$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: Nom6RORjT+hVMD+xk6moa4zIu/SfHU96ZQ4FZdGvCjI= Subject key identifier: 69:C9:E1:DD:C4:B2:56:D8:17:C6:7D:B8:C5:76:01:CB:C9:16:DC:04 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 4B45E118D954CE19EEFA4A7C9CC469624C875246 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0564 Signing time: Thu 27 Aug 2026 12:30:53 +0000 Manifest this update: Thu 27 Aug 2026 12:25:53 +0000 Manifest next update: Fri 28 Aug 2026 14:00:53 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: sBqu1fTH7xP9/lVcBtPFR9DnGLZaWyP8U6HoqlqjC58=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Aug 2026 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:45:e1:18:d9:54:ce:19:ee:fa:4a:7c:9c:c4:69:62:4c:87:52:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 27 12:25:53 2026 GMT Not After : Aug 28 14:00:53 2026 GMT Subject: CN=69C9E1DDC4B256D817C67DB8C57601CBC916DC04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:48:59:48:8d:20:4f:eb:98:bb:b2:5d:b4:7b: c5:b9:5e:92:a4:75:5c:a6:90:ad:2a:48:90:30:5f: c5:96:48:81:48:65:c3:21:4b:6e:7e:61:4b:3d:f3: 6e:83:97:47:03:91:4d:d0:bf:8f:45:19:f7:8e:d6: 0a:87:48:e2:f3:4a:4d:84:00:df:72:a2:9c:43:5d: a8:29:0e:75:19:5a:56:44:ee:a8:cd:3d:3c:77:3d: 64:09:e9:36:fa:90:af:a6:7e:36:f1:f5:5a:7c:50: d2:10:11:da:fc:d1:bd:f4:24:cc:7c:74:c6:3a:5a: 0a:5b:e2:55:e6:07:c9:d7:89:b0:b3:11:b5:72:44: bc:7e:bd:f1:6d:27:08:03:72:05:ac:7c:cc:40:ba: dd:37:a8:7a:fc:d7:1f:7a:2d:fd:28:e4:32:f7:30: 9e:4d:4a:c0:d0:ea:02:cd:1c:05:60:9a:12:90:c6: f6:9b:c0:ab:71:0b:97:7d:fb:a8:58:da:43:b0:03: e6:19:a0:5c:db:09:5e:15:7a:17:be:84:33:b3:0e: 91:95:3a:5a:d3:77:86:d3:43:8a:66:c0:b7:26:da: 26:c0:94:3a:8f:63:01:1f:74:eb:e4:95:31:59:88: 0e:01:f1:d7:11:59:ec:ef:c9:41:47:c3:5a:13:08: ad:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C9:E1:DD:C4:B2:56:D8:17:C6:7D:B8:C5:76:01:CB:C9:16:DC:04 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:6e:cb:9c:63:ae:77:96:21:02:cf:0c:76:42:52:83:5e:61: 90:42:f6:28:c3:1f:d9:8e:b8:08:20:f1:7b:81:9b:6b:65:9b: f5:74:50:b4:8b:d8:80:07:84:3c:8a:8f:5f:1f:bb:a7:c5:90: a5:9b:cd:46:a4:4d:5c:28:8f:d3:3f:2c:88:6f:a9:17:9e:41: ad:a2:c4:86:ef:eb:bc:d3:39:a1:f5:86:13:c7:d5:04:8b:bd: 52:12:1b:32:8d:c1:a5:bf:f6:f5:3a:b7:07:a9:dd:4f:c4:be: da:57:4d:2a:75:8e:c8:c3:61:fe:c9:da:09:a3:da:e2:06:0f: 50:83:f2:34:59:a6:fc:6a:7b:77:19:74:ab:21:3f:4d:84:3b: 09:a4:b0:e2:d5:af:36:0f:79:ad:f0:0c:31:9c:98:ab:2c:f6: cf:7a:be:ff:53:4f:34:93:bc:d5:9c:d6:a2:11:14:11:3a:e0: e9:77:06:92:fa:16:17:10:e3:cb:1a:af:92:71:9e:39:52:37: 94:6e:0e:e8:8c:1f:72:75:c1:23:93:69:e3:da:22:f4:b9:3d: ed:7c:81:f9:5b:8a:d6:72:71:91:49:46:6f:6b:60:4a:9c:2c: c2:60:05:1d:d6:b2:fd:6b:e3:24:c1:b7:4a:e7:39:ed:7f:32: 3f:a6:18:d0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUS0XhGNlUzhnu+kp8nMRpYkyHUkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MjcxMjI1NTNaFw0yNjA4MjgxNDAwNTNaMDMxMTAvBgNV BAMTKDY5QzlFMUREQzRCMjU2RDgxN0M2N0RCOEM1NzYwMUNCQzkxNkRDMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiSFlIjSBP65i7sl20e8W5XpKk dVymkK0qSJAwX8WWSIFIZcMhS25+YUs9826Dl0cDkU3Qv49FGfeO1gqHSOLzSk2E AN9yopxDXagpDnUZWlZE7qjNPTx3PWQJ6Tb6kK+mfjbx9Vp8UNIQEdr80b30JMx8 dMY6Wgpb4lXmB8nXibCzEbVyRLx+vfFtJwgDcgWsfMxAut03qHr81x96Lf0o5DL3 MJ5NSsDQ6gLNHAVgmhKQxvabwKtxC5d9+6hY2kOwA+YZoFzbCV4Vehe+hDOzDpGV OlrTd4bTQ4pmwLcm2ibAlDqPYwEfdOvklTFZiA4B8dcRWezvyUFHw1oTCK03AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUacnh3cSyVtgXxn24xXYBy8kW3AQwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR27LnGOud5YhAs8MdkJS g15hkEL2KMMf2Y64CCDxe4Gba2Wb9XRQtIvYgAeEPIqPXx+7p8WQpZvNRqRNXCiP 0z8siG+pF55BraLEhu/rvNM5ofWGE8fVBIu9UhIbMo3Bpb/29Tq3B6ndT8S+2ldN KnWOyMNh/snaCaPa4gYPUIPyNFmm/Gp7dxl0qyE/TYQ7CaSw4tWvNg95rfAMMZyY qyz2z3q+/1NPNJO81ZzWohEUETrg6XcGkvoWFxDjyxqvknGeOVI3lG4O6IwfcnXB I5Np49oi9Lk97XyB+VuK1nJxkUlGb2tgSpwswmAFHday/WvjJMG3Suc57X8yP6YY 0A== -----END CERTIFICATE-----Generated at Fri Aug 28 00:40:25 2026 by rpki-client