$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 4NHVdlIhz0RcR49KM16N9EmrdwLLIPp5OZyL+sYI53w= Subject key identifier: 65:D8:3F:3D:C0:D2:03:7A:69:9F:FA:19:64:C1:D3:54:87:34:B8:74 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 3B0A2B1840D38E440A794B697A7066A2547C60AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04BC Signing time: Wed 22 Apr 2026 21:26:12 +0000 Manifest this update: Wed 22 Apr 2026 21:21:12 +0000 Manifest next update: Thu 23 Apr 2026 21:32:12 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: dqnUTOY4vcbG0AnAD4SSBeKBftEUaDjairZnergdLc4=) 7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Apr 2026 21:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:0a:2b:18:40:d3:8e:44:0a:79:4b:69:7a:70:66:a2:54:7c:60:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 22 21:21:12 2026 GMT Not After : Apr 23 21:32:12 2026 GMT Subject: CN=65D83F3DC0D2037A699FFA1964C1D3548734B874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:bb:4b:8b:49:1e:09:34:cf:74:e4:66:22:e1: e4:4b:79:4b:ce:b8:bc:e9:f4:34:f3:9b:ca:58:42: d0:da:2e:1c:40:13:b6:92:10:bf:1b:4b:b7:f3:ec: 38:e3:ac:67:97:7d:09:01:be:03:95:a0:b7:3c:b0: 8a:c3:20:c6:6e:5d:52:d8:eb:73:bb:e1:fc:13:be: 43:dc:b2:5c:2a:e4:1b:a5:79:a2:20:06:f9:45:35: 27:80:4d:b7:91:26:9f:9f:63:4b:f4:62:37:cd:3e: d3:40:5f:34:b8:1e:43:f7:ea:c7:5b:26:1a:94:b9: c9:15:a4:d8:86:13:98:f7:e3:2a:94:22:82:76:bb: f5:db:a8:8f:81:a7:0e:82:80:f6:57:e7:95:91:c3: 3e:d8:4c:ba:64:a1:73:3d:b8:9f:d3:2e:4b:b7:f1: 55:c6:df:08:dd:1e:be:f5:5e:4a:f0:2d:49:b8:c3: 51:3c:32:cd:91:a6:80:26:0b:41:da:01:16:f7:98: db:0b:94:6f:8b:64:07:2f:e9:2e:80:1e:1f:ae:2a: 00:08:5c:76:ba:a8:1c:3c:2f:68:de:fb:96:a2:25: 0a:61:d5:ca:6b:81:eb:69:9e:76:9c:86:68:bc:7f: 31:ff:47:ca:dc:b3:07:04:66:9b:bd:d4:27:91:f1: 93:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D8:3F:3D:C0:D2:03:7A:69:9F:FA:19:64:C1:D3:54:87:34:B8:74 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:e5:fe:50:34:27:68:a8:98:f4:0a:bf:ed:1c:84:19:20:61: 44:56:cd:b5:70:89:25:4d:8b:8f:08:e1:c8:db:86:c8:36:90: cf:6d:a8:2b:83:75:8d:08:40:b2:db:9c:19:f7:cb:01:70:02: 64:f4:eb:61:d1:0c:4b:c2:68:92:63:4b:11:53:45:68:78:2d: 75:b0:41:1e:75:f3:80:21:47:e4:ce:48:53:76:62:ac:d6:88: f5:82:bf:bc:44:2d:74:57:46:6e:da:21:5b:75:ad:5d:b0:60: 25:6f:f9:23:54:da:38:e4:41:aa:99:37:28:90:fd:c9:5f:03: bb:87:1b:f2:57:fc:e6:97:77:7a:46:13:d8:8e:c7:c9:7a:f3: ac:94:df:6f:e8:ac:2c:29:5e:0a:1b:d1:64:d3:32:cb:3c:f2: 2b:ff:63:8b:7c:c1:ad:97:d0:80:5f:0a:9c:2f:8b:02:ea:b7: b7:c1:18:db:96:aa:e9:23:4e:1c:06:39:db:5f:3b:c0:18:70: e7:af:76:d6:d8:2d:83:79:d5:5b:0d:7a:82:96:d6:bf:76:b2: 21:25:5f:a9:97:50:6c:32:bd:9f:cd:19:91:85:4f:32:82:d2: a8:63:23:8c:73:8b:71:da:be:4b:12:93:e3:d7:f0:5d:37:a5: 55:26:a9:35 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOworGEDTjkQKeUtpenBmolR8YK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA0MjIyMTIxMTJaFw0yNjA0MjMyMTMyMTJaMDMxMTAvBgNV BAMTKDY1RDgzRjNEQzBEMjAzN0E2OTlGRkExOTY0QzFEMzU0ODczNEI4NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDou0uLSR4JNM905GYi4eRLeUvO uLzp9DTzm8pYQtDaLhxAE7aSEL8bS7fz7DjjrGeXfQkBvgOVoLc8sIrDIMZuXVLY 63O74fwTvkPcslwq5BuleaIgBvlFNSeATbeRJp+fY0v0YjfNPtNAXzS4HkP36sdb JhqUuckVpNiGE5j34yqUIoJ2u/XbqI+Bpw6CgPZX55WRwz7YTLpkoXM9uJ/TLku3 8VXG3wjdHr71XkrwLUm4w1E8Ms2RpoAmC0HaARb3mNsLlG+LZAcv6S6AHh+uKgAI XHa6qBw8L2je+5aiJQph1cprgetpnnachmi8fzH/R8rcswcEZpu91CeR8ZMNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUZdg/PcDSA3ppn/oZZMHTVIc0uHQwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZeX+UDQnaKiY9Aq/7RyE GSBhRFbNtXCJJU2LjwjhyNuGyDaQz22oK4N1jQhAstucGffLAXACZPTrYdEMS8Jo kmNLEVNFaHgtdbBBHnXzgCFH5M5IU3ZirNaI9YK/vEQtdFdGbtohW3WtXbBgJW/5 I1TaOORBqpk3KJD9yV8Du4cb8lf85pd3ekYT2I7HyXrzrJTfb+isLCleChvRZNMy yzzyK/9ji3zBrZfQgF8KnC+LAuq3t8EY25aq6SNOHAY52187wBhw56921tgtg3nV Ww16gpbWv3ayISVfqZdQbDK9n80ZkYVPMoLSqGMjjHOLcdq+SxKT49fwXTelVSap NQ== -----END CERTIFICATE-----Generated at Thu Apr 23 08:54:23 2026 by rpki-client