$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: LmYq5J19nwXXsm8WQnFT7X5ES5iIjiRXln3M2a+Qi6E= Subject key identifier: 8D:23:50:C2:E2:13:BF:24:6A:49:6B:AF:A1:EE:37:A1:75:E8:C1:66 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 49590016977B118AE2CB53A9D122A3DDA9E0CF24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 047A Signing time: Wed 04 Mar 2026 07:18:41 +0000 Manifest this update: Wed 04 Mar 2026 07:13:41 +0000 Manifest next update: Thu 05 Mar 2026 08:39:41 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: TRmwwxwjkSq5ViqEs/zDXbOHCwAYUAXwg4pJiJ6r8uk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 08:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:59:00:16:97:7b:11:8a:e2:cb:53:a9:d1:22:a3:dd:a9:e0:cf:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Mar 4 07:13:41 2026 GMT Not After : Mar 5 08:39:41 2026 GMT Subject: CN=8D2350C2E213BF246A496BAFA1EE37A175E8C166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:48:be:de:e1:7d:3e:04:b0:ec:fd:f1:ea:63: e4:df:24:92:11:57:c4:91:c9:a9:32:ac:4c:7b:34: d0:3a:87:bb:b8:f0:4c:e4:93:4f:2d:ea:5d:a7:63: 8f:eb:f8:49:bc:ad:b3:22:22:49:07:b5:b3:95:03: 36:73:a8:99:36:28:b2:c4:f0:1d:a3:f8:58:c4:df: 52:6c:1a:36:56:3a:9e:7b:c0:c4:2f:52:bd:6c:af: b2:c0:d6:c3:41:ff:3e:55:23:5a:73:98:54:c9:b2: 87:f1:70:bb:01:a8:b3:77:f6:7c:75:4a:67:cc:01: b5:49:e0:15:86:7a:7f:86:77:c8:2e:0d:6d:6a:0e: 8f:c2:b3:ce:9f:5b:f3:3c:14:21:cb:cd:d6:55:58: 4e:33:43:c1:a8:3e:14:50:23:13:aa:e0:63:d3:cc: ac:19:d3:1a:4a:09:84:0a:5d:28:b0:0a:bc:63:95: 79:b5:06:99:0c:65:98:6e:e5:ea:f9:99:40:28:39: a0:a6:34:fa:d7:71:bd:f4:bf:14:10:63:b5:1b:dc: e1:7e:f2:51:f9:ff:47:09:b1:d5:60:47:01:65:a9: f8:10:e1:2b:70:a4:18:fa:c6:ba:b9:11:e0:db:cd: 12:73:cb:40:ee:76:79:d0:d3:44:3a:e2:2d:87:02: 9d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:23:50:C2:E2:13:BF:24:6A:49:6B:AF:A1:EE:37:A1:75:E8:C1:66 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ab:cf:d0:f5:cb:b4:ac:3a:ea:39:09:99:01:cb:df:14:f2: f1:8b:9f:5e:19:6f:4b:6d:a5:65:c9:08:54:88:3d:b4:04:84: 12:ac:f8:97:9f:f1:53:4f:8d:ad:3d:4a:70:6d:e7:b3:2e:03: c6:3c:4e:3e:20:ff:53:70:eb:10:09:82:d5:cc:b9:d1:73:2d: 01:50:11:9b:ff:ca:7d:8e:68:b0:83:b7:d9:00:11:b6:d3:21: 90:55:7d:0e:a0:22:5a:9d:c1:fe:70:9d:0e:db:bb:2e:92:14: 36:3c:a5:9d:00:2c:fc:9f:ff:2c:ed:af:d2:e7:74:d6:54:b9: b1:85:b7:3f:bb:8a:02:0f:02:ee:41:10:b5:f8:1e:d6:03:4d: 54:2e:04:a5:e5:b0:ed:30:fb:52:79:2f:73:17:de:90:6b:e5: 36:a6:78:d7:26:0e:ff:19:eb:44:37:bb:ae:60:46:26:60:fc: 6d:ca:ae:a0:73:57:4b:3a:0a:06:a5:dc:a5:43:b9:76:32:8c: 87:47:98:ed:65:0c:5d:af:92:25:2d:bc:b3:87:66:2c:5a:71: 46:c7:af:49:5a:c3:b7:55:0f:0b:ef:63:a2:32:99:c4:e1:0a: b0:cd:95:18:8e:b1:68:91:d6:43:73:cd:e9:c1:ee:10:8d:6a: dd:5c:a9:89 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSVkAFpd7EYriy1Op0SKj3angzyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAzMDQwNzEzNDFaFw0yNjAzMDUwODM5NDFaMDMxMTAvBgNV BAMTKDhEMjM1MEMyRTIxM0JGMjQ2QTQ5NkJBRkExRUUzN0ExNzVFOEMxNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXSL7e4X0+BLDs/fHqY+TfJJIR V8SRyakyrEx7NNA6h7u48Ezkk08t6l2nY4/r+Em8rbMiIkkHtbOVAzZzqJk2KLLE 8B2j+FjE31JsGjZWOp57wMQvUr1sr7LA1sNB/z5VI1pzmFTJsofxcLsBqLN39nx1 SmfMAbVJ4BWGen+Gd8guDW1qDo/Cs86fW/M8FCHLzdZVWE4zQ8GoPhRQIxOq4GPT zKwZ0xpKCYQKXSiwCrxjlXm1BpkMZZhu5er5mUAoOaCmNPrXcb30vxQQY7Ub3OF+ 8lH5/0cJsdVgRwFlqfgQ4StwpBj6xrq5EeDbzRJzy0DudnnQ00Q64i2HAp0dAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUjSNQwuITvyRqSWuvoe43oXXowWYwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6vP0PXLtKw66jkJmQHL 3xTy8YufXhlvS22lZckIVIg9tASEEqz4l5/xU0+NrT1KcG3nsy4DxjxOPiD/U3Dr EAmC1cy50XMtAVARm//KfY5osIO32QARttMhkFV9DqAiWp3B/nCdDtu7LpIUNjyl nQAs/J//LO2v0ud01lS5sYW3P7uKAg8C7kEQtfge1gNNVC4EpeWw7TD7Unkvcxfe kGvlNqZ41yYO/xnrRDe7rmBGJmD8bcquoHNXSzoKBqXcpUO5djKMh0eY7WUMXa+S JS28s4dmLFpxRsevSVrDt1UPC+9jojKZxOEKsM2VGI6xaJHWQ3PN6cHuEI1q3Vyp iQ== -----END CERTIFICATE-----Generated at Wed Mar 4 11:52:36 2026 by rpki-client