$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: AduF8xRZXo3Ja632oM91JJePpbhxHS51Bwz110P7I1E= Subject key identifier: B9:89:BD:2E:F0:57:4D:CE:0B:3A:FF:3B:30:D7:E8:17:D9:AE:93:98 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 3AA901D233D7AA98898F6E916FC58ADD4D1FC2C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04F9 Signing time: Sun 07 Jun 2026 12:24:44 +0000 Manifest this update: Sun 07 Jun 2026 12:19:44 +0000 Manifest next update: Mon 08 Jun 2026 15:56:44 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: T/TQ9dHnbB2m75bpREzFabUdLQofuwQWuICsD9+VNmw=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Jun 2026 15:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a9:01:d2:33:d7:aa:98:89:8f:6e:91:6f:c5:8a:dd:4d:1f:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 7 12:19:44 2026 GMT Not After : Jun 8 15:56:44 2026 GMT Subject: CN=B989BD2EF0574DCE0B3AFF3B30D7E817D9AE9398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fd:91:de:5c:da:1e:9c:e8:9e:2c:b8:8d:e5: 19:bf:6c:85:60:4f:4f:1b:16:7f:d2:3e:f3:11:e8: bf:e9:bf:7c:1f:c5:eb:15:db:13:dd:92:77:8f:74: c4:e1:48:97:88:85:84:98:66:82:b9:71:69:8a:d6: e3:52:cd:d7:ac:bd:c1:d6:73:98:8b:a0:95:2e:fe: a2:a2:c5:be:bd:ad:d3:f4:b1:d6:cd:0d:6a:8e:3d: 61:61:43:85:03:6f:9e:69:42:b2:cf:51:ac:2c:48: 1f:4d:22:82:24:75:c2:59:f9:96:ed:25:10:fc:64: e9:74:9d:71:89:9a:c2:50:67:68:c1:b1:34:a0:79: f6:3a:89:4a:1c:d5:f1:c5:17:86:e3:51:4b:43:54: 50:e4:2f:3d:d1:d6:01:39:da:06:57:25:25:4f:be: 1b:ba:67:dd:e2:ac:7f:5b:3e:29:f2:eb:c0:e0:ca: 2d:78:d0:ed:17:3d:b6:9d:a2:e0:a9:ec:97:e8:4d: 61:e3:b6:aa:e2:34:e2:13:b9:bc:3e:7a:70:e1:3a: 0d:1e:1e:53:bc:ac:30:89:26:21:0e:9f:27:57:db: 55:02:96:7a:46:1b:21:57:c4:1c:9b:5e:0b:53:87: 89:34:c5:95:05:a2:90:b4:c6:e1:96:86:8f:28:9a: 7a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:89:BD:2E:F0:57:4D:CE:0B:3A:FF:3B:30:D7:E8:17:D9:AE:93:98 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:5f:e2:c3:7d:d6:56:26:36:35:40:c8:0f:98:88:4f:08:eb: 7f:b4:3d:da:b8:2d:87:2f:6d:a0:76:00:f8:4e:27:19:ee:25: dd:f4:f1:ef:5b:10:ce:61:ae:26:a8:b9:17:7e:7b:dc:b2:ed: 71:8d:05:a6:34:23:2e:55:54:24:c4:b9:67:43:5e:97:78:1f: 74:00:d0:e1:1a:59:bf:04:76:c4:87:81:3d:5d:ce:61:16:d3: 70:12:19:18:93:79:90:08:44:61:2f:17:51:e1:76:28:b1:7f: de:29:e3:c0:5a:d7:33:b6:d8:c6:b1:78:da:fa:9c:8f:81:ed: 57:ca:9d:cb:06:77:9e:dd:0e:56:0c:56:f2:67:20:da:50:09: f1:37:e0:0c:c0:b0:a5:7e:ab:a3:6b:d3:51:ce:96:bc:ae:72: ef:0d:0f:19:01:3c:a7:80:24:3f:50:a4:9f:5f:1f:db:3f:1e: 1a:af:82:89:43:86:3f:6c:09:e7:81:0f:da:5b:15:88:a8:0b: 2a:b6:6c:cd:92:ce:a6:cb:b8:3d:74:5d:a7:3a:27:2b:7c:73: ab:10:9f:8e:cf:b4:84:32:c7:57:f5:9d:6a:6a:61:e8:b7:cf: 73:e9:f1:15:5f:80:96:2a:36:ef:e9:d3:21:e8:5e:f8:cc:d0: 7f:25:c7:0a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOqkB0jPXqpiJj26Rb8WK3U0fwsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MDcxMjE5NDRaFw0yNjA2MDgxNTU2NDRaMDMxMTAvBgNV BAMTKEI5ODlCRDJFRjA1NzREQ0UwQjNBRkYzQjMwRDdFODE3RDlBRTkzOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/ZHeXNoenOieLLiN5Rm/bIVg T08bFn/SPvMR6L/pv3wfxesV2xPdknePdMThSJeIhYSYZoK5cWmK1uNSzdesvcHW c5iLoJUu/qKixb69rdP0sdbNDWqOPWFhQ4UDb55pQrLPUawsSB9NIoIkdcJZ+Zbt JRD8ZOl0nXGJmsJQZ2jBsTSgefY6iUoc1fHFF4bjUUtDVFDkLz3R1gE52gZXJSVP vhu6Z93irH9bPiny68Dgyi140O0XPbadouCp7JfoTWHjtqriNOITubw+enDhOg0e HlO8rDCJJiEOnydX21UClnpGGyFXxBybXgtTh4k0xZUFopC0xuGWho8omnrXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUuYm9LvBXTc4LOv87MNfoF9muk5gwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIV/iw33WViY2NUDID5iI Twjrf7Q92rgthy9toHYA+E4nGe4l3fTx71sQzmGuJqi5F3573LLtcY0FpjQjLlVU JMS5Z0Nel3gfdADQ4RpZvwR2xIeBPV3OYRbTcBIZGJN5kAhEYS8XUeF2KLF/3inj wFrXM7bYxrF42vqcj4HtV8qdywZ3nt0OVgxW8mcg2lAJ8TfgDMCwpX6ro2vTUc6W vK5y7w0PGQE8p4AkP1Ckn18f2z8eGq+CiUOGP2wJ54EP2lsViKgLKrZszZLOpsu4 PXRdpzonK3xzqxCfjs+0hDLHV/Wdamph6LfPc+nxFV+Alio27+nTIehe+MzQfyXH Cg== -----END CERTIFICATE-----Generated at Mon Jun 8 03:03:20 2026 by rpki-client