$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: Ewx5oFbOtUcZ2nNytqxfpVErQQOFtxb+dq9v9Tynz6k= Subject key identifier: 6D:A7:23:73:F1:62:2D:76:B9:12:21:AA:20:58:44:5B:C2:F3:03:40 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 6C4492EC3CFCC64A60A0A71E8EE39B39E3E58AED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0545 Signing time: Tue 04 Aug 2026 11:50:36 +0000 Manifest this update: Tue 04 Aug 2026 11:45:36 +0000 Manifest next update: Wed 05 Aug 2026 15:36:36 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: J3sS4Fnou9fA+bauApgSBei1nIsRabep5aX8XCA+ir4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Aug 2026 15:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:44:92:ec:3c:fc:c6:4a:60:a0:a7:1e:8e:e3:9b:39:e3:e5:8a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 4 11:45:36 2026 GMT Not After : Aug 5 15:36:36 2026 GMT Subject: CN=6DA72373F1622D76B91221AA2058445BC2F30340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1a:1a:9c:a4:eb:91:88:94:25:e8:9d:5c:07: 03:fb:ff:f6:f5:c9:09:93:67:29:5c:8a:84:43:88: a1:cc:cd:5a:70:25:c4:80:c4:18:7c:1e:22:75:30: 30:e0:59:4c:46:81:b8:0a:59:e1:8a:1d:8d:72:10: df:3e:49:f1:0d:00:ea:a3:c4:78:87:45:20:a2:4b: 3f:8b:37:bb:b8:b9:3b:55:7b:2c:09:a2:a8:0d:bb: 00:65:0d:64:4d:a9:b3:02:b9:c5:d8:c4:f8:0b:ea: 68:9d:c4:71:0e:d5:65:82:33:8b:82:4d:51:d9:39: b8:a3:e8:e7:f8:3c:72:ad:dd:d3:da:8f:b9:c8:92: 36:1d:f5:14:ef:19:74:dc:ae:cf:16:42:91:e4:05: f0:fa:12:5c:50:5d:0a:ef:ae:e6:ff:76:2c:94:6b: 35:61:27:8f:30:d4:52:55:5d:ee:e1:68:2c:2b:55: 15:96:a5:13:58:40:25:56:e8:37:12:49:57:32:0b: 42:b5:31:6b:0e:80:66:bf:bd:68:f8:b3:3b:8d:55: 18:55:d2:85:8e:20:57:12:db:de:07:80:e8:b4:45: 8a:50:a4:fb:6b:4f:27:17:cc:b9:e0:da:bc:d8:d4: 49:5a:66:7d:2d:c3:02:7a:92:1d:b7:b6:0d:0e:b7: 15:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A7:23:73:F1:62:2D:76:B9:12:21:AA:20:58:44:5B:C2:F3:03:40 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:55:75:27:a2:cc:74:c9:e8:40:1d:07:ce:29:f9:be:84:d4: 68:91:69:2c:ca:c8:b7:45:78:92:b8:c6:3f:b5:f2:6a:0e:a7: bb:25:07:c8:9f:92:ba:ee:65:2c:95:f9:ca:bf:cf:60:99:d9: b5:c2:ef:74:6c:17:a4:11:7f:c2:f3:33:8d:d2:6f:94:d7:da: 5e:51:a7:4c:e5:f3:f8:29:fb:8a:00:cc:5e:09:eb:fb:3a:b5: 95:99:7b:01:fd:30:96:62:0c:37:47:17:1f:ff:b1:eb:ae:9d: 3f:b9:d6:c7:2e:e1:59:4d:cd:b4:3b:09:0c:9d:80:01:73:3c: d3:6e:3d:6a:98:97:71:61:88:07:07:d2:eb:82:38:7e:2f:41: c1:9d:1a:80:55:74:52:00:48:af:cc:ee:ee:2d:cc:ad:38:12: 23:a9:72:ca:9e:02:25:a1:3c:d6:21:38:90:b1:4a:8a:96:8b: af:6b:cc:d0:b3:dc:40:bd:ca:ae:3b:0b:89:b0:ab:54:cb:d7: 2d:a1:7d:20:e2:4b:32:da:4f:e7:ee:09:84:69:b2:f5:d5:ab: a5:7c:1c:f2:c2:cc:0b:45:5a:08:d8:b9:2f:21:9e:1f:97:23: 7b:b2:50:e5:36:2a:c8:78:22:c9:98:22:5d:11:6d:39:c4:ce: ba:af:10:98 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbESS7Dz8xkpgoKcejuObOePliu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MDQxMTQ1MzZaFw0yNjA4MDUxNTM2MzZaMDMxMTAvBgNV BAMTKDZEQTcyMzczRjE2MjJENzZCOTEyMjFBQTIwNTg0NDVCQzJGMzAzNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSGhqcpOuRiJQl6J1cBwP7//b1 yQmTZylcioRDiKHMzVpwJcSAxBh8HiJ1MDDgWUxGgbgKWeGKHY1yEN8+SfENAOqj xHiHRSCiSz+LN7u4uTtVeywJoqgNuwBlDWRNqbMCucXYxPgL6midxHEO1WWCM4uC TVHZObij6Of4PHKt3dPaj7nIkjYd9RTvGXTcrs8WQpHkBfD6ElxQXQrvrub/diyU azVhJ48w1FJVXe7haCwrVRWWpRNYQCVW6DcSSVcyC0K1MWsOgGa/vWj4szuNVRhV 0oWOIFcS294HgOi0RYpQpPtrTycXzLng2rzY1ElaZn0twwJ6kh23tg0OtxUHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUbacjc/FiLXa5EiGqIFhEW8LzA0AwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFV1J6LMdMnoQB0Hzin5 voTUaJFpLMrIt0V4krjGP7Xyag6nuyUHyJ+Suu5lLJX5yr/PYJnZtcLvdGwXpBF/ wvMzjdJvlNfaXlGnTOXz+Cn7igDMXgnr+zq1lZl7Af0wlmIMN0cXH/+x666dP7nW xy7hWU3NtDsJDJ2AAXM80249apiXcWGIBwfS64I4fi9BwZ0agFV0UgBIr8zu7i3M rTgSI6lyyp4CJaE81iE4kLFKipaLr2vM0LPcQL3KrjsLibCrVMvXLaF9IOJLMtpP 5+4JhGmy9dWrpXwc8sLMC0VaCNi5LyGeH5cje7JQ5TYqyHgiyZgiXRFtOcTOuq8Q mA== -----END CERTIFICATE-----Generated at Wed Aug 5 08:12:07 2026 by rpki-client