$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: KUDEgWSKawQmmHMvwbNFxxaBQ7LHqnGeu8svG5FrjmQ= Subject key identifier: 33:A0:8D:83:C3:56:68:E4:C4:F3:AB:16:BF:06:0E:01:28:6C:7E:E3 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 1827490D6C9F58D15F9A4E93FC626FD7AAE633A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0523 Signing time: Thu 09 Jul 2026 11:00:53 +0000 Manifest this update: Thu 09 Jul 2026 10:55:53 +0000 Manifest next update: Fri 10 Jul 2026 13:35:53 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: zUPRg2PrGTvhICRQ7MrYcL063Bv3B12b76K3toP4RhA=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 Jul 2026 13:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:27:49:0d:6c:9f:58:d1:5f:9a:4e:93:fc:62:6f:d7:aa:e6:33:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 9 10:55:53 2026 GMT Not After : Jul 10 13:35:53 2026 GMT Subject: CN=33A08D83C35668E4C4F3AB16BF060E01286C7EE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:ca:6c:6f:c2:38:6d:d0:50:d2:7b:28:6c: 5e:34:3d:1c:16:d4:84:8a:52:3c:2f:d4:c7:e9:5e: 78:a2:4a:19:c7:0b:61:a0:3a:ed:c2:38:9d:e8:2d: 98:90:0b:b3:2d:fa:7c:a2:8a:7e:ef:05:11:4c:9c: 71:bc:f9:5f:33:91:b3:bf:f4:f0:d6:08:b4:d2:47: 98:06:a0:d7:a0:47:cd:6e:3e:7f:a3:43:e0:91:0a: 01:26:eb:56:19:c6:01:3d:9a:f4:8c:4e:41:4b:86: f6:2a:8f:31:65:f4:8f:94:86:e9:e4:f0:2d:45:00: b7:13:42:90:72:04:2d:67:c4:3a:f8:60:10:0d:db: 68:a4:cc:0c:1f:86:ec:64:53:27:30:d9:d2:fc:3c: 3c:c7:d9:05:6c:23:1a:12:94:17:5a:59:8a:5e:84: cf:25:11:31:cf:92:c1:ed:99:42:9d:73:09:bd:03: 6a:14:5f:8a:87:54:bb:46:f6:d7:a1:88:c7:d6:fa: 75:74:cf:8c:46:03:a4:99:92:bb:70:43:34:93:28: 87:bb:3a:63:12:48:06:b5:a0:b6:73:ee:4e:c7:da: 11:95:b2:dd:fb:89:9e:16:32:cf:3c:46:1b:5b:6f: 93:57:3a:63:c9:b3:15:33:97:bf:91:56:f8:87:52: 93:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A0:8D:83:C3:56:68:E4:C4:F3:AB:16:BF:06:0E:01:28:6C:7E:E3 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:63:36:fe:83:d0:45:0a:04:22:c5:9b:ee:e2:b1:f9:fd:a1: d5:73:25:cd:ed:7a:e2:4e:c7:26:14:c5:01:69:eb:3c:f2:5b: 05:d4:8c:68:cc:4a:eb:38:25:0f:76:71:c2:26:59:05:2f:f6: 1d:6d:63:84:aa:c2:a1:8c:b2:a4:b0:e3:e9:98:0c:bf:9b:e3: 7b:02:7f:3b:6c:2d:7a:35:75:23:12:b9:64:b7:17:93:8b:95: fd:ab:10:bc:62:85:f3:62:b2:7d:13:af:fc:bb:e3:82:df:d8: e7:b6:fa:e2:ce:85:7b:ac:fe:ae:b6:de:eb:4b:c3:ba:4a:bb: 1a:1d:57:33:01:2a:73:3a:c7:58:45:c4:f1:37:5e:ec:51:b9: 35:a3:2a:4c:22:03:3e:a1:34:0e:e1:ca:6e:b1:66:38:d5:18: a7:fc:e9:d8:6a:1a:e1:8d:25:6b:68:39:2a:b1:7a:a3:62:f9: 7b:b1:69:bb:ae:37:43:e7:b2:20:a3:65:b6:9a:ba:5e:43:55: 03:04:a4:a6:43:91:cd:d3:55:a2:dc:79:85:b2:ff:9f:0f:76: 6a:da:5d:f8:92:c7:eb:22:ef:95:f1:68:c4:e9:7d:3b:8f:0b: 8a:2f:64:9e:22:28:74:3d:51:79:01:4f:e5:15:e4:e2:94:85: 39:58:ba:f3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGCdJDWyfWNFfmk6T/GJv16rmM6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MDkxMDU1NTNaFw0yNjA3MTAxMzM1NTNaMDMxMTAvBgNV BAMTKDMzQTA4RDgzQzM1NjY4RTRDNEYzQUIxNkJGMDYwRTAxMjg2QzdFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHecpsb8I4bdBQ0nsobF40PRwW 1ISKUjwv1MfpXniiShnHC2GgOu3COJ3oLZiQC7Mt+nyiin7vBRFMnHG8+V8zkbO/ 9PDWCLTSR5gGoNegR81uPn+jQ+CRCgEm61YZxgE9mvSMTkFLhvYqjzFl9I+Uhunk 8C1FALcTQpByBC1nxDr4YBAN22ikzAwfhuxkUycw2dL8PDzH2QVsIxoSlBdaWYpe hM8lETHPksHtmUKdcwm9A2oUX4qHVLtG9tehiMfW+nV0z4xGA6SZkrtwQzSTKIe7 OmMSSAa1oLZz7k7H2hGVst37iZ4WMs88Rhtbb5NXOmPJsxUzl7+RVviHUpNDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUM6CNg8NWaOTE86sWvwYOAShsfuMwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWM2/oPQRQoEIsWb7uKx +f2h1XMlze164k7HJhTFAWnrPPJbBdSMaMxK6zglD3ZxwiZZBS/2HW1jhKrCoYyy pLDj6ZgMv5vjewJ/O2wtejV1IxK5ZLcXk4uV/asQvGKF82KyfROv/Lvjgt/Y57b6 4s6Fe6z+rrbe60vDukq7Gh1XMwEqczrHWEXE8Tde7FG5NaMqTCIDPqE0DuHKbrFm ONUYp/zp2Goa4Y0la2g5KrF6o2L5e7Fpu643Q+eyIKNltpq6XkNVAwSkpkORzdNV otx5hbL/nw92atpd+JLH6yLvlfFoxOl9O48Lii9kniIodD1ReQFP5RXk4pSFOVi6 8w== -----END CERTIFICATE-----Generated at Fri Jul 10 05:53:09 2026 by rpki-client