$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: wHhzWXInCU2cBy7Tdf+8az5LnhuDmklepPhse4Sz50c= Subject key identifier: 4A:6F:29:2C:7B:DD:BD:4E:BA:5A:6C:53:6F:92:55:F8:76:DC:63:84 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 3926D80FD00D3B78917FB2A0785E0F52639246C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04C8 Signing time: Fri 01 May 2026 15:23:07 +0000 Manifest this update: Fri 01 May 2026 15:18:07 +0000 Manifest next update: Sat 02 May 2026 17:41:07 +0000 Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: c01eJvo6OAGLoQtm7heKgISclKu+8zdKp3xpPV1PIoY=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 02 May 2026 17:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:26:d8:0f:d0:0d:3b:78:91:7f:b2:a0:78:5e:0f:52:63:92:46:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 1 15:18:07 2026 GMT Not After : May 2 17:41:07 2026 GMT Subject: CN=4A6F292C7BDDBD4EBA5A6C536F9255F876DC6384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f3:8b:4a:51:0f:8a:9a:19:a6:56:2b:25:c4: 7d:03:67:38:9a:90:1d:1e:cf:02:64:72:b9:12:01: 31:8e:30:3f:c2:b4:78:d5:41:90:cc:df:8d:c9:cb: 66:11:cc:a9:2d:71:90:8c:ac:c4:ff:fd:70:9d:e6: 7d:24:d9:6a:8f:a1:63:25:4e:3d:a5:de:d3:32:3a: 15:aa:ba:e7:92:eb:9f:74:89:92:6c:7a:80:67:79: c0:26:4b:0a:2f:a9:7a:09:f7:bf:b5:ff:c8:94:57: b2:16:7f:2c:2e:26:a0:c6:be:2d:fb:92:d4:4d:2d: 5f:3d:5a:ee:45:f4:fd:d5:1a:4b:c4:3b:cd:1f:2c: e2:d9:8d:43:90:3a:bc:03:fc:da:46:44:3c:f1:85: ce:d0:35:2b:77:99:01:ca:dd:ea:8b:2b:53:72:36: b1:3f:59:c5:f5:87:dc:cb:58:d2:68:de:12:68:6b: 61:1b:45:93:c1:23:41:ef:f7:6d:d8:9c:e1:70:ad: 44:d8:07:e8:83:a5:45:d0:f9:7c:5f:8b:13:47:e1: 0b:10:9b:31:1c:ac:aa:cd:2d:f2:73:85:4f:fa:6c: 52:d9:d5:73:55:e7:20:43:3a:35:ec:cf:7f:65:a5: 25:f6:b7:ab:d0:68:4d:86:9d:9c:21:64:fb:0c:39: 6a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6F:29:2C:7B:DD:BD:4E:BA:5A:6C:53:6F:92:55:F8:76:DC:63:84 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:2f:2d:cd:f7:f6:14:a9:69:b9:00:a0:fb:39:43:09:82:11: a7:4e:c6:88:28:e1:e8:d2:37:43:64:83:76:4d:aa:3b:79:6f: 56:58:f1:c0:07:39:27:49:9b:39:ea:15:a4:39:f8:cc:af:5c: a3:96:38:e6:62:7a:7a:d5:e8:6e:c0:7d:b3:97:0c:fd:c5:25: 75:7d:8f:d7:3f:fc:ec:00:f7:eb:22:e2:25:5d:be:70:8d:cf: f5:a2:45:87:82:7d:f7:63:2a:29:99:b7:49:83:88:db:d8:02: 49:71:b7:b4:d0:5d:3c:a5:de:56:cb:99:71:83:17:de:21:06: f6:95:24:f6:56:22:93:18:be:59:6d:dc:97:97:dc:9f:06:19: c9:c1:53:39:b7:d2:98:c7:4e:2c:6f:8b:fb:94:8f:bb:e3:ef: 0b:07:4e:f1:ba:d2:46:ad:be:97:10:c3:cc:15:a1:46:15:c2: 8b:cf:e0:74:9b:2d:27:22:92:b0:fb:e3:d3:08:5c:c9:46:a2: 50:73:22:02:a9:a4:a8:37:e9:3c:30:02:ca:d0:5d:a9:ee:89: 5f:97:6e:cd:70:d2:31:2c:c3:a9:80:c2:ab:d3:17:5b:bd:46: 55:7c:43:8e:ba:fe:63:45:02:36:d0:19:c3:09:b5:3e:f1:e0: 97:dc:3d:ec -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOSbYD9ANO3iRf7KgeF4PUmOSRsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MDExNTE4MDdaFw0yNjA1MDIxNzQxMDdaMDMxMTAvBgNV BAMTKDRBNkYyOTJDN0JEREJENEVCQTVBNkM1MzZGOTI1NUY4NzZEQzYzODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK84tKUQ+KmhmmVislxH0DZzia kB0ezwJkcrkSATGOMD/CtHjVQZDM343Jy2YRzKktcZCMrMT//XCd5n0k2WqPoWMl Tj2l3tMyOhWquueS6590iZJseoBnecAmSwovqXoJ97+1/8iUV7IWfywuJqDGvi37 ktRNLV89Wu5F9P3VGkvEO80fLOLZjUOQOrwD/NpGRDzxhc7QNSt3mQHK3eqLK1Ny NrE/WcX1h9zLWNJo3hJoa2EbRZPBI0Hv923YnOFwrUTYB+iDpUXQ+XxfixNH4QsQ mzEcrKrNLfJzhU/6bFLZ1XNV5yBDOjXsz39lpSX2t6vQaE2GnZwhZPsMOWoDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUSm8pLHvdvU66WmxTb5JV+HbcY4QwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMy8tzff2FKlpuQCg+zlD CYIRp07GiCjh6NI3Q2SDdk2qO3lvVljxwAc5J0mbOeoVpDn4zK9co5Y45mJ6etXo bsB9s5cM/cUldX2P1z/87AD36yLiJV2+cI3P9aJFh4J992MqKZm3SYOI29gCSXG3 tNBdPKXeVsuZcYMX3iEG9pUk9lYikxi+WW3cl5fcnwYZycFTObfSmMdOLG+L+5SP u+PvCwdO8brSRq2+lxDDzBWhRhXCi8/gdJstJyKSsPvj0whcyUaiUHMiAqmkqDfp PDACytBdqe6JX5duzXDSMSzDqYDCq9MXW71GVXxDjrr+Y0UCNtAZwwm1PvHgl9w9 7A== -----END CERTIFICATE-----Generated at Sat May 2 03:45:06 2026 by rpki-client