$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: RymySIrzIntd5xVGPIkhjjr55kdgOszwK1JCPdzQE5Y= Subject key identifier: C8:30:11:9F:BC:5F:68:46:34:0F:21:A7:6A:FC:00:56:94:EE:EB:A7 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 3EFF4874FD315F85EFB7F311434C296BDA39DBB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04DA Signing time: Fri 15 May 2026 05:33:13 +0000 Manifest this update: Fri 15 May 2026 05:28:13 +0000 Manifest next update: Sat 16 May 2026 09:08:13 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: VTffERbVdEoR5jLzhFwREVf3cG7KG5yZMm8CQ6vn2bw=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 09:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ff:48:74:fd:31:5f:85:ef:b7:f3:11:43:4c:29:6b:da:39:db:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 15 05:28:13 2026 GMT Not After : May 16 09:08:13 2026 GMT Subject: CN=C830119FBC5F6846340F21A76AFC005694EEEBA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fe:31:99:13:22:e2:5b:db:b0:9f:27:75:b1: ac:44:e1:74:f5:85:61:fc:f1:f4:1b:d8:36:a2:c2: c3:2f:f9:ee:80:58:b5:55:b1:fc:4b:50:5b:66:7b: 8f:6d:0b:16:7c:9b:bc:ba:a8:7d:2d:2d:cf:e6:37: 60:b8:b9:8b:c1:27:61:5c:d2:68:37:8f:34:0f:69: a4:06:e4:14:86:47:0c:e1:15:64:d4:9e:ba:0c:bd: 47:3e:47:2c:45:ea:d1:de:a6:7a:2f:c2:c1:e1:22: e6:4b:81:41:64:a4:b1:16:74:6f:fc:5d:f5:91:60: ee:cf:71:6b:5a:d5:2f:cc:e8:f4:78:5f:3f:26:06: 0b:6f:46:e6:0d:4d:37:d3:c3:14:a7:37:f2:dd:64: c4:86:5a:b6:75:87:00:4f:56:af:26:3a:2f:7a:32: 26:1a:b6:2f:e2:66:85:77:91:9f:b9:4e:f6:27:27: 78:1b:fd:77:16:36:fc:23:40:ce:e3:7e:9a:be:ae: f3:1f:38:2d:72:7b:bf:be:d0:1e:a5:34:70:1a:36: 37:7a:fb:92:31:0b:f4:44:51:7c:7e:37:f2:68:bc: de:f0:91:1e:dd:08:54:7f:64:c4:63:80:26:67:46: 0e:a4:60:f5:8a:5e:4b:a0:d2:71:f4:ec:30:71:cb: 98:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:30:11:9F:BC:5F:68:46:34:0F:21:A7:6A:FC:00:56:94:EE:EB:A7 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:f6:55:75:57:4e:f2:29:9e:63:97:ba:19:f4:cc:58:c5:48: e1:42:62:e6:37:0c:4e:3b:8b:d4:6b:22:bd:a0:24:0e:3c:68: 4c:96:39:4e:b1:c0:0a:33:41:c0:08:ef:66:c9:23:2b:75:b8: aa:df:76:72:3f:a8:0d:47:9d:14:4c:eb:b3:06:8c:44:de:8c: 63:8a:67:ab:66:67:f4:82:c9:70:e5:df:21:9d:71:4e:7f:61: 34:1d:84:0e:84:68:32:2e:5f:23:96:21:48:16:27:20:7a:d3: 51:30:6d:ae:46:59:7c:5e:b7:94:6f:a5:19:0e:ba:20:83:42: 09:57:7c:9b:4b:17:8c:bf:87:be:4b:3a:17:a9:cb:1b:9e:77: 2e:1c:d4:db:c1:d8:dc:36:44:85:62:d3:73:95:a4:c1:b9:43: 95:7c:e3:90:11:40:3c:b3:c0:1d:25:de:62:88:25:a4:79:12: 35:63:c2:cc:b7:97:da:fb:f9:a1:ac:c8:f3:28:2b:67:bc:da: 1a:e1:e6:6e:64:9b:e8:9c:e6:b4:e1:54:2f:99:86:c9:ed:60: c6:35:26:67:53:1f:3f:06:a9:29:1d:88:01:34:a4:0d:f8:2f: 97:17:6b:22:db:b3:a0:07:c7:1b:63:94:86:97:38:8e:71:77: f8:ae:4e:c4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPv9IdP0xX4Xvt/MRQ0wpa9o527gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MTUwNTI4MTNaFw0yNjA1MTYwOTA4MTNaMDMxMTAvBgNV BAMTKEM4MzAxMTlGQkM1RjY4NDYzNDBGMjFBNzZBRkMwMDU2OTRFRUVCQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO/jGZEyLiW9uwnyd1saxE4XT1 hWH88fQb2DaiwsMv+e6AWLVVsfxLUFtme49tCxZ8m7y6qH0tLc/mN2C4uYvBJ2Fc 0mg3jzQPaaQG5BSGRwzhFWTUnroMvUc+RyxF6tHepnovwsHhIuZLgUFkpLEWdG/8 XfWRYO7PcWta1S/M6PR4Xz8mBgtvRuYNTTfTwxSnN/LdZMSGWrZ1hwBPVq8mOi96 MiYati/iZoV3kZ+5TvYnJ3gb/XcWNvwjQM7jfpq+rvMfOC1ye7++0B6lNHAaNjd6 +5IxC/REUXx+N/JovN7wkR7dCFR/ZMRjgCZnRg6kYPWKXkug0nH07DBxy5jxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUyDARn7xfaEY0DyGnavwAVpTu66cwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPZVdVdO8imeY5e6GfTM WMVI4UJi5jcMTjuL1GsivaAkDjxoTJY5TrHACjNBwAjvZskjK3W4qt92cj+oDUed FEzrswaMRN6MY4pnq2Zn9ILJcOXfIZ1xTn9hNB2EDoRoMi5fI5YhSBYnIHrTUTBt rkZZfF63lG+lGQ66IINCCVd8m0sXjL+Hvks6F6nLG553LhzU28HY3DZEhWLTc5Wk wblDlXzjkBFAPLPAHSXeYoglpHkSNWPCzLeX2vv5oazI8ygrZ7zaGuHmbmSb6Jzm tOFUL5mGye1gxjUmZ1MfPwapKR2IATSkDfgvlxdrItuzoAfHG2OUhpc4jnF3+K5O xA== -----END CERTIFICATE-----Generated at Fri May 15 15:19:15 2026 by rpki-client