$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: gy5Km0+fGO3CIMTUTa4QlnCFRV+N4hezMnKuW3dxSC0= Subject key identifier: AD:1C:51:B9:AA:F5:28:32:89:0C:58:20:72:6C:88:49:40:79:46:7C Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 146545D70D197FBB81736245A2239A31F7DBAF6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04C4 Signing time: Tue 28 Apr 2026 13:33:24 +0000 Manifest this update: Tue 28 Apr 2026 13:28:24 +0000 Manifest next update: Wed 29 Apr 2026 15:53:24 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 7NzA1zPvcY+N6AKUfnQlMMHfOea8KjM0odz/B5LQbBk=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Apr 2026 14:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:65:45:d7:0d:19:7f:bb:81:73:62:45:a2:23:9a:31:f7:db:af:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 28 13:28:24 2026 GMT Not After : Apr 29 15:53:24 2026 GMT Subject: CN=AD1C51B9AAF52832890C5820726C88494079467C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:42:70:60:93:db:b5:10:d8:e1:20:8e:c1:20: 40:0b:0b:5f:1b:b7:e1:32:17:e4:70:4a:76:01:8b: e7:24:6c:d7:eb:9a:83:c2:c3:44:aa:30:ba:37:32: e0:d7:0b:6f:be:51:b8:3e:62:3b:f2:41:48:4f:0b: 5f:57:6c:f7:59:5b:0e:52:73:95:da:8f:b4:89:fc: 7b:70:5f:17:3f:92:4c:93:98:bb:bb:d3:4d:4c:28: 19:cc:c0:d6:c7:19:f5:ef:92:82:6e:ae:bc:9a:ba: 59:cf:35:42:51:ff:69:fa:6e:47:dd:9c:4b:e6:8a: 05:ae:ec:7a:57:58:2b:81:32:40:d6:b1:60:5c:6e: f8:64:91:b5:94:09:b8:27:34:31:fd:96:72:b0:e2: 17:b8:19:83:c2:7d:ba:e0:02:45:dc:ec:81:5e:7e: c7:70:66:84:f0:38:2b:a1:ca:ea:ff:ca:c0:dd:cc: b0:f9:79:e1:26:5f:b0:7f:28:c4:9e:95:61:14:d8: 93:ea:cb:43:e8:64:d6:e9:81:aa:1a:12:20:26:d0: e0:fb:08:44:58:c8:ca:aa:91:77:be:fa:04:7e:fc: 0d:03:2c:d9:71:51:06:a9:3e:a9:5a:06:88:f1:0b: 3f:b1:dc:13:95:98:73:f7:4a:ab:96:61:9b:c5:d7: 8b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1C:51:B9:AA:F5:28:32:89:0C:58:20:72:6C:88:49:40:79:46:7C X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a3:7d:98:83:40:0e:0a:f2:29:d5:e3:18:f3:0b:4a:72:fe: a3:f0:12:b4:3c:d6:91:82:2f:d5:a2:24:9d:27:52:25:ed:27: d9:62:bd:87:c5:f2:5d:16:6b:58:bf:10:49:85:7a:06:cb:2f: fd:24:b4:0f:8a:f8:2c:d6:8c:f7:da:ec:67:54:e1:03:95:45: 46:40:87:2e:b1:24:59:99:18:f0:ff:29:33:f5:98:e7:4f:9b: c1:d0:ea:61:09:f6:28:5c:6c:fb:78:74:b0:e7:42:2f:83:22: 11:5e:91:0b:4d:38:7b:ec:58:80:76:f9:8a:ce:a4:91:d5:32: df:7b:d4:b9:3e:7e:bc:cc:a8:5f:5a:73:93:68:50:8c:aa:f9: 40:7d:0c:9c:86:74:a6:e7:4f:5d:47:af:31:ef:01:3c:ac:a3: 6d:c7:3d:d6:8f:58:e0:c0:97:16:f3:11:28:13:0d:e5:4c:38: d9:20:0e:93:71:1c:d8:6c:92:26:7e:09:e8:f4:37:2d:85:17: e2:ed:e1:05:1f:6f:a9:b6:66:94:a2:0c:cc:66:c9:b6:24:a0: 73:22:2a:16:45:0a:37:ab:e5:70:d7:f9:00:89:77:60:40:03: e3:d0:93:39:5e:ce:2e:83:10:a9:1e:53:1a:13:be:37:98:21: 2b:3a:49:fb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFGVF1w0Zf7uBc2JFoiOaMffbr2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA0MjgxMzI4MjRaFw0yNjA0MjkxNTUzMjRaMDMxMTAvBgNV BAMTKEFEMUM1MUI5QUFGNTI4MzI4OTBDNTgyMDcyNkM4ODQ5NDA3OTQ2N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKQnBgk9u1ENjhII7BIEALC18b t+EyF+RwSnYBi+ckbNfrmoPCw0SqMLo3MuDXC2++Ubg+YjvyQUhPC19XbPdZWw5S c5Xaj7SJ/HtwXxc/kkyTmLu7001MKBnMwNbHGfXvkoJurryaulnPNUJR/2n6bkfd nEvmigWu7HpXWCuBMkDWsWBcbvhkkbWUCbgnNDH9lnKw4he4GYPCfbrgAkXc7IFe fsdwZoTwOCuhyur/ysDdzLD5eeEmX7B/KMSelWEU2JPqy0PoZNbpgaoaEiAm0OD7 CERYyMqqkXe++gR+/A0DLNlxUQapPqlaBojxCz+x3BOVmHP3SquWYZvF14vJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUrRxRuar1KDKJDFggcmyISUB5RnwwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaN9mINADgryKdXjGPML SnL+o/AStDzWkYIv1aIknSdSJe0n2WK9h8XyXRZrWL8QSYV6Bssv/SS0D4r4LNaM 99rsZ1ThA5VFRkCHLrEkWZkY8P8pM/WY50+bwdDqYQn2KFxs+3h0sOdCL4MiEV6R C004e+xYgHb5is6kkdUy33vUuT5+vMyoX1pzk2hQjKr5QH0MnIZ0pudPXUevMe8B PKyjbcc91o9Y4MCXFvMRKBMN5Uw42SAOk3Ec2GySJn4J6PQ3LYUX4u3hBR9vqbZm lKIMzGbJtiSgcyIqFkUKN6vlcNf5AIl3YEAD49CTOV7OLoMQqR5TGhO+N5ghKzpJ +w== -----END CERTIFICATE-----Generated at Tue Apr 28 22:59:34 2026 by rpki-client