$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: edH/8kV2Tus0umIR1Ls9xGRg+4+Mcc6wklkIODwWSnw= Subject key identifier: E1:92:85:E3:31:1D:E8:DA:47:09:FF:DC:A6:D9:C9:78:A9:70:76:B2 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 658A2EDA6736C7C9A634398D8AACC2EB8851C710 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0558 Signing time: Tue 18 Aug 2026 09:42:15 +0000 Manifest this update: Tue 18 Aug 2026 09:37:15 +0000 Manifest next update: Wed 19 Aug 2026 12:19:15 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 4+BX3ux4LuggjfM4icna2ZJmkegBVD/qdrp69NNhF7E=) 2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 19 Aug 2026 12:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:8a:2e:da:67:36:c7:c9:a6:34:39:8d:8a:ac:c2:eb:88:51:c7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 18 09:37:15 2026 GMT Not After : Aug 19 12:19:15 2026 GMT Subject: CN=E19285E3311DE8DA4709FFDCA6D9C978A97076B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:88:1e:6e:b7:b1:7a:c1:f8:49:5e:06:61:7c: 8f:a7:50:3b:ad:2c:bd:ce:3b:fa:e1:ea:1c:d0:f3: 04:51:67:22:21:b3:66:68:73:c1:85:d2:a3:be:ec: 4e:9a:a3:62:31:b3:36:b0:b5:b9:7d:55:2b:76:2c: d1:f4:3c:af:e7:8c:4a:d3:51:56:8c:de:a8:fb:2b: d9:8f:76:8e:90:50:11:cf:69:ad:8d:0d:4a:5d:e0: 3f:a9:01:27:18:4d:95:4b:46:52:6b:76:06:a5:b3: f6:ea:68:aa:9d:7d:32:fe:13:14:a4:9b:df:37:f7: af:6c:2f:86:ff:6b:27:d5:43:6c:31:7a:5c:ac:85: 48:c2:4d:24:7e:1d:6c:fb:5d:6a:38:73:e3:e9:e5: 51:40:7d:54:d3:2d:34:e9:93:ab:8a:66:27:6b:97: a9:8b:f4:1b:a8:ba:ca:eb:3a:73:2a:49:e2:fb:f4: 30:42:76:55:f9:ab:e1:e5:e0:69:49:20:74:bf:fb: 91:d0:f1:23:f4:3b:bb:ae:33:ed:14:d3:5b:17:96: 39:89:f6:66:ba:8c:d4:2f:db:e9:da:02:37:0a:bc: 7b:48:df:8a:c1:eb:ec:90:24:2e:81:d4:c9:7e:75: cd:93:dd:50:19:ef:76:1f:35:26:94:69:8b:bf:50: 5b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:92:85:E3:31:1D:E8:DA:47:09:FF:DC:A6:D9:C9:78:A9:70:76:B2 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:02:ba:a7:53:f6:fb:c2:c9:09:38:cc:0b:2e:5d:e0:af:79: 18:27:61:8e:5f:9f:ce:f2:91:e9:43:80:51:eb:fd:33:2e:6d: 53:62:b5:b8:2f:dd:a1:30:55:21:9d:f2:99:26:93:8b:3b:b8: 4e:69:68:d2:ff:77:b8:e8:d3:cd:0c:9c:77:8a:97:0a:a2:e3: 49:51:9b:97:a2:13:b2:e5:04:19:e9:6b:42:49:6b:87:35:8f: e5:7d:aa:c2:ba:c9:2c:6d:1c:aa:99:15:74:15:3c:90:eb:b0: a7:69:eb:8d:7d:b7:b8:d3:86:b6:26:31:d5:68:55:a6:b0:3b: 38:c2:5f:a0:32:92:a2:2b:5f:5c:c5:49:52:a1:0d:0a:73:4f: 82:83:98:4e:a4:2e:09:92:a0:2b:cb:8d:51:66:c0:5a:ac:f5: 52:5c:04:2e:37:43:e0:6e:76:67:48:64:2d:9f:c1:46:18:4a: 8e:57:26:02:18:70:1c:a0:69:47:d3:ed:fd:20:eb:ec:3e:ff: 3e:d5:33:f6:83:fa:34:d4:73:fd:50:bb:50:76:aa:bf:f2:4e: 66:02:a3:26:ca:a3:b6:d8:06:36:33:f0:20:5d:f9:b9:fc:06: f7:47:e9:94:e9:cd:12:2a:61:1e:1d:11:39:aa:cd:d2:13:64: 56:72:9e:cc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZYou2mc2x8mmNDmNiqzC64hRxxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MTgwOTM3MTVaFw0yNjA4MTkxMjE5MTVaMDMxMTAvBgNV BAMTKEUxOTI4NUUzMzExREU4REE0NzA5RkZEQ0E2RDlDOTc4QTk3MDc2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFiB5ut7F6wfhJXgZhfI+nUDut LL3OO/rh6hzQ8wRRZyIhs2Zoc8GF0qO+7E6ao2Ixszawtbl9VSt2LNH0PK/njErT UVaM3qj7K9mPdo6QUBHPaa2NDUpd4D+pAScYTZVLRlJrdgals/bqaKqdfTL+ExSk m983969sL4b/ayfVQ2wxelyshUjCTSR+HWz7XWo4c+Pp5VFAfVTTLTTpk6uKZidr l6mL9BuousrrOnMqSeL79DBCdlX5q+Hl4GlJIHS/+5HQ8SP0O7uuM+0U01sXljmJ 9ma6jNQv2+naAjcKvHtI34rB6+yQJC6B1Ml+dc2T3VAZ73YfNSaUaYu/UFvJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4ZKF4zEd6NpHCf/cptnJeKlwdrIwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwK6p1P2+8LJCTjMCy5d 4K95GCdhjl+fzvKR6UOAUev9My5tU2K1uC/doTBVIZ3ymSaTizu4Tmlo0v93uOjT zQycd4qXCqLjSVGbl6ITsuUEGelrQklrhzWP5X2qwrrJLG0cqpkVdBU8kOuwp2nr jX23uNOGtiYx1WhVprA7OMJfoDKSoitfXMVJUqENCnNPgoOYTqQuCZKgK8uNUWbA Wqz1UlwELjdD4G52Z0hkLZ/BRhhKjlcmAhhwHKBpR9Pt/SDr7D7/PtUz9oP6NNRz /VC7UHaqv/JOZgKjJsqjttgGNjPwIF35ufwG90fplOnNEiphHh0ROarN0hNkVnKe zA== -----END CERTIFICATE-----Generated at Tue Aug 18 18:32:33 2026 by rpki-client