$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 5iiT8qURpzD/cfwtahdbVnxbAcc4Hwwcn74gO4tFm+o= Subject key identifier: E9:F9:16:A7:4A:91:28:1B:8D:00:95:23:7C:4F:99:D9:18:31:C8:89 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 5ACAC6E08984B77C83C4C5B769999B4E6609FF3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04D7 Signing time: Tue 12 May 2026 20:41:53 +0000 Manifest this update: Tue 12 May 2026 20:36:53 +0000 Manifest next update: Thu 14 May 2026 00:04:53 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Ys3GAFHvKfTmzPjz1KhRtw+WNpeKaX7ZfKRPR2b/+ZE=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 00:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ca:c6:e0:89:84:b7:7c:83:c4:c5:b7:69:99:9b:4e:66:09:ff:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 12 20:36:53 2026 GMT Not After : May 14 00:04:53 2026 GMT Subject: CN=E9F916A74A91281B8D0095237C4F99D91831C889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ea:a3:ae:ac:3c:b7:27:ce:7e:76:db:25:40: 79:2c:6f:38:cc:f2:92:c1:d7:08:88:fd:41:68:88: 8f:6f:5c:43:cc:82:74:cc:56:a8:e9:8c:0c:92:f5: e7:00:f5:fd:df:2a:fe:b0:b7:74:ab:b3:b4:7b:aa: b0:d6:5e:4b:30:2a:48:06:90:0b:76:4b:27:f6:fd: f7:f8:09:3e:3a:f3:f0:3a:81:bc:e1:47:28:d6:3e: a0:8a:43:21:57:d4:79:45:b5:9b:6b:68:14:7e:49: 6a:54:27:ea:25:27:cd:c2:bf:34:30:98:58:07:63: ef:c5:62:8f:8b:c4:22:74:c2:d5:fc:4f:15:2b:13: bd:13:06:ab:69:cd:2f:21:de:8b:55:70:55:83:1d: d2:52:e9:c3:ad:15:f0:a2:84:81:a6:bd:c5:fb:16: f0:d3:5e:95:04:db:86:c3:a2:98:16:4b:2c:e5:9b: 2b:62:47:0e:2e:41:36:a2:a4:8a:ea:98:76:1e:fd: cf:3e:6f:5b:3f:36:dc:a7:3d:58:53:68:e2:ee:11: e2:76:0d:2a:6a:b1:4a:f8:7b:0b:cd:43:2d:de:9d: 53:e6:84:87:e1:32:6e:35:71:19:51:1c:7f:6f:20: aa:49:21:4c:ab:5d:dd:98:66:41:ae:68:36:0f:42: 6e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F9:16:A7:4A:91:28:1B:8D:00:95:23:7C:4F:99:D9:18:31:C8:89 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:2f:4f:cc:b1:15:77:a3:44:1c:d5:48:a8:12:3d:97:4e:af: 51:df:9f:e8:1e:0e:09:42:5c:8f:cd:6f:f6:70:79:5d:4b:58: b0:35:0c:90:81:88:f4:7c:b1:7f:8c:01:c7:2f:05:fe:58:34: f3:fb:d5:77:12:85:0e:20:56:81:20:ee:bc:18:35:20:e2:aa: b7:f2:35:c4:77:a8:15:59:99:3d:57:0e:f3:29:41:4d:48:a4: c6:aa:69:1f:a6:77:cb:7f:6b:46:b8:e6:df:d4:a2:c0:b6:76: a9:30:f8:e4:2d:da:20:3a:d6:1b:44:88:21:21:ad:5f:dd:a0: 34:1c:6c:20:c1:aa:80:df:f2:c3:d2:19:6c:c4:1e:8a:d4:a5: 67:97:1c:c9:6c:0b:6f:e5:8c:cd:1f:6b:cd:f7:4a:7a:ec:69: dd:47:39:ed:87:0e:28:3c:6e:81:e3:53:d6:74:cc:10:89:e6: b7:bf:20:3c:ae:d0:8f:bd:61:a9:84:5c:63:a1:ff:d1:ff:b4: a5:2d:41:15:1b:ce:77:6d:31:71:bc:60:20:ec:25:58:c6:d0: 15:a9:b0:38:1f:77:63:89:4c:77:11:3b:0e:3b:46:d4:30:5f: f8:75:c2:51:7b:84:c1:2d:8a:d0:1c:2d:09:ed:05:e8:f8:37: 18:c3:9f:86 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWsrG4ImEt3yDxMW3aZmbTmYJ/zswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MTIyMDM2NTNaFw0yNjA1MTQwMDA0NTNaMDMxMTAvBgNV BAMTKEU5RjkxNkE3NEE5MTI4MUI4RDAwOTUyMzdDNEY5OUQ5MTgzMUM4ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD6qOurDy3J85+dtslQHksbzjM 8pLB1wiI/UFoiI9vXEPMgnTMVqjpjAyS9ecA9f3fKv6wt3Srs7R7qrDWXkswKkgG kAt2Syf2/ff4CT468/A6gbzhRyjWPqCKQyFX1HlFtZtraBR+SWpUJ+olJ83CvzQw mFgHY+/FYo+LxCJ0wtX8TxUrE70TBqtpzS8h3otVcFWDHdJS6cOtFfCihIGmvcX7 FvDTXpUE24bDopgWSyzlmytiRw4uQTaipIrqmHYe/c8+b1s/NtynPVhTaOLuEeJ2 DSpqsUr4ewvNQy3enVPmhIfhMm41cRlRHH9vIKpJIUyrXd2YZkGuaDYPQm5pAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6fkWp0qRKBuNAJUjfE+Z2RgxyIkwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAby9PzLEVd6NEHNVIqBI9 l06vUd+f6B4OCUJcj81v9nB5XUtYsDUMkIGI9Hyxf4wBxy8F/lg08/vVdxKFDiBW gSDuvBg1IOKqt/I1xHeoFVmZPVcO8ylBTUikxqppH6Z3y39rRrjm39SiwLZ2qTD4 5C3aIDrWG0SIISGtX92gNBxsIMGqgN/yw9IZbMQeitSlZ5ccyWwLb+WMzR9rzfdK euxp3Uc57YcOKDxugeNT1nTMEInmt78gPK7Qj71hqYRcY6H/0f+0pS1BFRvOd20x cbxgIOwlWMbQFamwOB93Y4lMdxE7DjtG1DBf+HXCUXuEwS2K0BwtCe0F6Pg3GMOf hg== -----END CERTIFICATE-----Generated at Wed May 13 10:45:47 2026 by rpki-client