$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: b9MEk/7+voeR8iYdpK1IrGxI6B0WsfQZO5fIBTdgPdI= Subject key identifier: B1:04:D2:D6:66:7C:6B:2E:C9:71:94:1E:99:20:AF:86:A0:01:D5:60 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 5A65BA94AAD92A538F9B289790C7B352DE2450B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04FC Signing time: Tue 09 Jun 2026 20:15:52 +0000 Manifest this update: Tue 09 Jun 2026 20:10:52 +0000 Manifest next update: Wed 10 Jun 2026 22:35:52 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: FDK52xAiASKUaXG1Run8+xl/5yP6IKW7GxTrfuya8Go=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Jun 2026 20:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:65:ba:94:aa:d9:2a:53:8f:9b:28:97:90:c7:b3:52:de:24:50:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 9 20:10:52 2026 GMT Not After : Jun 10 22:35:52 2026 GMT Subject: CN=B104D2D6667C6B2EC971941E9920AF86A001D560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1d:0a:af:bd:c7:da:7f:07:6a:84:30:01:ed: 78:2a:a9:0f:a4:ff:e8:5b:6e:73:69:a6:17:22:fa: 2c:0f:05:a2:3d:13:b9:72:f1:87:32:ce:7c:8e:6f: 71:15:6b:93:1e:cd:2c:97:83:a2:2a:5f:10:a8:86: 3e:ad:3a:f0:74:0e:a2:d5:d9:11:f7:7a:6e:a1:2c: a5:de:58:2d:7f:4c:dd:2a:38:bd:a0:30:eb:fc:3d: 44:d8:18:3c:36:c1:24:db:d0:20:0d:0f:19:1c:e9: db:ca:e9:1e:e3:ad:26:fc:87:63:00:04:e5:e7:c5: df:4e:59:4f:33:25:92:2a:70:21:4a:33:9d:63:b2: 16:5d:23:17:48:4a:cf:0a:c3:09:cc:d7:9a:c3:12: e4:ad:90:b9:54:cd:e7:e9:a1:60:77:63:bf:9a:19: 34:67:d9:5b:92:2a:6b:ad:72:c0:57:c9:9f:07:3f: 7c:17:c0:f3:d7:31:97:f6:5e:3f:08:1b:6b:a8:67: 53:0f:29:e7:8a:9e:78:e8:06:05:d9:e1:61:e0:f6: 05:2a:df:de:c5:3c:cd:53:4e:40:71:94:c9:92:67: 37:44:cb:e6:a6:62:b8:58:13:86:eb:fd:28:2c:a4: d3:ea:8c:5e:e5:3f:a0:51:70:66:76:3f:81:31:d8: 9d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:04:D2:D6:66:7C:6B:2E:C9:71:94:1E:99:20:AF:86:A0:01:D5:60 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:d6:e2:4f:c9:3e:ab:14:5a:c9:8e:89:f3:40:53:36:9e:02: cd:d0:77:f3:08:ed:d3:54:c2:12:cd:74:71:1d:32:d4:f5:00: 55:00:1c:6f:89:15:91:4b:34:f5:c9:df:59:89:c8:f4:3e:04: 1f:6a:72:5f:63:c6:0a:93:5d:79:e8:2c:b4:42:9c:3a:94:27: 5e:aa:7b:6c:50:d6:36:78:d5:c9:19:66:52:a1:81:e5:f6:4d: 5d:fd:c8:dc:aa:ab:ce:57:9d:9a:bb:ff:b2:cf:4b:d5:33:52: e4:be:6d:9c:50:7d:46:7a:85:7a:12:4e:e4:cd:0c:cb:b7:f9: 32:6f:96:ae:a6:1a:cd:5c:b2:27:ed:ce:c0:2c:fb:bb:de:0f: 06:98:a5:7c:1a:bd:70:40:cb:62:84:f8:34:67:5e:a9:54:82: 78:b1:02:66:4c:40:59:a4:36:a7:44:53:7f:54:ff:fc:08:1d: 9e:66:c9:82:c3:de:58:89:56:67:24:62:8d:d8:f5:9d:e5:dc: 72:41:d9:2a:9d:67:6b:f0:a5:ff:61:e0:0d:5c:89:4f:a9:c4: 0d:8d:4f:c4:14:25:24:ca:73:ba:fb:61:18:91:be:91:a8:24: 53:ce:8d:50:20:1b:79:15:87:fe:3b:fc:b4:0a:62:9e:2a:0a: 1e:aa:36:5e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWmW6lKrZKlOPmyiXkMezUt4kULIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MDkyMDEwNTJaFw0yNjA2MTAyMjM1NTJaMDMxMTAvBgNV BAMTKEIxMDREMkQ2NjY3QzZCMkVDOTcxOTQxRTk5MjBBRjg2QTAwMUQ1NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPHQqvvcfafwdqhDAB7XgqqQ+k /+hbbnNpphci+iwPBaI9E7ly8YcyznyOb3EVa5MezSyXg6IqXxCohj6tOvB0DqLV 2RH3em6hLKXeWC1/TN0qOL2gMOv8PUTYGDw2wSTb0CANDxkc6dvK6R7jrSb8h2MA BOXnxd9OWU8zJZIqcCFKM51jshZdIxdISs8KwwnM15rDEuStkLlUzefpoWB3Y7+a GTRn2VuSKmutcsBXyZ8HP3wXwPPXMZf2Xj8IG2uoZ1MPKeeKnnjoBgXZ4WHg9gUq 397FPM1TTkBxlMmSZzdEy+amYrhYE4br/SgspNPqjF7lP6BRcGZ2P4Ex2J2DAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUsQTS1mZ8ay7JcZQemSCvhqAB1WAwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNbiT8k+qxRayY6J80BT Np4CzdB38wjt01TCEs10cR0y1PUAVQAcb4kVkUs09cnfWYnI9D4EH2pyX2PGCpNd eegstEKcOpQnXqp7bFDWNnjVyRlmUqGB5fZNXf3I3Kqrzledmrv/ss9L1TNS5L5t nFB9RnqFehJO5M0My7f5Mm+WrqYazVyyJ+3OwCz7u94PBpilfBq9cEDLYoT4NGde qVSCeLECZkxAWaQ2p0RTf1T//AgdnmbJgsPeWIlWZyRijdj1neXcckHZKp1na/Cl /2HgDVyJT6nEDY1PxBQlJMpzuvthGJG+kagkU86NUCAbeRWH/jv8tApinioKHqo2 Xg== -----END CERTIFICATE-----Generated at Wed Jun 10 03:25:38 2026 by rpki-client