$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: MrvwmMrgc65TQvO+7tGAyIPOe/3Z/KjeR/ucfqU0tRo= Subject key identifier: 1C:DD:97:50:7F:14:95:05:18:13:39:A8:AB:91:F7:D0:94:9F:32:9C Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 21BF3E39B0E8D48E3A5E0F91599331D81104F0B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0538 Signing time: Sat 25 Jul 2026 12:02:44 +0000 Manifest this update: Sat 25 Jul 2026 11:57:44 +0000 Manifest next update: Sun 26 Jul 2026 13:23:44 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: W8j/WsTaEFB13yT43ePeETpnu2KBrDu0yExUstOP5TQ=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Jul 2026 11:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:bf:3e:39:b0:e8:d4:8e:3a:5e:0f:91:59:93:31:d8:11:04:f0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 25 11:57:44 2026 GMT Not After : Jul 26 13:23:44 2026 GMT Subject: CN=1CDD97507F149505181339A8AB91F7D0949F329C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:b9:a8:c4:ca:bd:91:5b:67:5b:b2:c5:8a:89: 46:23:45:35:9f:9f:9d:b1:df:e3:c8:6b:e0:06:a7: bc:f0:bd:48:01:c2:5b:1f:3e:6a:b8:a3:a2:37:9a: 43:29:80:57:4c:95:b6:4a:1a:77:1f:45:e7:db:34: 50:f0:4b:a9:06:06:05:3d:7e:c2:ca:c3:7d:d7:10: 62:19:6b:cc:6f:83:c9:57:f0:20:e7:ad:ce:f8:bd: ce:15:95:c7:da:a2:48:d0:02:ee:c3:a7:6d:91:ad: 38:09:5e:46:0f:03:70:ae:02:ca:76:3b:26:ce:aa: ca:b9:86:6b:88:ea:63:6b:53:ec:79:30:19:9a:22: ed:c8:bf:ab:b0:30:dd:55:be:fa:17:86:ec:70:c4: eb:ec:43:74:85:3f:9e:3b:d5:b3:59:81:4d:66:e4: 5c:d4:f1:0a:1b:9e:1a:db:4c:68:63:98:ab:6a:e7: 87:ec:43:2a:e4:2e:54:32:de:9f:a2:a9:ed:2a:51: dc:b7:56:2d:da:e5:f1:4c:76:98:02:f5:3f:ef:bb: 3c:70:4c:c5:87:8b:26:5a:d5:87:e1:18:f6:17:0e: ee:87:5e:5e:86:3c:c6:81:35:66:95:f5:73:02:03: 34:4d:fe:f4:c2:c2:94:2d:6a:a2:80:19:a3:8d:9b: 19:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DD:97:50:7F:14:95:05:18:13:39:A8:AB:91:F7:D0:94:9F:32:9C X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:1c:65:51:f0:11:60:ed:c1:f0:1b:f7:9d:97:f7:2c:10:5f: 71:2e:78:0a:f2:96:6c:a7:65:b1:43:24:c2:2e:eb:83:20:a4: 03:9c:31:ee:8a:3d:a6:92:2c:29:08:a4:cd:ed:a1:f0:a1:cc: 61:cb:cc:00:28:f1:f9:33:ab:e6:b8:8c:4f:fe:94:ff:2e:a8: d6:be:dd:71:fc:fc:7c:05:dc:25:f8:94:4a:31:d0:9b:fe:46: 11:df:be:25:f2:ac:6c:8c:19:88:0b:50:ef:34:52:24:59:54: d6:d5:4e:6d:5f:93:f8:f7:72:ba:c7:e9:20:33:e5:9e:cf:e1: 17:f6:dc:60:1b:c9:2f:e9:d7:28:4e:41:f2:ec:d7:f8:fd:2a: 9d:e6:08:6c:36:25:bc:7d:a8:80:95:c2:a3:cb:b9:79:ee:f8: 85:6e:03:f9:3a:5e:24:41:39:71:48:6a:16:52:df:b9:d8:3b: 8c:71:ae:f7:f9:47:37:78:45:0c:ce:74:1d:61:f6:ad:61:e9: e2:53:b1:d2:f8:f4:22:7f:68:51:fb:05:23:78:05:28:5d:0f: 22:fc:31:76:12:ff:86:e5:1c:36:3e:1e:c4:57:af:59:01:58: dc:cf:13:c2:13:6f:25:a2:c6:2e:2b:74:d9:0d:9b:b2:dc:23: fa:36:25:d6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIb8+ObDo1I46Xg+RWZMx2BEE8LEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MjUxMTU3NDRaFw0yNjA3MjYxMzIzNDRaMDMxMTAvBgNV BAMTKDFDREQ5NzUwN0YxNDk1MDUxODEzMzlBOEFCOTFGN0QwOTQ5RjMyOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+uajEyr2RW2dbssWKiUYjRTWf n52x3+PIa+AGp7zwvUgBwlsfPmq4o6I3mkMpgFdMlbZKGncfRefbNFDwS6kGBgU9 fsLKw33XEGIZa8xvg8lX8CDnrc74vc4VlcfaokjQAu7Dp22RrTgJXkYPA3CuAsp2 OybOqsq5hmuI6mNrU+x5MBmaIu3Iv6uwMN1VvvoXhuxwxOvsQ3SFP5471bNZgU1m 5FzU8QobnhrbTGhjmKtq54fsQyrkLlQy3p+iqe0qUdy3Vi3a5fFMdpgC9T/vuzxw TMWHiyZa1YfhGPYXDu6HXl6GPMaBNWaV9XMCAzRN/vTCwpQtaqKAGaONmxmHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHN2XUH8UlQUYEzmoq5H30JSfMpwwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhxlUfARYO3B8Bv3nZf3 LBBfcS54CvKWbKdlsUMkwi7rgyCkA5wx7oo9ppIsKQikze2h8KHMYcvMACjx+TOr 5riMT/6U/y6o1r7dcfz8fAXcJfiUSjHQm/5GEd++JfKsbIwZiAtQ7zRSJFlU1tVO bV+T+PdyusfpIDPlns/hF/bcYBvJL+nXKE5B8uzX+P0qneYIbDYlvH2ogJXCo8u5 ee74hW4D+TpeJEE5cUhqFlLfudg7jHGu9/lHN3hFDM50HWH2rWHp4lOx0vj0In9o UfsFI3gFKF0PIvwxdhL/huUcNj4exFevWQFY3M8TwhNvJaLGLit02Q2bstwj+jYl 1g== -----END CERTIFICATE-----Generated at Sat Jul 25 18:58:38 2026 by rpki-client