElYDpOs7ciCQ2jv7F/KScOs+UH3TnBSimCkavKricE3KUrt5mZy5ar7n++ LHfSPZN6ZBwuCHoR4WZQgU2gPY1P49SafPdhKQvRwiNR9sAWF9Evmp4edpRKzvRU qPMVgN0fj665kauL5gBzv0CWpRR468MbkA8lb+NcdNUxiji+nYAKakUogL6+1zqM hJ3FF+KEeCTlvJxVbJAHZB67P0mgCr/vmc/vf1XI1fNjV+0vVOA9mmKbW/ECrmF9 YX0sB9/zVwRq3amCdqNwpxW+pAYtLHRiofsOmXw2uJo0Kx219AuLm/dPRKaPS5OS IQ== -----END CERTIFICATE-----Generated at Sun Mar 29 03:23:26 2026 by rpki-client