$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: dim5ifYiIKVrkuSr8yaB7j27kjywcedkgTzgZJ1ngGg= Subject key identifier: 1B:9C:66:80:F2:F5:55:E3:C3:69:92:D5:66:EF:95:85:5F:41:89:07 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 3F4F46B5101B4A3169E2F94ADE3FAC709E5CCB00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04D3 Signing time: Sat 09 May 2026 21:07:36 +0000 Manifest this update: Sat 09 May 2026 21:02:36 +0000 Manifest next update: Mon 11 May 2026 00:55:36 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 8SGj4poiHxeHfYZFxPuRsZRY2zmXCcZu7GEuolTAEqE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 11 May 2026 00:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4f:46:b5:10:1b:4a:31:69:e2:f9:4a:de:3f:ac:70:9e:5c:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 9 21:02:36 2026 GMT Not After : May 11 00:55:36 2026 GMT Subject: CN=1B9C6680F2F555E3C36992D566EF95855F418907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:ff:16:0c:db:81:4a:3f:ce:50:29:9a:f4: a6:10:20:db:58:48:62:8c:58:63:f0:71:92:9a:42: 3b:ca:96:51:7d:0f:00:e8:44:3f:5e:08:68:c3:a7: 65:81:bf:8b:80:92:98:00:c2:61:bc:e1:aa:5c:23: 60:97:ea:7b:53:5c:0a:49:a0:36:51:ed:f9:b5:8b: 67:9e:24:f1:93:fc:a5:22:f3:8a:56:5b:cb:a3:0d: 96:1b:68:51:af:5b:a3:91:e9:72:6b:20:21:b3:d1: 16:86:7d:80:8f:5b:1c:1f:fc:e9:c6:14:c3:92:03: 73:53:98:8d:30:a1:3b:bd:fa:c0:44:d8:4b:1c:0b: a0:82:c5:ed:78:71:6a:5f:66:39:4b:4d:76:95:36: ed:1b:a4:91:3f:34:96:e5:1a:f6:48:53:e1:2b:49: 1e:91:8b:74:91:9a:fe:ac:90:3f:f9:b0:75:2a:d8: 78:d0:77:13:8b:91:61:a1:d7:08:4d:c7:45:6e:05: 75:f8:b3:05:66:2b:75:74:ed:76:5d:43:67:31:e3: 81:03:45:36:b0:59:ce:49:09:c8:30:c2:d5:58:27: 69:d1:34:fa:b4:db:bc:23:a7:0b:ab:0d:56:63:d9: e3:ef:91:a0:8d:cc:00:f7:f9:c8:ac:47:5a:51:52: 75:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9C:66:80:F2:F5:55:E3:C3:69:92:D5:66:EF:95:85:5F:41:89:07 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:5b:61:86:7a:d1:30:6e:07:c0:80:38:64:18:9b:62:88:dd: e0:fa:9b:00:92:49:4c:53:f2:2d:20:dd:71:dc:8a:af:fe:95: 7d:75:c7:87:00:96:02:13:d0:6d:99:0b:a8:64:4b:69:84:55: a5:80:b2:bf:a3:60:46:78:ea:d5:56:d4:c7:03:55:85:58:ae: 2a:3e:56:f9:2f:86:40:ae:57:9e:39:56:74:58:65:79:ad:2f: 07:c5:ae:49:24:31:b4:66:9b:11:14:c8:d5:bf:c4:b0:f9:1b: 26:c6:af:b1:69:fd:12:f3:18:ac:c3:f7:34:96:d9:4e:85:e4: 1a:55:a6:b6:c5:e7:7d:92:49:fb:58:6c:e2:1b:3d:b0:41:73: 5b:96:e2:db:a1:79:84:81:27:67:d9:5a:95:95:b3:14:c9:3e: 46:14:03:1a:bf:2d:41:1a:38:fe:20:69:4f:9a:90:7b:99:e2: bd:a5:25:fe:5e:63:06:fc:be:d8:1a:39:79:2c:5d:e5:79:6c: 09:5e:f6:67:7b:66:ba:f7:70:82:3f:91:1d:30:d4:ea:47:8e: 56:50:af:8a:71:e5:c5:b8:62:2c:2b:44:4d:33:1f:b0:1f:de: 97:d9:d5:e8:e2:82:e3:ad:ee:4c:3c:96:6d:0d:a6:be:24:c6: 84:55:5f:ca -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUP09GtRAbSjFp4vlK3j+scJ5cywAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MDkyMTAyMzZaFw0yNjA1MTEwMDU1MzZaMDMxMTAvBgNV BAMTKDFCOUM2NjgwRjJGNTU1RTNDMzY5OTJENTY2RUY5NTg1NUY0MTg5MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7VP8WDNuBSj/OUCma9KYQINtY SGKMWGPwcZKaQjvKllF9DwDoRD9eCGjDp2WBv4uAkpgAwmG84apcI2CX6ntTXApJ oDZR7fm1i2eeJPGT/KUi84pWW8ujDZYbaFGvW6OR6XJrICGz0RaGfYCPWxwf/OnG FMOSA3NTmI0woTu9+sBE2EscC6CCxe14cWpfZjlLTXaVNu0bpJE/NJblGvZIU+Er SR6Ri3SRmv6skD/5sHUq2HjQdxOLkWGh1whNx0VuBXX4swVmK3V07XZdQ2cx44ED RTawWc5JCcgwwtVYJ2nRNPq027wjpwurDVZj2ePvkaCNzAD3+cisR1pRUnUJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUG5xmgPL1VePDaZLVZu+VhV9BiQcwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElthhnrRMG4HwIA4ZBib Yojd4PqbAJJJTFPyLSDdcdyKr/6VfXXHhwCWAhPQbZkLqGRLaYRVpYCyv6NgRnjq 1VbUxwNVhViuKj5W+S+GQK5XnjlWdFhlea0vB8WuSSQxtGabERTI1b/EsPkbJsav sWn9EvMYrMP3NJbZToXkGlWmtsXnfZJJ+1hs4hs9sEFzW5bi26F5hIEnZ9lalZWz FMk+RhQDGr8tQRo4/iBpT5qQe5nivaUl/l5jBvy+2Bo5eSxd5XlsCV72Z3tmuvdw gj+RHTDU6keOVlCvinHlxbhiLCtETTMfsB/el9nV6OKC463uTDyWbQ2mviTGhFVf yg== -----END CERTIFICATE-----Generated at Sun May 10 11:08:42 2026 by rpki-client