$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 8yuBvKIwy0MltaHoA92DvO8KS4IKHSwyLRgF6CqYf/o= Subject key identifier: 6D:AB:29:5C:5D:28:7E:22:41:48:15:7A:7F:B2:12:E7:DF:99:29:CE Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 0722FA7EAB8E21185D028ABEB155F073EF9FCE3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 049F Signing time: Tue 31 Mar 2026 15:59:42 +0000 Manifest this update: Tue 31 Mar 2026 15:54:42 +0000 Manifest next update: Wed 01 Apr 2026 19:34:42 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: XsLKXVy+82DREudSv9659/2Bfh3DC3v1O6hPoCkRZck=) 4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Apr 2026 19:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:22:fa:7e:ab:8e:21:18:5d:02:8a:be:b1:55:f0:73:ef:9f:ce:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Mar 31 15:54:42 2026 GMT Not After : Apr 1 19:34:42 2026 GMT Subject: CN=6DAB295C5D287E224148157A7FB212E7DF9929CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:42:09:dd:33:f8:19:dc:e1:bf:32:25:d6: fd:75:91:b3:f7:dd:fa:bb:08:10:0a:c8:85:38:c8: da:d8:f5:81:89:ea:43:48:11:d1:2a:74:8d:ce:01: e5:c9:ca:2c:4c:a1:36:b7:9c:13:50:8f:9f:72:15: 1d:6a:46:10:93:b4:e7:7f:ab:c6:45:1d:cb:8b:33: d1:54:1d:8c:a5:6d:8a:95:39:a1:52:f4:30:7f:99: a0:dd:d9:e7:7c:4d:04:c2:f9:85:f1:41:d1:fc:c5: 89:a0:99:0b:07:3b:9b:54:ba:a9:5a:b6:81:a4:82: 2b:0e:b1:21:e5:f1:77:93:a6:a2:cc:b0:50:0b:90: 06:66:63:2c:9a:10:05:00:bd:49:8f:0a:22:ad:4f: 80:1b:e8:11:be:f9:d5:31:2e:6d:d3:c8:95:f6:30: 5a:64:1f:14:59:8c:b5:67:3a:e4:a7:03:b0:5a:2a: c0:aa:d7:08:8b:d1:50:a2:b4:38:9e:d3:5b:4c:9f: 0c:3a:c2:b3:a4:48:96:29:0f:d6:37:6a:b2:6e:1b: 60:56:55:e1:2c:07:18:96:bc:f5:ef:c4:0a:72:39: 17:aa:eb:d9:8d:7d:fa:75:e0:8b:43:2b:12:47:7a: d5:2e:71:79:89:33:e3:ce:bb:6b:b2:c8:24:5e:bf: 49:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AB:29:5C:5D:28:7E:22:41:48:15:7A:7F:B2:12:E7:DF:99:29:CE X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:9d:38:4f:ac:0d:21:af:89:97:16:ce:f2:1c:c9:32:90:13: 75:71:a2:b9:b2:29:ed:7e:f1:67:de:a9:25:9f:96:74:68:fe: 23:5c:11:5a:94:24:43:9c:4a:91:57:08:e6:8f:1d:7a:34:b6: 15:4b:57:17:0a:d3:a4:73:41:0a:9b:25:1e:ca:78:e8:c6:6e: 72:d7:88:1d:43:f6:48:a4:e5:a7:be:47:5d:1a:0c:a7:84:38: 01:34:72:a8:7f:ae:6b:3d:af:96:54:21:ca:b7:1b:2e:cb:60: e5:cf:6c:01:95:04:8a:8c:a5:6a:3e:1a:fc:d3:df:38:62:14: 22:f6:83:c9:8c:47:72:2b:fa:8c:29:ec:cf:32:e1:23:04:cd: 51:4a:ed:e9:27:af:f5:45:67:25:2e:3b:fa:59:57:82:02:24: ac:30:2a:cf:1b:b6:a6:e1:92:30:c6:a6:8e:10:31:4d:5a:b4: 4e:12:8b:5a:c3:a2:bc:54:f8:da:7b:15:a4:22:0d:9b:d0:aa: 33:70:49:fd:02:42:45:c8:af:07:b0:de:16:50:97:3f:31:af: 4a:28:8e:e3:66:9e:33:73:50:d4:22:86:c9:31:73:bd:47:90: fe:cb:87:11:24:1f:f4:52:ac:98:54:79:af:89:d1:73:fd:20: 25:0f:83:5b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUByL6fquOIRhdAoq+sVXwc++fzj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAzMzExNTU0NDJaFw0yNjA0MDExOTM0NDJaMDMxMTAvBgNV BAMTKDZEQUIyOTVDNUQyODdFMjI0MTQ4MTU3QTdGQjIxMkU3REY5OTI5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAo0IJ3TP4GdzhvzIl1v11kbP3 3fq7CBAKyIU4yNrY9YGJ6kNIEdEqdI3OAeXJyixMoTa3nBNQj59yFR1qRhCTtOd/ q8ZFHcuLM9FUHYylbYqVOaFS9DB/maDd2ed8TQTC+YXxQdH8xYmgmQsHO5tUuqla toGkgisOsSHl8XeTpqLMsFALkAZmYyyaEAUAvUmPCiKtT4Ab6BG++dUxLm3TyJX2 MFpkHxRZjLVnOuSnA7BaKsCq1wiL0VCitDie01tMnww6wrOkSJYpD9Y3arJuG2BW VeEsBxiWvPXvxApyOReq69mNffp14ItDKxJHetUucXmJM+POu2uyyCRev0nxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUbaspXF0ofiJBSBV6f7IS59+ZKc4wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHp04T6wNIa+JlxbO8hzJ MpATdXGiubIp7X7xZ96pJZ+WdGj+I1wRWpQkQ5xKkVcI5o8dejS2FUtXFwrTpHNB CpslHsp46MZucteIHUP2SKTlp75HXRoMp4Q4ATRyqH+uaz2vllQhyrcbLstg5c9s AZUEioylaj4a/NPfOGIUIvaDyYxHciv6jCnszzLhIwTNUUrt6Sev9UVnJS47+llX ggIkrDAqzxu2puGSMMamjhAxTVq0ThKLWsOivFT42nsVpCINm9CqM3BJ/QJCRciv B7DeFlCXPzGvSiiO42aeM3NQ1CKGyTFzvUeQ/suHESQf9FKsmFR5r4nRc/0gJQ+D Ww== -----END CERTIFICATE-----Generated at Wed Apr 1 07:59:35 2026 by rpki-client