$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: Rz3c3KVsrHzHdCR/ag+qN0dB1+pUYkG50kA6EtzmJIc= Subject key identifier: BE:81:70:91:28:D7:B1:60:B1:FD:66:96:7C:51:EB:6C:AF:60:FA:27 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 46F226B5269FB0498778EBB4FAD9BB3D3C0782D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0548 Signing time: Thu 06 Aug 2026 21:42:08 +0000 Manifest this update: Thu 06 Aug 2026 21:37:08 +0000 Manifest next update: Sat 08 Aug 2026 00:01:08 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: PgfqpJCRtj7el87mZJ/pUtijoTD5X9g0gM0zBeunTak=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 08 Aug 2026 00:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:f2:26:b5:26:9f:b0:49:87:78:eb:b4:fa:d9:bb:3d:3c:07:82:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 6 21:37:08 2026 GMT Not After : Aug 8 00:01:08 2026 GMT Subject: CN=BE81709128D7B160B1FD66967C51EB6CAF60FA27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:f1:78:f5:cf:a8:f1:64:af:41:ab:36:94: 55:35:10:07:f6:b6:b7:57:93:72:98:2a:33:96:24: e8:64:c8:4a:42:92:58:4f:f7:19:18:68:ba:1f:0f: 88:05:fc:a4:d9:9e:8a:b6:fe:5e:ae:42:db:b8:9d: 13:b0:83:ce:b5:1c:44:dd:da:d3:e5:d3:fc:16:f2: 32:b3:88:5e:d8:87:84:25:0e:b9:be:9a:3d:e5:7e: 33:ad:bd:a1:ab:f0:1f:36:6b:f4:4f:fc:b3:69:0b: 8c:2d:29:16:96:99:45:00:2c:11:0c:ca:3d:be:85: 11:99:fc:10:66:b0:80:b4:f9:eb:2d:0f:49:06:80: 43:f7:83:dc:b5:04:28:c5:55:50:d5:ee:dd:07:49: 3a:38:d1:2a:67:48:3d:42:a7:2a:5a:7f:9c:d2:67: b7:18:d8:e5:ce:aa:1f:21:74:8b:f9:7d:bf:ea:25: e6:f2:18:a1:b7:20:d2:39:39:cd:8d:e8:33:2b:26: 7f:45:8e:2a:da:5c:5f:fe:60:df:1e:ea:0e:00:39: 54:f0:73:29:bb:5c:cb:bc:40:08:1e:43:52:e3:5d: c2:af:3e:51:b1:0f:a1:42:65:27:4b:90:47:93:aa: 1e:de:ea:29:bd:34:ff:69:b1:98:64:82:1c:72:65: 90:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:81:70:91:28:D7:B1:60:B1:FD:66:96:7C:51:EB:6C:AF:60:FA:27 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:dd:ba:39:79:31:1a:2e:95:08:64:e4:8f:22:d2:24:57:89: f0:20:e4:c3:a4:90:03:87:fe:16:a4:02:8c:e5:81:e4:c3:aa: 8b:66:47:d1:9f:05:73:21:bb:b3:59:db:f9:26:99:23:1c:4b: 2a:a3:fa:08:38:ef:38:b3:e8:81:2d:c9:c5:ab:99:c9:4c:17: 3b:f1:02:c4:00:93:33:33:80:86:e7:9f:31:fc:31:11:a8:0c: 6d:13:61:a2:06:69:f5:71:0a:f1:bd:68:9f:52:88:c5:d6:3b: 36:f4:50:49:65:e3:37:b5:30:cb:66:35:e6:37:6a:cc:16:c9: 05:19:2b:0d:b8:96:21:07:4f:19:2a:8b:42:01:71:31:bc:8b: db:96:5d:71:bd:34:05:ce:1b:ef:0b:70:7f:23:4d:bb:11:11: f8:35:17:b4:9d:a7:a2:f8:15:b0:10:94:cb:05:40:f8:77:c6: b5:c2:da:08:c8:b3:a7:f9:54:02:f6:56:e2:b0:a5:f2:30:80: 3d:d4:bd:a3:45:5e:6d:f4:3d:ef:e6:a5:14:04:d9:f4:ce:de: 54:81:f7:26:46:3a:9c:aa:86:0a:40:70:8b:cf:c1:07:5d:0b: 73:75:e1:72:a6:1c:74:88:19:75:89:d8:f1:61:eb:fc:c8:bc: 4b:09:d7:34 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURvImtSafsEmHeOu0+tm7PTwHgtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MDYyMTM3MDhaFw0yNjA4MDgwMDAxMDhaMDMxMTAvBgNV BAMTKEJFODE3MDkxMjhEN0IxNjBCMUZENjY5NjdDNTFFQjZDQUY2MEZBMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ifF49c+o8WSvQas2lFU1EAf2 trdXk3KYKjOWJOhkyEpCklhP9xkYaLofD4gF/KTZnoq2/l6uQtu4nROwg861HETd 2tPl0/wW8jKziF7Yh4QlDrm+mj3lfjOtvaGr8B82a/RP/LNpC4wtKRaWmUUALBEM yj2+hRGZ/BBmsIC0+estD0kGgEP3g9y1BCjFVVDV7t0HSTo40SpnSD1Cpypaf5zS Z7cY2OXOqh8hdIv5fb/qJebyGKG3INI5Oc2N6DMrJn9FjiraXF/+YN8e6g4AOVTw cym7XMu8QAgeQ1LjXcKvPlGxD6FCZSdLkEeTqh7e6im9NP9psZhkghxyZZDxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvoFwkSjXsWCx/WaWfFHrbK9g+icwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAit26OXkxGi6VCGTkjyLS JFeJ8CDkw6SQA4f+FqQCjOWB5MOqi2ZH0Z8FcyG7s1nb+SaZIxxLKqP6CDjvOLPo gS3JxauZyUwXO/ECxACTMzOAhuefMfwxEagMbRNhogZp9XEK8b1on1KIxdY7NvRQ SWXjN7Uwy2Y15jdqzBbJBRkrDbiWIQdPGSqLQgFxMbyL25Zdcb00Bc4b7wtwfyNN uxER+DUXtJ2novgVsBCUywVA+HfGtcLaCMizp/lUAvZW4rCl8jCAPdS9o0VebfQ9 7+alFATZ9M7eVIH3JkY6nKqGCkBwi8/BB10Lc3XhcqYcdIgZdYnY8WHr/Mi8SwnX NA== -----END CERTIFICATE-----Generated at Fri Aug 7 09:12:11 2026 by rpki-client