$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 7s0AT8bu0+ASZCBvDVWxkbs1glS/zfH7xFD8D95jMjM= Subject key identifier: 02:CB:1D:40:24:3C:42:E8:9B:32:D6:F8:1F:DA:A0:F7:27:67:B4:7B Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 4F82B169082A841C5B45DE8305C4D1B0CD56C7BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0525 Signing time: Sat 11 Jul 2026 00:58:28 +0000 Manifest this update: Sat 11 Jul 2026 00:53:28 +0000 Manifest next update: Sun 12 Jul 2026 01:04:28 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: B0Tq20czNYyr+r+wnWNZEMIXxGWu7N0u5Ij2b1jSrMo=) 2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 23:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:82:b1:69:08:2a:84:1c:5b:45:de:83:05:c4:d1:b0:cd:56:c7:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 11 00:53:28 2026 GMT Not After : Jul 12 01:04:28 2026 GMT Subject: CN=02CB1D40243C42E89B32D6F81FDAA0F72767B47B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ca:5c:a8:1b:d4:af:4b:d6:3a:b2:1b:a5:45: d4:6f:7a:24:da:7f:d8:2b:a0:50:63:30:69:dd:3c: 82:42:d7:a2:b0:ea:c8:f9:b3:6a:d0:11:b2:a2:ac: 65:28:84:17:bc:cb:20:af:e4:19:e9:06:63:21:bd: cb:12:b2:d8:70:1e:b7:68:88:b1:91:d7:40:c3:91: d2:c1:e9:bc:80:6f:b1:9a:e2:0d:57:1b:18:f2:94: 41:0c:62:34:5e:b4:07:31:ab:ab:03:3c:7f:56:de: 42:f3:c5:8f:da:b3:7f:6f:55:31:22:cd:34:9b:27: ef:85:0c:bb:28:c4:1e:26:b8:8a:9d:f6:80:08:bb: 9d:1b:10:0c:b7:96:33:3f:58:a0:6e:d6:0d:8c:10: 68:46:cf:f1:08:30:16:fe:05:b0:63:a4:e3:6b:57: e4:90:51:74:9e:a3:72:01:27:e6:51:6b:f9:95:9b: 51:9a:5b:50:3e:7e:9b:f3:dc:79:53:df:38:32:85: 32:94:67:4a:cf:ac:d1:65:85:3e:98:4d:e1:06:40: 43:24:e0:be:58:87:0b:bb:c4:a7:73:d5:c8:fd:84: 3f:75:08:7b:b8:de:5b:27:82:e7:88:da:8b:54:9b: e2:1e:43:87:05:f6:6e:77:7f:eb:af:85:e2:75:22: 22:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CB:1D:40:24:3C:42:E8:9B:32:D6:F8:1F:DA:A0:F7:27:67:B4:7B X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:6c:d7:8f:f4:d6:04:b3:2a:10:29:e6:e6:4a:2d:01:bc:4d: 2d:7d:99:fa:19:74:ee:89:6c:5b:a3:bc:fe:36:a2:92:d6:41: a6:81:09:70:18:41:39:df:4d:bc:d7:da:2b:0b:bc:31:95:72: c2:fc:8c:e9:62:00:a8:d4:11:8a:dd:cc:f3:20:de:32:bb:77: 60:27:90:ee:06:77:68:96:4c:fb:78:e4:bc:f0:72:c1:a4:9b: 46:7f:d0:4c:97:04:7c:90:84:a0:f6:51:95:cb:5e:ea:e9:e0: 0f:7a:6b:12:72:8c:95:d0:60:bc:17:b5:be:59:5a:b2:b3:90: f9:6c:cc:71:63:f4:e3:c2:13:80:69:41:a9:30:d7:3e:a2:61: 25:b3:35:c8:64:44:e4:a8:70:81:d7:34:73:6b:42:40:7b:ac: 26:3b:7f:fa:b7:6f:01:60:a5:58:29:d6:52:b7:21:31:a8:95: ee:22:4a:07:c3:7d:d9:74:9c:db:e2:d0:25:46:ff:f5:35:08: 86:48:a8:00:c4:70:2d:59:f5:d3:c8:84:23:08:59:ac:53:fa: 68:43:d8:b6:84:8f:00:3f:7e:ec:33:c2:58:17:93:d7:32:ed: 6e:e2:ae:c4:d4:11:09:c3:fa:bb:45:23:56:c6:0e:34:fc:f7: 58:c4:82:b5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUT4KxaQgqhBxbRd6DBcTRsM1Wx7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MTEwMDUzMjhaFw0yNjA3MTIwMTA0MjhaMDMxMTAvBgNV BAMTKDAyQ0IxRDQwMjQzQzQyRTg5QjMyRDZGODFGREFBMEY3Mjc2N0I0N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMylyoG9SvS9Y6shulRdRveiTa f9groFBjMGndPIJC16Kw6sj5s2rQEbKirGUohBe8yyCv5BnpBmMhvcsSsthwHrdo iLGR10DDkdLB6byAb7Ga4g1XGxjylEEMYjRetAcxq6sDPH9W3kLzxY/as39vVTEi zTSbJ++FDLsoxB4muIqd9oAIu50bEAy3ljM/WKBu1g2MEGhGz/EIMBb+BbBjpONr V+SQUXSeo3IBJ+ZRa/mVm1GaW1A+fpvz3HlT3zgyhTKUZ0rPrNFlhT6YTeEGQEMk 4L5Yhwu7xKdz1cj9hD91CHu43lsngueI2otUm+IeQ4cF9m53f+uvheJ1IiKLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAssdQCQ8QuibMtb4H9qg9ydntHswHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWzXj/TWBLMqECnm5kot AbxNLX2Z+hl07olsW6O8/jaiktZBpoEJcBhBOd9NvNfaKwu8MZVywvyM6WIAqNQR it3M8yDeMrt3YCeQ7gZ3aJZM+3jkvPBywaSbRn/QTJcEfJCEoPZRlcte6ungD3pr EnKMldBgvBe1vllasrOQ+WzMcWP048ITgGlBqTDXPqJhJbM1yGRE5Khwgdc0c2tC QHusJjt/+rdvAWClWCnWUrchMaiV7iJKB8N92XSc2+LQJUb/9TUIhkioAMRwLVn1 08iEIwhZrFP6aEPYtoSPAD9+7DPCWBeT1zLtbuKuxNQRCcP6u0UjVsYONPz3WMSC tQ== -----END CERTIFICATE-----Generated at Sat Jul 11 07:45:01 2026 by rpki-client