$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: pVFK1/GWroe9LBmlOqQRZZsqylr5GEnfpMxLwGj3W9M= Subject key identifier: BC:47:87:68:1E:5A:F7:EB:12:4F:63:88:37:43:87:50:57:44:F6:D1 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 12FC4E5706E86F857DB2DFB226D87096FD04816B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04E1 Signing time: Wed 20 May 2026 07:46:23 +0000 Manifest this update: Wed 20 May 2026 07:41:23 +0000 Manifest next update: Thu 21 May 2026 10:21:23 +0000 Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: yRSzrf/LZsYnJTS9c2aFYF/1pl5oOIjLBDlahbotOCI=) 4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 May 2026 10:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:fc:4e:57:06:e8:6f:85:7d:b2:df:b2:26:d8:70:96:fd:04:81:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 20 07:41:23 2026 GMT Not After : May 21 10:21:23 2026 GMT Subject: CN=BC4787681E5AF7EB124F6388374387505744F6D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:77:e4:d8:7c:8a:f9:28:e8:55:e5:04:99: d8:4e:8a:57:1b:a3:f9:49:af:21:30:19:37:78:8f: f3:ca:39:b8:e8:e2:ee:b7:cc:11:ef:8e:76:e4:5b: 4f:7b:a4:a8:52:77:51:0b:d7:9f:a5:ae:47:af:d4: e5:4d:4a:89:bb:7e:f9:5e:05:46:61:8e:f5:15:d1: 91:84:f6:56:db:39:52:7c:ad:47:0a:c8:a6:1e:0d: 0a:ee:72:6c:aa:1c:74:43:20:5a:99:8c:16:c9:34: d1:4e:2f:23:9b:40:ad:e1:80:dd:b3:0a:0b:38:11: 48:74:74:c6:17:de:98:37:03:3f:64:58:82:c7:ca: d0:f2:76:95:66:6c:fa:16:36:1b:e7:c0:af:25:46: 95:cf:37:f6:4b:b2:15:e1:3b:a3:94:ea:f9:10:e1: 81:35:5c:a9:b3:ae:7a:98:55:8d:88:bb:cf:35:c7: 2a:66:c3:af:1d:c0:4f:21:c5:9e:5b:c4:c1:a5:dc: ea:09:74:21:30:4e:86:12:ea:a9:66:ef:9e:03:07: d9:c5:c6:7a:b8:e1:7d:6e:4a:fd:cb:5e:bd:99:32: c8:c4:12:0a:f3:04:01:2f:d5:2f:b6:d7:34:1a:6a: 96:aa:80:ec:27:3e:c1:2a:5b:ca:97:67:2d:8d:82: 80:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:47:87:68:1E:5A:F7:EB:12:4F:63:88:37:43:87:50:57:44:F6:D1 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:13:f3:9a:b8:d4:7c:a5:c8:34:19:97:06:89:ef:5e:f9:72: c4:3e:72:eb:51:fb:4c:df:d5:e6:e9:9c:0b:57:55:15:f8:eb: 5c:b1:c3:41:d9:31:2a:ba:34:a9:e3:16:92:fa:9a:00:84:c5: e7:f4:77:60:b2:4e:45:87:72:89:33:73:92:1b:44:26:9b:f4: cd:6c:be:e0:93:b1:a8:2d:21:ca:4e:a5:1f:3b:73:f6:4d:3a: 83:e9:c2:3d:61:82:cc:a8:80:53:dc:c1:cb:a2:13:27:81:e7: a4:13:a8:81:67:c4:2d:56:97:64:0c:2f:75:6e:c0:d3:a4:98: f3:3e:11:98:fa:ad:63:09:97:9a:0c:cf:1e:a6:a1:e4:a5:ef: 84:8f:59:4f:99:39:0a:f8:a0:5a:f6:db:d8:57:25:31:45:10: bf:76:7d:b6:44:25:ad:2b:46:49:47:eb:ac:61:3c:54:3d:1d: 75:f9:a6:cc:c3:22:fe:9c:a7:0f:7c:f9:0f:3d:09:c8:3a:73: 31:89:d5:8e:1c:7f:23:28:15:fb:f3:96:f0:c0:1c:45:c3:c7: c7:9f:c2:a0:29:f8:d2:a1:74:59:46:77:7d:33:37:5b:9a:52: 5b:80:08:04:ae:a3:e8:72:4c:68:35:74:0f:8d:5f:a5:6f:cf: bf:75:13:d1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEvxOVwbob4V9st+yJthwlv0EgWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MjAwNzQxMjNaFw0yNjA1MjExMDIxMjNaMDMxMTAvBgNV BAMTKEJDNDc4NzY4MUU1QUY3RUIxMjRGNjM4ODM3NDM4NzUwNTc0NEY2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkXfk2HyK+SjoVeUEmdhOilcb o/lJryEwGTd4j/PKObjo4u63zBHvjnbkW097pKhSd1EL15+lrkev1OVNSom7fvle BUZhjvUV0ZGE9lbbOVJ8rUcKyKYeDQrucmyqHHRDIFqZjBbJNNFOLyObQK3hgN2z Cgs4EUh0dMYX3pg3Az9kWILHytDydpVmbPoWNhvnwK8lRpXPN/ZLshXhO6OU6vkQ 4YE1XKmzrnqYVY2Iu881xypmw68dwE8hxZ5bxMGl3OoJdCEwToYS6qlm754DB9nF xnq44X1uSv3LXr2ZMsjEEgrzBAEv1S+21zQaapaqgOwnPsEqW8qXZy2NgoBHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvEeHaB5a9+sST2OIN0OHUFdE9tEwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRPzmrjUfKXINBmXBonv XvlyxD5y61H7TN/V5umcC1dVFfjrXLHDQdkxKro0qeMWkvqaAITF5/R3YLJORYdy iTNzkhtEJpv0zWy+4JOxqC0hyk6lHztz9k06g+nCPWGCzKiAU9zBy6ITJ4HnpBOo gWfELVaXZAwvdW7A06SY8z4RmPqtYwmXmgzPHqah5KXvhI9ZT5k5CvigWvbb2Fcl MUUQv3Z9tkQlrStGSUfrrGE8VD0ddfmmzMMi/pynD3z5Dz0JyDpzMYnVjhx/IygV +/OW8MAcRcPHx5/CoCn40qF0WUZ3fTM3W5pSW4AIBK6j6HJMaDV0D41fpW/Pv3UT 0Q== -----END CERTIFICATE-----Generated at Wed May 20 19:13:52 2026 by rpki-client