$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: nIn7a/ao6bIEFne4nm2vwjKyOfBlfFWEMVwjrSmuUps= Subject key identifier: 93:7D:00:2C:4E:8F:E7:F6:C9:B0:6A:38:51:22:C4:29:98:6F:AF:CF Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 2AECD6052820A00C70FB8E8FCA7D82F4C0A90E23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0519 Signing time: Thu 02 Jul 2026 04:00:58 +0000 Manifest this update: Thu 02 Jul 2026 03:55:58 +0000 Manifest next update: Fri 03 Jul 2026 06:06:58 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 1zCdFyFnv0Q2AS0uL+P3/MVIw06Lk5ntfN1SSVzjAho=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 03 Jul 2026 06:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ec:d6:05:28:20:a0:0c:70:fb:8e:8f:ca:7d:82:f4:c0:a9:0e:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 2 03:55:58 2026 GMT Not After : Jul 3 06:06:58 2026 GMT Subject: CN=937D002C4E8FE7F6C9B06A385122C429986FAFCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6b:ea:6c:8c:03:5e:ed:90:38:56:94:83:85: a9:1d:f6:ad:d2:cf:33:f0:60:8a:e9:88:58:7d:ca: 81:43:bf:24:e3:89:fb:cf:6e:1f:90:f8:77:81:d6: 57:78:27:74:f3:b3:5c:cd:4e:05:90:35:73:a8:3f: 8e:03:f0:62:87:04:ba:8d:26:77:dd:97:aa:29:ff: 3d:ea:29:3b:4c:f3:75:2b:1e:39:d9:04:ab:4d:a2: 17:6c:06:55:37:98:75:fb:93:33:b4:d6:82:44:84: 79:12:ec:7c:0a:8f:e7:30:06:50:a0:9d:d5:f8:7d: 0c:ab:c9:10:e3:8f:a8:c1:ee:00:46:ed:b2:42:be: 09:b3:68:9d:5a:85:4b:e3:02:27:0a:00:6a:02:7b: f4:ee:a6:94:c1:d2:c8:29:be:e5:15:60:be:f3:2a: 59:d6:fb:a8:32:99:83:bf:53:61:5f:15:98:59:ed: 11:d7:c6:4f:18:4d:59:6d:e3:05:09:b1:7b:26:3c: ed:a8:70:02:ca:81:ff:75:2b:f7:48:db:20:b6:ea: e5:b5:e9:e3:55:09:3a:5f:20:a9:fb:61:de:a9:82: 65:b0:a6:f4:6c:42:40:fc:36:4d:67:3c:96:b5:98: f4:b5:c9:6c:94:aa:25:0d:fd:05:fd:4e:c1:b8:4c: 94:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7D:00:2C:4E:8F:E7:F6:C9:B0:6A:38:51:22:C4:29:98:6F:AF:CF X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:35:f7:62:14:79:70:1a:33:2d:89:a9:99:9f:85:6b:74:4b: 26:68:cd:f7:7c:9b:69:9f:de:59:91:37:eb:c1:30:30:01:c1: 52:66:89:be:52:9c:03:b5:1b:59:dc:cc:21:58:d5:6c:07:66: 58:1b:18:db:08:6d:6a:9a:74:14:7c:73:18:ff:b7:83:84:fa: 92:ea:90:28:78:dd:41:16:04:72:ac:8b:88:5b:37:5e:5d:7f: 56:b0:0a:95:1e:96:56:39:d6:ba:8a:ef:66:ad:36:81:81:7b: 2f:d1:df:ba:92:f6:66:d0:a4:5d:8f:3c:f0:25:1f:57:4e:a2: 0e:c2:33:6e:6e:af:3b:a1:b8:98:ed:48:55:fe:52:a1:67:4d: 27:a9:7f:ba:87:d4:32:2b:99:57:09:18:0f:70:bc:21:23:c4: 66:85:38:12:c0:27:df:81:a0:09:99:4f:73:22:14:29:b2:f4: 30:68:57:3e:c6:eb:e9:83:8e:7f:3b:8e:9a:1f:1c:e7:b8:8c: 01:30:32:16:1a:5a:72:43:7d:5b:3f:95:00:c8:71:9e:c2:7a: f4:07:08:37:63:1b:a6:bb:35:23:d6:2c:f4:04:f7:8c:1c:de: 4f:a2:c9:55:27:9a:2b:9d:57:7e:87:e5:f7:cb:39:b7:6a:28: 18:ea:f6:64 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKuzWBSggoAxw+46Pyn2C9MCpDiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MDIwMzU1NThaFw0yNjA3MDMwNjA2NThaMDMxMTAvBgNV BAMTKDkzN0QwMDJDNEU4RkU3RjZDOUIwNkEzODUxMjJDNDI5OTg2RkFGQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCna+psjANe7ZA4VpSDhakd9q3S zzPwYIrpiFh9yoFDvyTjifvPbh+Q+HeB1ld4J3Tzs1zNTgWQNXOoP44D8GKHBLqN Jnfdl6op/z3qKTtM83UrHjnZBKtNohdsBlU3mHX7kzO01oJEhHkS7HwKj+cwBlCg ndX4fQyryRDjj6jB7gBG7bJCvgmzaJ1ahUvjAicKAGoCe/TuppTB0sgpvuUVYL7z KlnW+6gymYO/U2FfFZhZ7RHXxk8YTVlt4wUJsXsmPO2ocALKgf91K/dI2yC26uW1 6eNVCTpfIKn7Yd6pgmWwpvRsQkD8Nk1nPJa1mPS1yWyUqiUN/QX9TsG4TJT3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUk30ALE6P5/bJsGo4USLEKZhvr88wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajX3YhR5cBozLYmpmZ+F a3RLJmjN93ybaZ/eWZE368EwMAHBUmaJvlKcA7UbWdzMIVjVbAdmWBsY2whtapp0 FHxzGP+3g4T6kuqQKHjdQRYEcqyLiFs3Xl1/VrAKlR6WVjnWuorvZq02gYF7L9Hf upL2ZtCkXY888CUfV06iDsIzbm6vO6G4mO1IVf5SoWdNJ6l/uofUMiuZVwkYD3C8 ISPEZoU4EsAn34GgCZlPcyIUKbL0MGhXPsbr6YOOfzuOmh8c57iMATAyFhpackN9 Wz+VAMhxnsJ69AcIN2Mbprs1I9Ys9AT3jBzeT6LJVSeaK51Xfofl98s5t2ooGOr2 ZA== -----END CERTIFICATE-----Generated at Thu Jul 2 19:01:26 2026 by rpki-client