$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: My9u+JVTHV76aqUyHQE6hMgPwSTzpv7i4RJFDEYCl2k= Subject key identifier: BD:9C:C0:07:68:D0:A8:D0:CB:CC:9B:55:D5:6B:5F:1A:0C:BB:67:D6 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 5E9D614188DFA40D8FA893C8819A199048EA617F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 054C Signing time: Sun 09 Aug 2026 18:05:48 +0000 Manifest this update: Sun 09 Aug 2026 18:00:48 +0000 Manifest next update: Mon 10 Aug 2026 21:33:48 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 1p2JdEFZ637QqYF9nJAdlSFVxT5TCzi8aV2z1SS6wJE=) 3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 10 Aug 2026 21:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:9d:61:41:88:df:a4:0d:8f:a8:93:c8:81:9a:19:90:48:ea:61:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 9 18:00:48 2026 GMT Not After : Aug 10 21:33:48 2026 GMT Subject: CN=BD9CC00768D0A8D0CBCC9B55D56B5F1A0CBB67D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2f:78:c8:af:50:83:9e:f3:38:fe:9c:36:19: c3:0a:e8:b1:24:a9:ce:ef:17:b0:08:f5:1f:23:a3: dc:02:0a:b3:e2:b9:74:64:ab:4d:ae:99:f5:35:99: 28:de:bb:58:06:3c:6c:d8:15:7e:21:49:83:7c:55: 86:6f:56:57:a0:a6:88:60:0f:d6:3b:1d:e5:6c:3a: cd:8e:32:43:c1:f5:09:7c:52:fd:0e:1a:5c:8b:02: cc:12:75:61:29:cc:4b:0f:a9:fc:d8:82:ec:8b:71: a0:e0:60:f6:3d:79:34:40:45:4e:0f:50:b7:f1:d8: 39:4f:a7:7b:14:7e:c2:cb:db:6c:d5:a2:7b:b9:3d: 0f:b2:a2:48:e8:7a:0b:38:3c:4b:15:b2:e2:51:f6: 43:bf:3b:93:df:0d:f2:8e:90:9b:25:d2:2e:19:d0: 97:45:21:03:57:67:25:87:f5:20:3d:be:e3:3b:a0: 7c:03:21:55:11:3e:cb:db:0a:cb:af:c4:4c:4e:b8: 17:9e:f4:7b:7b:3e:ae:26:48:7f:e5:a4:c0:dd:c0: b6:83:a7:af:a3:b0:2e:d8:16:57:15:6f:69:cc:1d: a0:cd:e8:e1:f4:ce:08:56:7f:93:ba:50:35:a2:ca: 91:c4:2a:1f:d1:42:39:a4:65:66:83:e7:6c:ee:40: 99:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9C:C0:07:68:D0:A8:D0:CB:CC:9B:55:D5:6B:5F:1A:0C:BB:67:D6 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:42:99:ec:e9:36:5b:19:78:6e:4d:bc:99:ac:9d:33:e8:66: dd:a4:d7:14:f3:67:03:e2:2c:dd:e0:be:85:d0:89:6a:f1:08: 75:00:fd:c9:fc:92:e9:f4:86:d1:16:08:b7:f3:bb:f9:54:75: 77:75:4d:0c:35:8e:ee:f2:54:bd:ed:9f:a9:09:f2:94:59:b6: 04:f6:8d:45:a6:5a:f3:03:ac:0d:b6:e7:99:22:5d:12:f1:ee: 92:4f:93:b2:20:49:0c:1f:0a:78:68:d4:20:20:e0:9f:10:3a: 71:ed:3a:4f:31:41:1f:a2:e7:be:8b:cf:d3:04:bb:71:bc:0b: 13:de:de:86:59:f1:8b:9e:7f:d0:cf:12:70:a6:5f:d9:43:b3: 44:7b:b8:75:47:0a:f9:45:bd:75:47:35:c0:af:31:68:b5:a4: 2a:15:dd:c3:4c:9d:2a:bb:c1:d6:bf:b1:4a:90:88:7e:43:ee: 1a:ab:6c:66:1a:28:18:a9:69:ab:57:57:99:fd:49:64:ca:5f: 1a:6d:01:41:79:58:9d:15:33:2a:f0:2a:64:64:01:a3:ca:db: 9e:d5:18:d7:69:b2:5a:5f:49:e4:f0:78:ff:02:bb:de:b2:15: f8:07:9e:58:57:4a:e5:04:63:f7:ce:15:fd:79:20:bc:a1:e6: 00:ef:cd:98 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXp1hQYjfpA2PqJPIgZoZkEjqYX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MDkxODAwNDhaFw0yNjA4MTAyMTMzNDhaMDMxMTAvBgNV BAMTKEJEOUNDMDA3NjhEMEE4RDBDQkNDOUI1NUQ1NkI1RjFBMENCQjY3RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcL3jIr1CDnvM4/pw2GcMK6LEk qc7vF7AI9R8jo9wCCrPiuXRkq02umfU1mSjeu1gGPGzYFX4hSYN8VYZvVlegpohg D9Y7HeVsOs2OMkPB9Ql8Uv0OGlyLAswSdWEpzEsPqfzYguyLcaDgYPY9eTRARU4P ULfx2DlPp3sUfsLL22zVonu5PQ+yokjoegs4PEsVsuJR9kO/O5PfDfKOkJsl0i4Z 0JdFIQNXZyWH9SA9vuM7oHwDIVURPsvbCsuvxExOuBee9Ht7Pq4mSH/lpMDdwLaD p6+jsC7YFlcVb2nMHaDN6OH0zghWf5O6UDWiypHEKh/RQjmkZWaD52zuQJmHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvZzAB2jQqNDLzJtV1WtfGgy7Z9YwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUKZ7Ok2Wxl4bk28mayd M+hm3aTXFPNnA+Is3eC+hdCJavEIdQD9yfyS6fSG0RYIt/O7+VR1d3VNDDWO7vJU ve2fqQnylFm2BPaNRaZa8wOsDbbnmSJdEvHukk+TsiBJDB8KeGjUICDgnxA6ce06 TzFBH6LnvovP0wS7cbwLE97ehlnxi55/0M8ScKZf2UOzRHu4dUcK+UW9dUc1wK8x aLWkKhXdw0ydKrvB1r+xSpCIfkPuGqtsZhooGKlpq1dXmf1JZMpfGm0BQXlYnRUz KvAqZGQBo8rbntUY12myWl9J5PB4/wK73rIV+AeeWFdK5QRj984V/XkgvKHmAO/N mA== -----END CERTIFICATE-----Generated at Mon Aug 10 11:56:11 2026 by rpki-client