$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: sjAZOJmEgtDGxABxSAn3LBW98budoHNFwPbdOztLXbY= Subject key identifier: 79:46:59:26:68:E9:77:49:10:28:AE:B7:9F:CC:6D:64:0C:FA:B3:09 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 1E26B657646C0F9CF53789498DF74FBC6A9960C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0559 Signing time: Wed 19 Aug 2026 04:20:58 +0000 Manifest this update: Wed 19 Aug 2026 04:15:58 +0000 Manifest next update: Thu 20 Aug 2026 05:09:58 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Z8oWWbIKwOZvHeyQezdBIFrnP7PvrMHAx6aqYQy+V9k=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Aug 2026 05:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:26:b6:57:64:6c:0f:9c:f5:37:89:49:8d:f7:4f:bc:6a:99:60:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 19 04:15:58 2026 GMT Not After : Aug 20 05:09:58 2026 GMT Subject: CN=7946592668E977491028AEB79FCC6D640CFAB309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e1:0a:b7:55:4c:aa:b5:a5:4f:b1:63:88:ac: bd:8f:c1:4f:95:73:27:5a:47:53:15:0d:b2:b0:6c: 64:55:5a:f6:b7:40:4c:c9:ff:f3:91:05:f3:cd:65: b0:36:85:75:1d:24:cb:ff:de:11:f6:98:61:2d:97: f0:46:e2:42:07:e7:2a:68:db:3d:8a:c4:e8:a3:98: a9:c7:48:f3:1a:c6:56:f6:5e:f4:da:ac:26:fb:dd: 7a:c9:5f:2b:95:0c:dd:e7:7b:d2:f3:97:59:5a:39: 5b:e6:f0:d9:ee:26:48:75:66:af:bf:d9:40:bc:7a: a2:b8:87:08:7b:37:00:3f:5f:75:6c:27:a1:67:fd: 96:ac:15:d7:51:42:39:1d:94:53:82:bc:22:fe:f6: 13:d4:b4:cf:c4:57:d2:82:10:2c:57:3d:6c:9c:63: a3:c4:37:0d:47:cd:f7:1a:3b:37:90:bd:d7:f5:62: 2d:d8:c5:d4:7f:94:5f:08:10:6e:d6:43:94:5d:55: cb:1f:bd:3b:0d:73:6e:99:f2:07:de:4d:fe:5e:aa: 98:76:15:23:cb:34:dc:da:0d:a2:bf:82:e3:5f:30: c4:53:4a:36:4a:77:a8:af:72:e2:5b:8d:c1:e7:46: 1a:c6:95:4a:5a:7f:57:7b:81:3b:0b:74:77:2b:9b: 61:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:46:59:26:68:E9:77:49:10:28:AE:B7:9F:CC:6D:64:0C:FA:B3:09 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ed:d6:1f:7e:ca:2a:5f:ec:59:02:79:be:47:a7:9e:be:f5: a0:b7:62:13:cd:5d:e2:48:43:39:6d:8e:de:49:4a:79:ab:9a: 47:28:a8:8c:60:4f:e8:9c:3f:6f:20:f7:3b:1a:0e:cf:f4:4f: 30:fb:04:64:5b:a1:d5:9e:46:2c:98:75:e6:8f:46:35:44:a8: 83:03:8e:12:c7:8c:15:8a:75:ea:96:19:cf:60:23:64:e0:0a: af:57:1d:8f:2f:1b:a1:25:86:50:10:19:34:e2:c2:5d:e1:ed: f4:4a:84:00:a2:f3:2e:31:8d:bb:5e:1b:c5:09:de:a3:38:4e: 21:e2:b4:60:d9:c5:29:ee:75:02:1d:1e:bc:c5:e4:c8:b2:ce: f3:e2:f0:d8:3a:fd:b8:a7:f5:60:30:87:1e:3b:1e:80:eb:f9: e8:53:35:8b:e4:57:ef:8a:02:43:b8:ec:f9:5f:3c:35:b8:9f: 1e:61:aa:31:42:52:4b:e3:3c:3e:62:c9:cf:4e:0a:85:6a:18: 08:44:c2:36:55:f2:df:77:eb:72:f6:5f:68:33:a5:fc:79:f1: 54:ea:4c:e4:b3:28:bb:47:2d:d7:53:18:b8:e9:84:bc:f7:65: 34:b0:9d:15:47:6c:c1:c6:fa:67:9d:dc:7f:92:96:ed:6f:ca: 57:f5:a9:c1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHia2V2RsD5z1N4lJjfdPvGqZYMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MTkwNDE1NThaFw0yNjA4MjAwNTA5NThaMDMxMTAvBgNV BAMTKDc5NDY1OTI2NjhFOTc3NDkxMDI4QUVCNzlGQ0M2RDY0MENGQUIzMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe4Qq3VUyqtaVPsWOIrL2PwU+V cydaR1MVDbKwbGRVWva3QEzJ//ORBfPNZbA2hXUdJMv/3hH2mGEtl/BG4kIH5ypo 2z2KxOijmKnHSPMaxlb2XvTarCb73XrJXyuVDN3ne9Lzl1laOVvm8NnuJkh1Zq+/ 2UC8eqK4hwh7NwA/X3VsJ6Fn/ZasFddRQjkdlFOCvCL+9hPUtM/EV9KCECxXPWyc Y6PENw1HzfcaOzeQvdf1Yi3YxdR/lF8IEG7WQ5RdVcsfvTsNc26Z8gfeTf5eqph2 FSPLNNzaDaK/guNfMMRTSjZKd6ivcuJbjcHnRhrGlUpaf1d7gTsLdHcrm2FnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUeUZZJmjpd0kQKK63n8xtZAz6swkwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALO3WH37KKl/sWQJ5vken nr71oLdiE81d4khDOW2O3klKeauaRyiojGBP6Jw/byD3OxoOz/RPMPsEZFuh1Z5G LJh15o9GNUSogwOOEseMFYp16pYZz2AjZOAKr1cdjy8boSWGUBAZNOLCXeHt9EqE AKLzLjGNu14bxQneozhOIeK0YNnFKe51Ah0evMXkyLLO8+Lw2Dr9uKf1YDCHHjse gOv56FM1i+RX74oCQ7js+V88NbifHmGqMUJSS+M8PmLJz04KhWoYCETCNlXy33fr cvZfaDOl/HnxVOpM5LMou0ct11MYuOmEvPdlNLCdFUdswcb6Z53cf5KW7W/KV/Wp wQ== -----END CERTIFICATE-----Generated at Wed Aug 19 18:26:15 2026 by rpki-client