$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: CVFIXgpBfb9BypSFU6EqPkb1yUER3EeS5DUDDjgXMyo= Subject key identifier: 97:DE:F2:09:F6:F5:C6:CE:20:9F:9C:39:9F:42:83:7A:D5:58:E5:E1 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 1388F5D55465C651CFE4AE8C01B09087A5DAB275 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 055F Signing time: Sun 23 Aug 2026 16:37:34 +0000 Manifest this update: Sun 23 Aug 2026 16:32:34 +0000 Manifest next update: Mon 24 Aug 2026 19:58:34 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 8BLmSmCLbBDcjB1knDKnQT59IPuLUtOP9npxMwLmXTw=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Aug 2026 19:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:88:f5:d5:54:65:c6:51:cf:e4:ae:8c:01:b0:90:87:a5:da:b2:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 23 16:32:34 2026 GMT Not After : Aug 24 19:58:34 2026 GMT Subject: CN=97DEF209F6F5C6CE209F9C399F42837AD558E5E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:e3:e1:30:43:9f:5a:ff:13:3e:70:43:4b: 03:81:44:eb:a2:fb:56:ad:6a:4f:bb:fb:b1:e9:dc: 96:71:00:a8:94:8e:c0:9c:a3:3f:04:f5:de:1b:26: 3f:e0:ef:6d:1e:c7:0f:52:5e:72:14:49:c2:8d:1b: 5c:86:bd:6e:b1:2b:e1:52:65:7c:58:c4:7d:14:d9: c7:1e:78:66:30:5b:80:fd:ac:a7:23:a2:1b:76:b1: 20:e2:e1:51:a8:a1:80:fe:c1:98:5b:af:22:6c:fd: c0:7e:7b:ae:1c:08:4e:f7:68:8f:04:96:96:52:5f: 6b:75:12:0d:24:b2:ed:d7:2e:da:ce:18:28:46:c7: 0e:10:11:67:7f:50:4c:05:60:d1:87:aa:be:14:f3: 76:d9:dd:f5:c4:e0:36:fb:88:2f:0c:9e:da:1c:7f: ed:88:e4:82:f6:93:9a:e4:4f:b2:a2:50:f2:27:60: 2c:58:20:ad:3c:bb:b3:d7:af:e5:dc:d1:63:a4:92: 9d:f6:f0:00:75:cf:ea:8d:69:b8:b0:08:7f:13:b6: 66:b5:af:e4:4d:b5:ab:05:61:98:7b:6c:c7:06:2d: d5:a2:54:51:fb:1f:78:bb:89:a5:5a:c7:78:98:49: e6:02:a3:7f:7e:df:57:a2:ba:d2:a6:81:59:aa:35: cf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DE:F2:09:F6:F5:C6:CE:20:9F:9C:39:9F:42:83:7A:D5:58:E5:E1 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:c4:f6:d5:91:0b:9d:d1:b2:ca:e3:ab:44:67:f6:80:a4:be: 78:95:69:2c:f2:da:bc:4f:3b:da:b9:57:8f:c3:bc:9d:14:e8: 26:8e:60:63:ba:95:f6:56:bb:df:0a:bf:16:7e:2c:5d:8e:aa: 17:0d:fd:dc:d0:81:84:bf:81:b6:ec:10:3b:fd:7e:1f:f1:9b: 5c:8b:98:ed:1e:b1:31:7d:3c:8b:bb:80:5a:c9:f5:fb:04:b0: a4:aa:5f:51:4a:b0:e1:18:23:0d:40:56:3f:55:8d:31:8e:75: 46:43:03:be:4f:b2:7f:d8:71:59:9a:d1:d4:ea:81:e0:40:51: 4d:57:25:9f:84:21:9a:77:dc:56:ab:d8:13:ef:9b:e2:69:84: fc:7d:6a:50:a4:5d:eb:5f:d5:02:6e:50:76:41:f4:03:62:e1: 69:34:e9:8d:62:28:1f:d3:8f:22:90:68:1d:ac:78:0a:b3:a8: 88:da:31:75:89:3c:04:e7:4f:6e:5b:e1:34:54:a0:83:59:d7: 16:3a:9b:6f:b5:64:01:b4:83:ee:d0:c1:a0:85:b8:54:17:dd: 68:e4:d2:eb:8f:8c:ff:e4:61:71:09:86:5c:7b:12:33:43:b7: e7:2c:c2:2e:28:cd:f2:fc:ed:ae:f5:85:30:c7:ab:d1:af:a7: 3f:79:b7:c0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUE4j11VRlxlHP5K6MAbCQh6XasnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MjMxNjMyMzRaFw0yNjA4MjQxOTU4MzRaMDMxMTAvBgNV BAMTKDk3REVGMjA5RjZGNUM2Q0UyMDlGOUMzOTlGNDI4MzdBRDU1OEU1RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHh+PhMEOfWv8TPnBDSwOBROui +1atak+7+7Hp3JZxAKiUjsCcoz8E9d4bJj/g720exw9SXnIUScKNG1yGvW6xK+FS ZXxYxH0U2cceeGYwW4D9rKcjoht2sSDi4VGooYD+wZhbryJs/cB+e64cCE73aI8E lpZSX2t1Eg0ksu3XLtrOGChGxw4QEWd/UEwFYNGHqr4U83bZ3fXE4Db7iC8Mntoc f+2I5IL2k5rkT7KiUPInYCxYIK08u7PXr+Xc0WOkkp328AB1z+qNabiwCH8Ttma1 r+RNtasFYZh7bMcGLdWiVFH7H3i7iaVax3iYSeYCo39+31eiutKmgVmqNc99AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUl97yCfb1xs4gn5w5n0KDetVY5eEwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcT21ZELndGyyuOrRGf2 gKS+eJVpLPLavE872rlXj8O8nRToJo5gY7qV9la73wq/Fn4sXY6qFw393NCBhL+B tuwQO/1+H/GbXIuY7R6xMX08i7uAWsn1+wSwpKpfUUqw4RgjDUBWP1WNMY51RkMD vk+yf9hxWZrR1OqB4EBRTVcln4QhmnfcVqvYE++b4mmE/H1qUKRd61/VAm5QdkH0 A2LhaTTpjWIoH9OPIpBoHax4CrOoiNoxdYk8BOdPblvhNFSgg1nXFjqbb7VkAbSD 7tDBoIW4VBfdaOTS64+M/+RhcQmGXHsSM0O35yzCLijN8vztrvWFMMer0a+nP3m3 wA== -----END CERTIFICATE-----Generated at Mon Aug 24 04:34:55 2026 by rpki-client