$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 0H+FrvZaJ10KIab+5u2/yurRqfkOcLQsipcNd2yOEJs= Subject key identifier: 8C:5E:E5:E3:F4:92:70:EB:1A:04:F1:8B:28:BE:FF:B5:9B:A2:CA:50 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 58B651E40F38A2451046F83B6FF5D355F1C4A6B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0550 Signing time: Wed 12 Aug 2026 06:32:53 +0000 Manifest this update: Wed 12 Aug 2026 06:27:53 +0000 Manifest next update: Thu 13 Aug 2026 07:33:53 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: LxC1hoHkYh38oBInfjP/WcBr068FLSNsxI9KaJYJI/E=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Aug 2026 07:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b6:51:e4:0f:38:a2:45:10:46:f8:3b:6f:f5:d3:55:f1:c4:a6:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 12 06:27:53 2026 GMT Not After : Aug 13 07:33:53 2026 GMT Subject: CN=8C5EE5E3F49270EB1A04F18B28BEFFB59BA2CA50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:77:cf:80:76:2a:13:6a:4c:ec:3b:b2:01:3f: e7:7c:63:4a:04:da:e4:a8:b3:ab:f5:f7:d7:55:0f: ea:e0:76:9b:61:d3:0c:21:db:29:ad:9f:ae:4c:ad: 17:04:a8:38:6c:c1:4f:44:c7:9b:92:b2:0f:b3:b6: fd:d9:e9:04:a4:a1:4d:2a:85:5e:b3:57:c1:66:a1: 0d:2f:4f:b8:c9:63:e3:b2:67:95:34:f2:a0:3d:3f: ec:61:53:ce:41:2f:ab:52:b0:58:57:76:2a:aa:00: 8b:ee:9c:08:dd:76:72:b9:8a:85:54:8f:31:e1:59: 8c:f1:09:f3:aa:bb:f6:36:3d:34:ae:4b:1c:4c:d1: 2f:70:ed:2b:59:ae:6e:74:3c:7f:7c:61:c3:37:eb: 84:30:02:e3:38:7f:97:ee:4c:5a:94:11:29:ec:4b: 2f:f5:83:b5:a8:d6:9a:fc:8c:94:d0:6b:fc:c7:55: 11:6a:12:53:9e:ab:7d:a0:b5:ec:26:f8:f3:b5:f7: 31:aa:26:84:49:24:5c:86:2b:53:1b:b7:56:f6:bd: 91:7d:6a:11:5e:26:29:5c:18:fc:9e:73:32:9b:6a: b8:ee:84:80:e2:d6:53:ac:b5:9a:93:71:db:7c:fc: c6:d3:63:80:a1:fb:b6:65:3f:09:6a:46:32:61:9e: ab:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5E:E5:E3:F4:92:70:EB:1A:04:F1:8B:28:BE:FF:B5:9B:A2:CA:50 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e8:94:66:da:7c:f7:cb:dd:64:38:2a:2f:ae:6f:28:cd:32: bb:28:b3:23:c7:04:13:00:ba:7a:cd:f9:f2:26:15:eb:d2:0f: f0:21:0c:25:2f:cf:f2:0b:8d:9d:0d:f8:7f:6e:19:78:74:d5: 41:48:1b:48:32:fd:d8:07:b5:f0:1c:03:9d:02:e3:9a:d6:f2: b7:86:b7:f9:c5:f3:2e:18:b6:1d:55:1b:01:12:82:b8:c7:0a: 1c:06:0a:49:5a:9c:36:35:f9:ed:e3:4f:11:42:03:e8:64:00: d7:5a:aa:40:33:fb:83:26:cc:23:66:c2:00:45:b8:db:83:ea: 66:ad:10:9a:00:b8:8a:82:7b:c1:a6:ae:e0:51:8f:e0:a9:f2: b0:4e:5c:da:78:90:d7:9d:f6:6f:5d:44:3c:cd:b5:06:27:de: f8:db:5b:ce:8b:a7:63:89:3a:8c:c1:22:d0:3d:b2:31:d6:a9: cc:82:bf:71:f7:9f:b9:f9:27:3f:b5:6d:76:10:06:ad:2b:a2: 8e:09:35:c9:8b:66:45:78:70:b9:08:bc:55:14:36:26:30:8a: e9:9b:fa:75:9b:71:7b:ed:57:72:83:14:fe:55:1d:3a:a3:6f: 29:ed:b0:a6:31:d9:51:55:e5:29:f9:d7:9a:a1:7b:bb:b2:f2: b9:1a:b6:c5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWLZR5A84okUQRvg7b/XTVfHEprYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MTIwNjI3NTNaFw0yNjA4MTMwNzMzNTNaMDMxMTAvBgNV BAMTKDhDNUVFNUUzRjQ5MjcwRUIxQTA0RjE4QjI4QkVGRkI1OUJBMkNBNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbd8+AdioTakzsO7IBP+d8Y0oE 2uSos6v199dVD+rgdpth0wwh2ymtn65MrRcEqDhswU9Ex5uSsg+ztv3Z6QSkoU0q hV6zV8FmoQ0vT7jJY+OyZ5U08qA9P+xhU85BL6tSsFhXdiqqAIvunAjddnK5ioVU jzHhWYzxCfOqu/Y2PTSuSxxM0S9w7StZrm50PH98YcM364QwAuM4f5fuTFqUESns Sy/1g7Wo1pr8jJTQa/zHVRFqElOeq32gtewm+PO19zGqJoRJJFyGK1Mbt1b2vZF9 ahFeJilcGPyeczKbarjuhIDi1lOstZqTcdt8/MbTY4Ch+7ZlPwlqRjJhnqtxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUjF7l4/SScOsaBPGLKL7/tZuiylAwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuiUZtp898vdZDgqL65v KM0yuyizI8cEEwC6es358iYV69IP8CEMJS/P8guNnQ34f24ZeHTVQUgbSDL92Ae1 8BwDnQLjmtbyt4a3+cXzLhi2HVUbARKCuMcKHAYKSVqcNjX57eNPEUID6GQA11qq QDP7gybMI2bCAEW424PqZq0QmgC4ioJ7waau4FGP4KnysE5c2niQ1532b11EPM21 Bife+NtbzounY4k6jMEi0D2yMdapzIK/cfefufknP7VtdhAGrSuijgk1yYtmRXhw uQi8VRQ2JjCK6Zv6dZtxe+1XcoMU/lUdOqNvKe2wpjHZUVXlKfnXmqF7u7LyuRq2 xQ== -----END CERTIFICATE-----Generated at Wed Aug 12 14:31:26 2026 by rpki-client