$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: ykUv2fiBEwM0WpkdffvZ7UlVQcy8JVa7UXgAF6QnfGc= Subject key identifier: 36:90:F7:53:61:3E:BD:1B:96:95:A8:07:A8:55:AE:12:97:82:39:EA Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 605808F313F63AD4CF1AEF28B8263D35044C9EAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 056E Signing time: Fri 04 Sep 2026 04:12:34 +0000 Manifest this update: Fri 04 Sep 2026 04:07:34 +0000 Manifest next update: Sat 05 Sep 2026 04:40:34 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: ogogX7YPwnp1kce6rvAPsMnKXm6dKet6zwAZnIKR+f4=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 04:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:58:08:f3:13:f6:3a:d4:cf:1a:ef:28:b8:26:3d:35:04:4c:9e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Sep 4 04:07:34 2026 GMT Not After : Sep 5 04:40:34 2026 GMT Subject: CN=3690F753613EBD1B9695A807A855AE12978239EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9d:cc:cb:10:bb:de:22:bf:ec:02:8b:08:99: 8a:35:70:0e:b5:77:b0:0a:77:08:d4:91:f5:0a:6a: 05:89:5c:9f:7b:bb:d5:59:9f:06:fb:a2:85:f2:a9: 33:51:88:c1:2f:1f:04:47:47:1b:c3:d8:cd:5f:9b: 36:9a:9d:1b:d9:60:cb:ac:7e:28:01:40:ab:44:ad: 55:b8:a5:fb:47:a8:60:5e:1e:1e:33:d0:78:18:2f: 04:ba:da:76:68:ff:2a:cb:df:16:8c:d7:1e:55:18: 3a:a1:8b:44:6f:47:19:16:f5:89:5e:c1:55:a2:71: 8f:fe:20:b4:5c:6b:70:c0:c6:eb:b5:bf:7f:1b:43: c3:31:dd:1b:29:ed:b8:e2:94:3f:ea:ab:9d:e0:88: 39:f0:50:ec:11:39:29:0b:a3:a9:0f:a9:4c:ea:ba: 6d:0f:7e:7d:c8:e7:16:18:0f:98:bd:9d:ee:4b:1b: f8:d4:90:d7:82:d8:98:23:93:e7:e3:31:87:97:26: e7:60:73:47:d3:b2:03:39:da:0f:9f:e0:79:46:a6: f9:17:40:be:e6:61:09:d5:52:19:c4:1d:7a:31:93: 94:65:12:a6:18:e8:68:df:35:b2:02:39:58:e4:f3: 64:63:6f:13:20:2c:81:63:29:45:a3:fc:d4:3f:35: 66:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:90:F7:53:61:3E:BD:1B:96:95:A8:07:A8:55:AE:12:97:82:39:EA X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:65:02:9b:30:d4:56:23:a8:ca:7b:66:96:0a:c1:13:6f:a1: f8:73:6e:29:60:44:1c:e9:2f:3b:58:a2:8d:37:1f:b7:4e:23: 89:db:ea:60:fc:a2:20:2a:8f:47:d3:36:ab:a9:e7:84:6e:52: 63:e8:d1:1b:0d:db:88:e3:48:6a:62:aa:15:0d:c3:cd:c5:b6: 0b:b9:12:14:42:74:51:7f:2d:9c:6f:ea:a6:2c:e9:0a:8d:55: 4f:01:34:1c:75:bf:06:ef:be:32:a4:10:dd:bd:8a:c2:d3:b9: a3:a5:e8:e5:be:eb:66:7f:ea:c1:d4:41:22:bf:da:45:0f:93: 99:c5:c5:8b:c0:10:dc:99:80:b9:00:69:19:7a:af:96:ca:db: 63:45:05:8b:42:1f:a9:b8:9a:86:fc:54:5a:15:d6:88:db:73: 28:81:3c:25:2f:55:a2:1c:29:1b:14:89:01:7f:fb:b2:60:63: 23:b4:7b:5a:a6:71:24:eb:a8:64:71:97:f7:cc:30:20:c1:14: 50:f4:00:d6:c4:99:93:55:91:07:93:15:16:82:fc:c5:0b:3d: 26:58:18:44:c8:58:6d:16:37:9d:5a:85:28:bb:35:df:d8:f6: dd:23:11:91:2a:05:a0:69:16:2b:65:b1:6c:ac:03:fb:54:82: 49:84:99:0e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYFgI8xP2OtTPGu8ouCY9NQRMnqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA5MDQwNDA3MzRaFw0yNjA5MDUwNDQwMzRaMDMxMTAvBgNV BAMTKDM2OTBGNzUzNjEzRUJEMUI5Njk1QTgwN0E4NTVBRTEyOTc4MjM5RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFnczLELveIr/sAosImYo1cA61 d7AKdwjUkfUKagWJXJ97u9VZnwb7ooXyqTNRiMEvHwRHRxvD2M1fmzaanRvZYMus figBQKtErVW4pftHqGBeHh4z0HgYLwS62nZo/yrL3xaM1x5VGDqhi0RvRxkW9Yle wVWicY/+ILRca3DAxuu1v38bQ8Mx3Rsp7bjilD/qq53giDnwUOwROSkLo6kPqUzq um0Pfn3I5xYYD5i9ne5LG/jUkNeC2Jgjk+fjMYeXJudgc0fTsgM52g+f4HlGpvkX QL7mYQnVUhnEHXoxk5RlEqYY6GjfNbICOVjk82RjbxMgLIFjKUWj/NQ/NWZXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNpD3U2E+vRuWlagHqFWuEpeCOeowHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGUCmzDUViOoyntmlgrB E2+h+HNuKWBEHOkvO1iijTcft04jidvqYPyiICqPR9M2q6nnhG5SY+jRGw3biONI amKqFQ3DzcW2C7kSFEJ0UX8tnG/qpizpCo1VTwE0HHW/Bu++MqQQ3b2KwtO5o6Xo 5b7rZn/qwdRBIr/aRQ+TmcXFi8AQ3JmAuQBpGXqvlsrbY0UFi0IfqbiahvxUWhXW iNtzKIE8JS9VohwpGxSJAX/7smBjI7R7WqZxJOuoZHGX98wwIMEUUPQA1sSZk1WR B5MVFoL8xQs9JlgYRMhYbRY3nVqFKLs139j23SMRkSoFoGkWK2WxbKwD+1SCSYSZ Dg== -----END CERTIFICATE-----Generated at Fri Sep 4 21:16:28 2026 by rpki-client