$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: n+rBYDE8Bfq0KvkS1qRQubK9DxHhUrTkA2iHaI/zR6I= Subject key identifier: E5:50:4B:C9:45:43:BF:4D:B9:44:D4:7C:3C:65:09:9D:BF:BC:B7:54 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 32E0E8E63C5F7E2AACBD3A1FDB0BD1CB03236DF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04AF Signing time: Sun 12 Apr 2026 23:58:44 +0000 Manifest this update: Sun 12 Apr 2026 23:53:44 +0000 Manifest next update: Tue 14 Apr 2026 00:26:44 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: YQ+UnFDgQfJTQK+znP8ZEXq/jWwGEawKBEUq7R+gs/8=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 14 Apr 2026 00:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e0:e8:e6:3c:5f:7e:2a:ac:bd:3a:1f:db:0b:d1:cb:03:23:6d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 12 23:53:44 2026 GMT Not After : Apr 14 00:26:44 2026 GMT Subject: CN=E5504BC94543BF4DB944D47C3C65099DBFBCB754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a4:72:7a:b3:7e:20:56:28:05:0c:4a:2b:0e: 7f:90:47:5b:22:9b:38:15:42:55:83:39:30:a0:c9: 9b:1f:08:51:33:bb:42:58:18:d0:60:22:66:10:4f: 1b:3d:c0:1c:d9:aa:02:e0:c4:4c:23:6a:b1:71:ea: 10:d8:de:3c:3a:56:85:6e:cb:fb:b0:07:cf:c9:a2: 00:59:c2:62:ed:c8:35:49:55:c3:77:61:b7:bf:cf: 9e:20:4d:86:cf:46:30:94:20:7c:99:c4:f6:79:a7: 40:5f:85:cc:ec:af:a2:cf:6e:a5:b0:bb:bb:72:9a: 6b:0c:8d:26:38:5e:e1:ee:40:58:23:bc:1f:a3:6c: 49:05:33:5e:25:0a:bf:cd:28:5a:e0:75:62:54:60: b3:ea:c7:8e:c9:15:71:0f:f7:1d:f9:01:82:c6:5e: 0b:55:14:76:33:7c:b0:dd:26:3e:a3:2c:5c:92:82: 79:65:bb:47:8a:66:6f:0f:4a:00:19:94:fb:86:c4: ba:04:af:b3:e1:be:b5:dd:de:3f:e9:49:60:0f:20: 18:81:75:48:d1:69:87:08:0c:17:af:3d:ed:2c:91: 2b:25:2f:66:ad:dc:f7:de:ee:ca:0d:02:86:df:41: bb:d1:f0:5e:14:e9:07:ec:f2:12:b1:7c:ba:e1:fd: 1c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:50:4B:C9:45:43:BF:4D:B9:44:D4:7C:3C:65:09:9D:BF:BC:B7:54 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:be:da:d6:0d:88:4a:15:c1:29:ba:49:ca:a6:5b:2c:09:90: 86:c0:cd:f0:b7:53:c6:42:33:6f:95:fc:a6:96:da:17:c6:a6: 44:96:e6:3d:79:8e:b9:9f:7d:28:bc:44:fc:76:03:9d:fb:94: d0:fd:0e:48:b7:78:5a:13:94:67:47:94:80:b4:9a:7b:75:b6: 47:07:fd:e0:b1:56:9f:cb:15:da:47:64:aa:75:32:bb:02:48: a5:99:7e:df:d8:31:33:24:91:4a:79:13:39:3c:2a:8d:7a:0b: 60:37:fa:9c:45:6b:7d:c3:e1:b0:35:71:1a:0d:b1:57:61:2e: cb:3a:1b:97:26:59:54:38:3c:89:21:10:ed:01:37:f7:46:bb: e4:8e:f4:63:ea:da:67:69:05:2a:9c:30:c3:b0:39:28:fe:96: 49:3f:96:68:63:38:8f:44:d3:d5:90:9b:02:94:ed:d1:8d:b1: 85:21:63:86:be:62:6e:0b:00:4e:41:f4:04:10:c7:20:b8:3e: 2f:da:b6:18:60:31:0f:eb:5e:ca:e6:12:db:af:8c:e4:b7:b2: db:0a:e1:1a:af:bc:ab:76:27:9e:3c:15:ad:f4:11:bd:3e:11: 3e:81:9b:fe:c9:e1:85:b2:15:77:da:6a:f1:99:fc:11:b1:3b: 3e:b7:5d:fc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMuDo5jxffiqsvTof2wvRywMjbfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA0MTIyMzUzNDRaFw0yNjA0MTQwMDI2NDRaMDMxMTAvBgNV BAMTKEU1NTA0QkM5NDU0M0JGNERCOTQ0RDQ3QzNDNjUwOTlEQkZCQ0I3NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTpHJ6s34gVigFDEorDn+QR1si mzgVQlWDOTCgyZsfCFEzu0JYGNBgImYQTxs9wBzZqgLgxEwjarFx6hDY3jw6VoVu y/uwB8/JogBZwmLtyDVJVcN3Ybe/z54gTYbPRjCUIHyZxPZ5p0Bfhczsr6LPbqWw u7tymmsMjSY4XuHuQFgjvB+jbEkFM14lCr/NKFrgdWJUYLPqx47JFXEP9x35AYLG XgtVFHYzfLDdJj6jLFySgnllu0eKZm8PSgAZlPuGxLoEr7PhvrXd3j/pSWAPIBiB dUjRaYcIDBevPe0skSslL2at3Pfe7soNAobfQbvR8F4U6Qfs8hKxfLrh/Rz9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5VBLyUVDv025RNR8PGUJnb+8t1QwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQb7a1g2IShXBKbpJyqZb LAmQhsDN8LdTxkIzb5X8ppbaF8amRJbmPXmOuZ99KLxE/HYDnfuU0P0OSLd4WhOU Z0eUgLSae3W2Rwf94LFWn8sV2kdkqnUyuwJIpZl+39gxMySRSnkTOTwqjXoLYDf6 nEVrfcPhsDVxGg2xV2EuyzoblyZZVDg8iSEQ7QE390a75I70Y+raZ2kFKpwww7A5 KP6WST+WaGM4j0TT1ZCbApTt0Y2xhSFjhr5ibgsATkH0BBDHILg+L9q2GGAxD+te yuYS26+M5Ley2wrhGq+8q3YnnjwVrfQRvT4RPoGb/snhhbIVd9pq8Zn8EbE7Prdd /A== -----END CERTIFICATE-----Generated at Mon Apr 13 17:34:11 2026 by rpki-client