$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: omDVZRtveOjTvHMEjEQkUtQ0sefXdNyRN7MTZI5LdnA= Subject key identifier: A6:4B:4D:78:B5:BD:AA:AE:82:E4:66:01:05:06:0A:E7:04:83:A7:71 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 200A8AEDDAC246FCE504377220632E906AA983E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04A7 Signing time: Tue 07 Apr 2026 01:10:15 +0000 Manifest this update: Tue 07 Apr 2026 01:05:15 +0000 Manifest next update: Wed 08 Apr 2026 04:26:15 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: yTp9t1psW7v+Co0wA/H0MERhzFBXG5lku4U/MnhAIiU=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 08 Apr 2026 04:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:0a:8a:ed:da:c2:46:fc:e5:04:37:72:20:63:2e:90:6a:a9:83:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 7 01:05:15 2026 GMT Not After : Apr 8 04:26:15 2026 GMT Subject: CN=A64B4D78B5BDAAAE82E4660105060AE70483A771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:04:b5:0d:2b:c5:ad:fb:fe:93:86:30:58: 98:59:17:cf:52:36:4d:5b:9e:df:16:49:85:ad:bb: f3:e3:92:0f:b5:bb:68:91:a0:fa:48:34:0f:4a:bb: f8:bf:e8:9c:4a:f2:f1:09:a4:df:a5:3f:c2:4d:75: cb:40:07:2e:c5:36:76:da:ff:97:93:8d:07:5c:46: 60:05:11:b0:a7:6e:ed:99:75:66:9d:23:d2:39:44: b9:df:63:dd:2a:b3:09:1e:f0:55:08:96:6f:af:27: 0d:75:fb:b2:b0:c1:70:38:50:93:a2:78:20:2d:c7: 87:21:06:34:20:1f:7e:34:46:6e:f6:37:dc:e9:bb: 3f:da:ba:66:18:f3:93:32:23:73:f1:99:3f:d0:47: 04:68:81:80:4b:92:7a:07:81:3c:fb:48:80:6a:f1: 91:a2:d7:dd:de:bb:fa:f0:0c:94:de:51:4d:06:07: 6c:c5:09:39:b9:97:e7:f8:1a:7a:4e:71:a2:03:e2: 7a:4b:bd:54:a6:45:2f:cd:0d:c8:33:03:1e:18:c9: fe:47:2c:a6:63:85:93:73:8c:be:a1:e2:98:7e:92: 81:60:52:a5:a1:ae:95:a4:9d:56:90:5b:5e:81:43: f7:64:bc:4b:47:80:ea:85:5c:47:39:ce:9d:45:d1: 7b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4B:4D:78:B5:BD:AA:AE:82:E4:66:01:05:06:0A:E7:04:83:A7:71 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:52:13:96:cb:17:e4:f9:7f:49:93:94:75:4a:19:00:5a:78: 04:e2:0d:54:d2:e5:46:60:cb:a3:eb:94:f4:9e:78:d9:1e:ce: 47:dc:08:17:3b:41:ff:29:a7:6c:fc:da:e4:4b:f9:d5:ee:0c: 7f:2b:65:ee:a4:7a:eb:13:93:4d:0e:ad:b9:ad:d6:2d:0a:70: 1b:19:84:a2:1e:82:4e:06:25:2e:ce:c5:f5:2b:77:fc:5a:ad: 43:fb:0d:db:35:97:cf:b9:2b:72:a6:68:d7:46:ff:0c:c5:6c: 4f:9e:57:51:29:17:25:73:c5:8d:ea:e8:d7:05:a0:41:af:f0: a8:9c:31:fc:ce:09:49:27:5a:06:c0:02:2d:93:71:95:d5:0f: 0a:7a:14:a5:22:31:5e:85:39:16:9a:3a:cd:2a:f5:c6:01:11: bf:80:ad:28:69:3b:94:a0:43:45:a3:6c:71:73:8c:54:20:0f: e7:bd:09:3e:37:02:d5:0b:24:4b:65:8c:ef:eb:64:aa:bc:24: 8f:d4:f0:b8:5f:8e:23:2a:e6:cc:23:c3:b9:6a:f1:fd:87:b8: 00:69:57:1c:f5:71:aa:73:68:26:0d:e7:a2:f5:90:b6:06:f0: cf:fe:a7:85:c4:10:da:e9:72:0c:bc:4c:5f:3e:1c:00:8a:76: af:7f:bf:d6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIAqK7drCRvzlBDdyIGMukGqpg+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA0MDcwMTA1MTVaFw0yNjA0MDgwNDI2MTVaMDMxMTAvBgNV BAMTKEE2NEI0RDc4QjVCREFBQUU4MkU0NjYwMTA1MDYwQUU3MDQ4M0E3NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGQS1DSvFrfv+k4YwWJhZF89S Nk1bnt8WSYWtu/Pjkg+1u2iRoPpINA9Ku/i/6JxK8vEJpN+lP8JNdctABy7FNnba /5eTjQdcRmAFEbCnbu2ZdWadI9I5RLnfY90qswke8FUIlm+vJw11+7KwwXA4UJOi eCAtx4chBjQgH340Rm72N9zpuz/aumYY85MyI3PxmT/QRwRogYBLknoHgTz7SIBq 8ZGi193eu/rwDJTeUU0GB2zFCTm5l+f4GnpOcaID4npLvVSmRS/NDcgzAx4Yyf5H LKZjhZNzjL6h4ph+koFgUqWhrpWknVaQW16BQ/dkvEtHgOqFXEc5zp1F0XtpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUpktNeLW9qq6C5GYBBQYK5wSDp3EwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFITlssX5Pl/SZOUdUoZ AFp4BOINVNLlRmDLo+uU9J542R7OR9wIFztB/ymnbPza5Ev51e4Mfytl7qR66xOT TQ6tua3WLQpwGxmEoh6CTgYlLs7F9St3/FqtQ/sN2zWXz7krcqZo10b/DMVsT55X USkXJXPFjero1wWgQa/wqJwx/M4JSSdaBsACLZNxldUPCnoUpSIxXoU5Fpo6zSr1 xgERv4CtKGk7lKBDRaNscXOMVCAP570JPjcC1QskS2WM7+tkqrwkj9TwuF+OIyrm zCPDuWrx/Ye4AGlXHPVxqnNoJg3novWQtgbwz/6nhcQQ2ulyDLxMXz4cAIp2r3+/ 1g== -----END CERTIFICATE-----Generated at Tue Apr 7 10:31:14 2026 by rpki-client