$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: ma+Zl9p+dV+RChmrlmKmJLLnuXm+wKS8G+608iLlNog= Subject key identifier: 48:28:A4:BF:CF:1D:C3:2D:D4:40:B7:B9:14:55:D4:64:57:1D:A7:95 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 3ED715872290086B1E92531E5BF21DE8023A4AF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04BF Signing time: Fri 24 Apr 2026 23:41:15 +0000 Manifest this update: Fri 24 Apr 2026 23:36:15 +0000 Manifest next update: Sun 26 Apr 2026 02:00:15 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: KHx5UFr5jODde2EqVeJhgARNdvFMUuzoaSKQ3GS5PBQ=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Apr 2026 02:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:d7:15:87:22:90:08:6b:1e:92:53:1e:5b:f2:1d:e8:02:3a:4a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 24 23:36:15 2026 GMT Not After : Apr 26 02:00:15 2026 GMT Subject: CN=4828A4BFCF1DC32DD440B7B91455D464571DA795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e9:17:10:0c:9a:64:99:23:28:39:f8:9d:54: 25:9e:4f:12:c4:3b:39:d0:59:6b:53:eb:10:1e:64: 97:34:25:cc:98:0e:d9:d9:e3:27:b1:34:14:47:20: 06:38:fc:3c:7a:72:f2:d9:4e:26:91:f5:96:af:4d: f8:56:61:c9:e5:ad:f7:ab:5e:27:81:a4:27:3a:33: e2:13:94:0a:03:3e:f0:37:c6:6d:9f:71:52:5c:9e: a2:71:e5:63:5c:26:9d:ec:e1:71:45:1c:35:60:75: e2:ec:ba:0d:90:2e:51:17:f0:df:01:c8:11:09:c1: c1:cd:e1:ef:f4:52:ab:a4:cb:da:97:ad:e6:9b:55: 75:b3:16:36:93:99:8e:6c:68:aa:26:5b:da:e2:cc: b9:65:af:b7:06:26:83:2e:d0:6b:db:fa:da:83:af: 41:b9:6e:15:34:c2:28:3f:32:3c:f2:01:8b:8c:4a: a2:52:af:5a:77:56:db:8f:9d:0b:4b:26:01:b6:1c: 30:81:f7:6d:b1:36:fe:4a:d8:8b:55:03:a7:3f:2e: 06:e2:30:af:38:e1:48:71:37:79:37:0f:1d:63:c9: 0d:b4:86:97:06:d3:ac:d9:c3:3d:95:42:2a:39:a5: 23:e3:dd:23:30:62:6b:22:bd:ba:8e:06:f1:54:74: 01:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:28:A4:BF:CF:1D:C3:2D:D4:40:B7:B9:14:55:D4:64:57:1D:A7:95 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:58:cb:21:a0:4f:c6:ef:5c:9d:38:5f:85:7b:36:8d:22:2b: c9:42:b2:8a:8a:2d:4a:15:5e:1f:ec:23:1f:28:cf:45:ff:eb: 00:87:7d:18:ef:fb:3c:3d:68:d2:ae:e8:a1:67:f0:9d:5c:20: f7:06:01:71:d2:01:e2:1b:10:1f:6b:94:c5:5d:c2:10:78:67: 96:86:92:2e:a3:41:f7:79:46:9a:d3:d4:48:5a:97:f6:47:f5: 00:9c:f3:c6:9e:ce:78:93:fd:9b:45:75:b0:1b:2c:1e:a4:33: 8c:6c:c5:08:51:dc:c6:36:4d:fe:9f:f7:7a:cc:9f:f2:8f:11: 4c:34:fe:a4:6a:7b:d7:3f:1a:25:39:f2:11:5c:92:23:1a:bb: c5:bb:4b:e9:89:ce:e0:38:c3:d3:2a:61:54:1d:40:91:1e:10: 3e:20:e5:c1:32:fc:f7:f9:64:79:d9:f0:9c:2e:93:1c:95:0b: 93:4d:2f:19:d2:6b:9f:d9:cb:23:8f:30:ea:6e:75:21:47:12: 52:60:81:3f:03:bc:87:9e:b1:c7:39:eb:45:e1:79:99:fa:3e: b0:ce:84:bb:8f:a2:53:2c:d1:c0:d5:b1:64:be:0c:e8:0b:9e: ae:5f:dd:43:bb:9c:c0:97:a5:17:05:32:b4:6a:ef:aa:27:5d: 55:d4:78:8b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPtcVhyKQCGseklMeW/Id6AI6SvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA0MjQyMzM2MTVaFw0yNjA0MjYwMjAwMTVaMDMxMTAvBgNV BAMTKDQ4MjhBNEJGQ0YxREMzMkRENDQwQjdCOTE0NTVENDY0NTcxREE3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq6RcQDJpkmSMoOfidVCWeTxLE OznQWWtT6xAeZJc0JcyYDtnZ4yexNBRHIAY4/Dx6cvLZTiaR9ZavTfhWYcnlrfer XieBpCc6M+ITlAoDPvA3xm2fcVJcnqJx5WNcJp3s4XFFHDVgdeLsug2QLlEX8N8B yBEJwcHN4e/0Uquky9qXreabVXWzFjaTmY5saKomW9rizLllr7cGJoMu0Gvb+tqD r0G5bhU0wig/MjzyAYuMSqJSr1p3VtuPnQtLJgG2HDCB922xNv5K2ItVA6c/Lgbi MK844UhxN3k3Dx1jyQ20hpcG06zZwz2VQio5pSPj3SMwYmsivbqOBvFUdAGXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUSCikv88dwy3UQLe5FFXUZFcdp5UwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1jLIaBPxu9cnThfhXs2 jSIryUKyiootShVeH+wjHyjPRf/rAId9GO/7PD1o0q7ooWfwnVwg9wYBcdIB4hsQ H2uUxV3CEHhnloaSLqNB93lGmtPUSFqX9kf1AJzzxp7OeJP9m0V1sBssHqQzjGzF CFHcxjZN/p/3esyf8o8RTDT+pGp71z8aJTnyEVySIxq7xbtL6YnO4DjD0yphVB1A kR4QPiDlwTL89/lkednwnC6THJULk00vGdJrn9nLI48w6m51IUcSUmCBPwO8h56x xznrReF5mfo+sM6Eu4+iUyzRwNWxZL4M6Auerl/dQ7ucwJelFwUytGrvqiddVdR4 iw== -----END CERTIFICATE-----Generated at Sat Apr 25 12:19:35 2026 by rpki-client