$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: ysCtj+FQx4yn7JG9UHtVqg232ABrZg6MHV3UAqyCsfg= Subject key identifier: 94:0C:2E:B8:F6:7B:2B:B0:39:7C:E8:A9:D3:26:6F:06:2A:38:8E:55 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 7A4210329F95DF0814CBC2D8300187B8530BD293 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 053F Signing time: Thu 30 Jul 2026 20:38:26 +0000 Manifest this update: Thu 30 Jul 2026 20:33:26 +0000 Manifest next update: Fri 31 Jul 2026 22:40:26 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Xb406senYGwB/KIkXtfsvDGRjqYnHk/byXfE6uu2Jyo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 31 Jul 2026 22:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:42:10:32:9f:95:df:08:14:cb:c2:d8:30:01:87:b8:53:0b:d2:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 30 20:33:26 2026 GMT Not After : Jul 31 22:40:26 2026 GMT Subject: CN=940C2EB8F67B2BB0397CE8A9D3266F062A388E55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:16:ef:a8:55:c7:57:af:53:99:6c:b0:5b:75: a0:70:ac:3b:ff:0d:a2:2a:a1:28:af:4b:36:10:74: 27:36:6c:25:c1:65:2e:a0:ed:3c:69:37:79:4f:14: d0:df:eb:57:f9:bb:89:09:be:5d:01:f4:43:c9:90: 17:eb:25:55:d5:e0:53:a9:df:33:8e:07:47:11:74: da:ed:81:54:00:93:dc:a2:cd:df:56:39:27:46:14: 3f:20:81:11:19:62:b5:de:d8:b4:d4:a7:12:99:b8: f5:02:b9:7b:c4:8a:70:c0:fa:5d:d6:4d:65:c4:eb: b7:ca:28:a6:37:21:4d:c5:65:df:96:39:8e:2d:79: 0d:28:96:f4:4b:3e:cc:99:62:0c:ce:0a:07:ff:13: 8e:7c:68:b5:cd:f6:e5:6c:79:f5:bd:6a:d1:e0:57: 60:34:12:99:8c:21:70:09:7c:b8:b4:99:c1:d5:78: 87:6d:01:de:9b:1d:44:cc:30:d7:7a:16:47:c7:c0: c9:a1:af:1a:0b:db:40:50:21:3c:2b:88:28:fa:ad: 3c:a8:82:43:eb:ed:58:13:02:8e:46:10:29:cf:9d: 59:93:68:bc:77:83:10:b7:d3:7b:12:57:a7:d6:c9: 7d:c2:03:a7:04:b6:30:06:f7:5a:c9:07:fe:77:e9: 72:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0C:2E:B8:F6:7B:2B:B0:39:7C:E8:A9:D3:26:6F:06:2A:38:8E:55 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:f7:64:b4:87:59:a7:5a:48:1f:67:69:5a:12:fe:24:d6:ff: fb:ca:85:ff:2a:f6:8b:e0:0b:b5:4a:64:bf:ae:20:d6:bb:e3: 60:e1:72:64:d7:ac:b3:31:d0:8f:dd:34:c7:a0:60:b5:20:0a: 46:84:ac:e7:44:ce:be:ec:aa:56:80:b3:9d:c8:71:7a:9c:75: f7:3c:1a:90:c8:99:3a:f8:fa:56:64:3e:6d:57:03:25:25:a1: 06:c9:18:44:90:1d:c3:86:5a:52:72:72:99:74:2e:41:75:6d: 14:3b:a0:6b:ab:57:a5:22:d0:eb:e2:cf:a8:22:37:e9:17:f5: dd:a5:8d:02:cb:ca:82:bf:3e:9e:92:61:84:16:36:c5:82:b6: 5c:aa:fb:e0:0f:90:79:59:ed:7d:e6:d4:66:b3:8f:c2:56:75: 19:fc:c9:c4:7f:e0:57:ee:fb:48:55:90:d2:ef:ad:05:13:ac: df:41:15:d5:96:ea:a0:9e:eb:39:ba:5c:a2:05:b3:d9:7b:e8: 22:79:ef:54:b8:4f:f0:4d:62:ca:03:ee:c3:e4:83:d3:55:9b: 81:41:ed:5b:50:50:92:c3:67:d9:8c:11:25:17:1a:68:69:65: bf:31:bc:a7:de:4b:de:fe:a3:83:ee:39:b0:0c:63:b7:12:0e: 8e:82:a9:87 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUekIQMp+V3wgUy8LYMAGHuFML0pMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MzAyMDMzMjZaFw0yNjA3MzEyMjQwMjZaMDMxMTAvBgNV BAMTKDk0MEMyRUI4RjY3QjJCQjAzOTdDRThBOUQzMjY2RjA2MkEzODhFNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmFu+oVcdXr1OZbLBbdaBwrDv/ DaIqoSivSzYQdCc2bCXBZS6g7TxpN3lPFNDf61f5u4kJvl0B9EPJkBfrJVXV4FOp 3zOOB0cRdNrtgVQAk9yizd9WOSdGFD8ggREZYrXe2LTUpxKZuPUCuXvEinDA+l3W TWXE67fKKKY3IU3FZd+WOY4teQ0olvRLPsyZYgzOCgf/E458aLXN9uVsefW9atHg V2A0EpmMIXAJfLi0mcHVeIdtAd6bHUTMMNd6FkfHwMmhrxoL20BQITwriCj6rTyo gkPr7VgTAo5GECnPnVmTaLx3gxC303sSV6fWyX3CA6cEtjAG91rJB/536XJhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlAwuuPZ7K7A5fOip0yZvBio4jlUwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPdktIdZp1pIH2dpWhL+ JNb/+8qF/yr2i+ALtUpkv64g1rvjYOFyZNesszHQj900x6BgtSAKRoSs50TOvuyq VoCznchxepx19zwakMiZOvj6VmQ+bVcDJSWhBskYRJAdw4ZaUnJymXQuQXVtFDug a6tXpSLQ6+LPqCI36Rf13aWNAsvKgr8+npJhhBY2xYK2XKr74A+QeVntfebUZrOP wlZ1GfzJxH/gV+77SFWQ0u+tBROs30EV1ZbqoJ7rObpcogWz2XvoInnvVLhP8E1i ygPuw+SD01WbgUHtW1BQksNn2YwRJRcaaGllvzG8p95L3v6jg+45sAxjtxIOjoKp hw== -----END CERTIFICATE-----Generated at Fri Jul 31 02:27:03 2026 by rpki-client