$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: U4upVMvllBi87SiewYlfwyAb0qZS33NX/dYNG5Qfjf0= Subject key identifier: 17:72:D7:E1:AA:1D:2D:85:45:EB:98:AB:33:ED:5B:F1:D2:0A:5E:9D Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 3ABD2F928C0067C34A782DE53F88020C145A21BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04B2 Signing time: Wed 15 Apr 2026 05:29:27 +0000 Manifest this update: Wed 15 Apr 2026 05:24:27 +0000 Manifest next update: Thu 16 Apr 2026 05:40:27 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: bDQFwecwNN47vrTF+q70tcAMqUIdr6hOLU+vQOUmRfk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 16 Apr 2026 05:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:bd:2f:92:8c:00:67:c3:4a:78:2d:e5:3f:88:02:0c:14:5a:21:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 15 05:24:27 2026 GMT Not After : Apr 16 05:40:27 2026 GMT Subject: CN=1772D7E1AA1D2D8545EB98AB33ED5BF1D20A5E9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5d:a6:2f:19:26:d2:01:92:0e:9e:7f:82:28: 37:47:91:4f:cf:2e:a1:c8:91:49:8e:ab:ae:93:29: 29:bd:21:68:ce:a7:1c:2d:e2:bc:a9:f0:f6:2d:48: 08:7a:d2:1f:26:e4:35:72:68:b5:af:a3:ea:bc:22: 41:e5:b9:fc:13:02:34:b6:e0:eb:bd:7a:1e:81:09: 2c:c8:f0:b0:1b:9d:31:8a:c1:b9:50:45:d4:f5:ed: 20:58:0b:d3:3c:73:aa:40:42:0a:3a:38:fd:76:fe: a7:a3:81:c1:10:51:e2:8a:7f:ed:cb:7c:8c:4a:26: e4:4b:da:66:31:2b:53:39:a7:ac:ce:e8:e9:16:35: a6:73:a1:5d:7d:13:bb:a9:3b:1b:bd:ff:58:18:20: 70:23:77:22:84:90:93:31:55:31:ba:a1:eb:51:5f: 6a:ac:7c:dd:71:e3:99:c9:4e:07:02:32:29:3f:b2: 20:17:1c:83:a7:0f:68:76:49:05:bc:e7:8b:ce:32: 42:03:95:59:72:45:56:14:4c:0d:8b:a0:53:9d:7d: 58:66:2a:93:14:9f:01:39:b8:df:61:69:e6:4b:d8: 2a:dd:be:d8:48:54:c8:92:d9:16:4a:9c:5f:8f:81: 49:2a:8e:a8:10:e8:2c:76:56:15:ef:d3:f6:74:5d: 3d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:72:D7:E1:AA:1D:2D:85:45:EB:98:AB:33:ED:5B:F1:D2:0A:5E:9D X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:8e:47:66:44:89:ee:e5:78:0e:9f:43:94:36:5c:49:c6:05: 09:87:17:60:65:6d:da:51:4d:74:40:9f:16:16:8c:91:5c:de: fa:74:30:a5:23:7d:6e:92:99:23:ba:a2:1e:12:67:12:a9:71: 0e:0e:77:82:50:d2:11:07:48:0b:58:02:2a:2d:30:6e:fa:0f: c0:36:c2:f4:89:19:db:e0:7a:86:71:b5:d7:88:02:20:f4:b7: f3:c8:9c:e0:3e:39:16:f2:41:ee:be:77:8d:28:69:30:5f:05: 39:83:4f:5a:fd:21:1e:4c:7b:37:6f:3b:d9:b2:f0:0a:6e:08: 6e:ff:f2:db:16:0a:39:4e:a1:8b:9b:04:4f:ae:c3:02:b7:ab: 7a:3f:e5:4a:1b:ed:81:53:c5:75:0c:6f:7c:71:8c:3b:8d:ac: dc:8a:b0:62:bd:7f:df:af:f1:97:d5:62:18:ac:ae:26:4f:3b: 02:6e:25:42:fb:88:5d:b0:dd:c8:78:a3:64:e6:11:dd:6d:bd: d9:3d:ba:9b:ff:09:14:b2:16:2b:7e:6b:7f:34:85:f2:55:60: 51:61:2a:fe:82:ff:e2:3d:ac:e9:06:55:1e:e1:2a:59:e7:98: 6b:9a:42:f6:be:e6:eb:1e:5f:b9:4f:0d:cb:b3:cf:89:36:89: 45:73:02:2f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOr0vkowAZ8NKeC3lP4gCDBRaIb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA0MTUwNTI0MjdaFw0yNjA0MTYwNTQwMjdaMDMxMTAvBgNV BAMTKDE3NzJEN0UxQUExRDJEODU0NUVCOThBQjMzRUQ1QkYxRDIwQTVFOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCXaYvGSbSAZIOnn+CKDdHkU/P LqHIkUmOq66TKSm9IWjOpxwt4ryp8PYtSAh60h8m5DVyaLWvo+q8IkHlufwTAjS2 4Ou9eh6BCSzI8LAbnTGKwblQRdT17SBYC9M8c6pAQgo6OP12/qejgcEQUeKKf+3L fIxKJuRL2mYxK1M5p6zO6OkWNaZzoV19E7upOxu9/1gYIHAjdyKEkJMxVTG6oetR X2qsfN1x45nJTgcCMik/siAXHIOnD2h2SQW854vOMkIDlVlyRVYUTA2LoFOdfVhm KpMUnwE5uN9haeZL2CrdvthIVMiS2RZKnF+PgUkqjqgQ6Cx2VhXv0/Z0XT2nAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUF3LX4aodLYVF65irM+1b8dIKXp0wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh45HZkSJ7uV4Dp9DlDZc ScYFCYcXYGVt2lFNdECfFhaMkVze+nQwpSN9bpKZI7qiHhJnEqlxDg53glDSEQdI C1gCKi0wbvoPwDbC9IkZ2+B6hnG114gCIPS388ic4D45FvJB7r53jShpMF8FOYNP Wv0hHkx7N2872bLwCm4Ibv/y2xYKOU6hi5sET67DArerej/lShvtgVPFdQxvfHGM O42s3IqwYr1/36/xl9ViGKyuJk87Am4lQvuIXbDdyHijZOYR3W292T26m/8JFLIW K35rfzSF8lVgUWEq/oL/4j2s6QZVHuEqWeeYa5pC9r7m6x5fuU8Ny7PPiTaJRXMC Lw== -----END CERTIFICATE-----Generated at Wed Apr 15 20:35:39 2026 by rpki-client