$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 9EXfT+RfpNdoJTsieMX1S4vafIFt/0Z0G/OpNwOER1I= Subject key identifier: C4:49:98:48:F3:48:24:08:EB:AC:28:07:50:72:F0:7D:59:81:E7:F8 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 5491227AD66D836BDC70391E6229DFFCBABFDA45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 055C Signing time: Fri 21 Aug 2026 08:01:16 +0000 Manifest this update: Fri 21 Aug 2026 07:56:16 +0000 Manifest next update: Sat 22 Aug 2026 11:30:16 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: JSjUb6FonP+X/hIMKk3PuhfnDsGhdfF/yv+dgNyvO2w=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Aug 2026 11:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:91:22:7a:d6:6d:83:6b:dc:70:39:1e:62:29:df:fc:ba:bf:da:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 21 07:56:16 2026 GMT Not After : Aug 22 11:30:16 2026 GMT Subject: CN=C4499848F3482408EBAC28075072F07D5981E7F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:91:8d:f6:40:95:5a:3c:eb:01:48:46:d2:79: d1:71:e0:45:f2:b9:49:f6:b4:45:ef:03:19:18:fa: 8c:9c:1b:fe:07:b6:1b:c8:73:8a:35:48:da:43:65: d1:d7:01:cb:91:a9:2a:e9:ae:b8:96:5f:38:6b:8b: bf:d5:e6:2b:35:ee:cb:f5:04:2b:7b:29:c6:0f:b6: 77:8d:11:02:92:22:87:63:07:08:86:7d:0c:51:8f: 80:63:9b:81:3d:a9:6a:fc:62:77:40:0a:46:fd:50: 8a:95:90:5b:1d:f2:83:01:27:36:a9:85:8c:7f:78: 29:e2:0b:01:e3:eb:66:0c:bc:43:c4:ae:6a:c7:e0: b2:70:18:8e:b8:71:f6:de:f2:30:a9:22:b5:57:ab: 01:20:0a:45:a9:a7:f6:44:a1:c4:10:1c:33:68:3d: 19:fc:50:ca:2c:fd:f4:f5:0b:58:8b:78:db:9c:4d: c7:7e:f1:c5:2c:26:72:5a:0c:a7:db:86:7d:f4:25: 7c:f1:ff:aa:93:3e:f2:b1:ac:0e:88:50:ff:a6:4f: f0:a9:ef:48:ac:35:09:6c:ac:51:08:10:df:1f:cd: 8c:fc:8e:f5:13:9e:5d:48:3a:80:70:36:af:82:98: ff:47:fc:82:28:5d:f5:58:c5:ca:63:1a:24:bc:b9: 9a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:49:98:48:F3:48:24:08:EB:AC:28:07:50:72:F0:7D:59:81:E7:F8 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:1c:86:7d:f1:12:a3:b1:8b:85:a7:81:5b:dd:65:20:1c:99: 51:19:71:57:8c:b1:c3:78:64:dc:26:f9:c0:d7:03:b5:e5:c8: 16:95:d0:ea:64:4f:1b:fb:ad:79:f7:9f:a7:27:08:25:f9:92: cc:df:0e:36:ef:40:b6:7f:45:e0:96:29:d1:ad:09:fd:43:54: 29:16:bb:69:15:d1:72:ec:28:5f:f1:df:ab:6e:7e:22:45:33: 29:4c:89:e1:7f:7c:44:49:0b:d3:8d:07:52:c4:e2:7a:50:a3: 0e:6a:56:a5:70:41:c0:a1:ed:6f:55:10:86:6e:a4:41:ec:90: 94:41:c4:13:21:70:7e:f0:a9:f0:7d:a7:54:45:c9:63:c8:fe: 57:24:ff:65:50:e4:5e:25:08:d4:9d:58:38:ed:2c:8d:4d:41: 8d:23:39:b2:5c:c3:ad:61:55:13:3a:2a:e4:bf:30:c9:4b:69: f4:88:b2:c1:fb:42:2d:ad:a2:c9:7f:03:57:cf:c5:a4:4d:65: c5:31:ce:e8:4f:9b:91:c4:39:0b:04:a0:66:dd:e5:76:6c:90: 76:21:18:a4:5b:50:49:ec:79:37:29:0b:7f:1c:8a:a7:81:6f: 34:ca:bc:c1:1e:72:51:04:97:f2:ad:81:6f:ba:6c:e9:28:67: b1:02:74:e8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVJEietZtg2vccDkeYinf/Lq/2kUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MjEwNzU2MTZaFw0yNjA4MjIxMTMwMTZaMDMxMTAvBgNV BAMTKEM0NDk5ODQ4RjM0ODI0MDhFQkFDMjgwNzUwNzJGMDdENTk4MUU3RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFkY32QJVaPOsBSEbSedFx4EXy uUn2tEXvAxkY+oycG/4HthvIc4o1SNpDZdHXAcuRqSrprriWXzhri7/V5is17sv1 BCt7KcYPtneNEQKSIodjBwiGfQxRj4Bjm4E9qWr8YndACkb9UIqVkFsd8oMBJzap hYx/eCniCwHj62YMvEPErmrH4LJwGI64cfbe8jCpIrVXqwEgCkWpp/ZEocQQHDNo PRn8UMos/fT1C1iLeNucTcd+8cUsJnJaDKfbhn30JXzx/6qTPvKxrA6IUP+mT/Cp 70isNQlsrFEIEN8fzYz8jvUTnl1IOoBwNq+CmP9H/IIoXfVYxcpjGiS8uZrJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUxEmYSPNIJAjrrCgHUHLwfVmB5/gwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATByGffESo7GLhaeBW91l IByZURlxV4yxw3hk3Cb5wNcDteXIFpXQ6mRPG/utefefpycIJfmSzN8ONu9Atn9F 4JYp0a0J/UNUKRa7aRXRcuwoX/Hfq25+IkUzKUyJ4X98REkL040HUsTielCjDmpW pXBBwKHtb1UQhm6kQeyQlEHEEyFwfvCp8H2nVEXJY8j+VyT/ZVDkXiUI1J1YOO0s jU1BjSM5slzDrWFVEzoq5L8wyUtp9IiywftCLa2iyX8DV8/FpE1lxTHO6E+bkcQ5 CwSgZt3ldmyQdiEYpFtQSex5NykLfxyKp4FvNMq8wR5yUQSX8q2Bb7ps6ShnsQJ0 6A== -----END CERTIFICATE-----Generated at Fri Aug 21 19:26:28 2026 by rpki-client