$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: jg13j7nWpWFFPBOxA0yKQF/Qhl6fDR6mt6tjP/vjw6o= Subject key identifier: E9:C8:DC:42:B6:E6:DF:08:AC:1D:92:B6:E0:20:4F:E4:B7:41:D7:05 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 1D30B0B667BDE7F5A0C10A1BD0438DBFE249B8AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04C5 Signing time: Wed 29 Apr 2026 07:57:04 +0000 Manifest this update: Wed 29 Apr 2026 07:52:04 +0000 Manifest next update: Thu 30 Apr 2026 11:42:04 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: AqPNkroHILPpCBP2Us++3FuPvSV0/0HkDL67N0XXR7Q=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Apr 2026 07:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:30:b0:b6:67:bd:e7:f5:a0:c1:0a:1b:d0:43:8d:bf:e2:49:b8:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 29 07:52:04 2026 GMT Not After : Apr 30 11:42:04 2026 GMT Subject: CN=E9C8DC42B6E6DF08AC1D92B6E0204FE4B741D705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ac:c2:05:5e:54:ed:23:45:ef:45:dd:21:e9: fe:e2:81:10:b1:b0:f2:5b:a2:51:4c:3a:cd:bd:3b: 85:03:e4:ca:23:c2:83:12:44:50:ef:88:00:d7:45: c7:a1:fc:33:35:31:a4:62:04:6f:3a:2b:41:38:e7: cd:91:ee:39:7c:de:82:0c:88:0f:71:9c:60:c9:57: 68:83:41:38:24:07:2b:85:59:01:54:9b:08:3d:82: 87:f2:ee:df:06:2a:33:0c:b6:63:32:13:42:69:08: 7a:b9:db:ed:c4:a3:77:2f:d3:01:23:3e:a4:71:7e: 8f:99:26:6d:11:4e:62:4f:32:3a:30:f3:2a:22:11: de:0c:95:78:bb:a8:07:6e:6c:82:b8:55:24:8f:a3: ec:1f:25:4b:1e:16:09:69:77:3f:4b:e3:e0:c4:e4: 70:e3:63:b5:a4:81:eb:aa:34:91:79:f1:d8:01:c7: 99:38:b7:3a:52:f7:9f:0e:13:37:14:b5:40:f2:8f: 1a:e2:74:78:81:39:f0:be:e4:f1:b0:14:f6:9b:59: c2:84:bd:28:e0:25:41:b2:05:98:6d:47:55:08:67: 34:cd:a7:ba:88:32:33:2d:10:b0:4d:7e:37:f2:5e: 56:12:e9:b5:11:f9:06:87:20:0f:d9:24:a2:06:c5: 89:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C8:DC:42:B6:E6:DF:08:AC:1D:92:B6:E0:20:4F:E4:B7:41:D7:05 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:3b:35:60:f2:6b:33:6c:99:6d:c2:c8:0e:c7:29:5c:65:d7: bd:1e:a3:c8:0b:b3:a4:b3:7a:e2:81:8f:32:cd:5b:10:dc:ca: 95:8b:33:bf:02:d4:04:f6:20:09:05:24:55:bd:1f:d7:3d:1a: 8b:f3:83:60:d0:30:9f:34:0c:29:e1:1c:89:c0:b8:98:d5:d9: 49:ab:7f:42:7e:a1:9f:d6:4a:48:ea:2f:da:b7:b6:30:e5:0d: b9:8b:5d:f3:b1:e4:54:31:5e:66:56:f7:b0:f6:c3:dd:32:e8: 8a:54:37:c2:89:aa:8d:2c:cb:6c:8d:87:69:9d:93:5e:82:08: ba:6d:9d:9b:da:3a:fc:fd:4e:8b:1c:17:eb:a6:8d:c8:95:a5: 55:b0:47:63:2a:09:7a:c9:d0:26:9c:5d:e3:3a:a7:bb:96:8b: a0:58:6d:64:24:79:8a:a6:f5:6b:bf:f6:a6:58:5d:21:cd:45: 47:e4:93:1a:fe:c7:8a:84:dc:b8:7a:f4:7c:a0:7c:47:73:50: 22:a2:99:65:d8:65:6f:4a:5b:92:c7:5d:68:27:28:27:0f:50: 45:31:e3:3c:42:31:c2:15:89:a2:68:ba:a7:a6:3d:0e:64:49: 66:41:d2:65:91:f9:3f:89:1d:87:db:16:c7:1a:a3:96:c5:8b: 7f:13:1e:7c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHTCwtme95/WgwQob0EONv+JJuK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA0MjkwNzUyMDRaFw0yNjA0MzAxMTQyMDRaMDMxMTAvBgNV BAMTKEU5QzhEQzQyQjZFNkRGMDhBQzFEOTJCNkUwMjA0RkU0Qjc0MUQ3MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsrMIFXlTtI0XvRd0h6f7igRCx sPJbolFMOs29O4UD5MojwoMSRFDviADXRceh/DM1MaRiBG86K0E4582R7jl83oIM iA9xnGDJV2iDQTgkByuFWQFUmwg9gofy7t8GKjMMtmMyE0JpCHq52+3Eo3cv0wEj PqRxfo+ZJm0RTmJPMjow8yoiEd4MlXi7qAdubIK4VSSPo+wfJUseFglpdz9L4+DE 5HDjY7WkgeuqNJF58dgBx5k4tzpS958OEzcUtUDyjxridHiBOfC+5PGwFPabWcKE vSjgJUGyBZhtR1UIZzTNp7qIMjMtELBNfjfyXlYS6bUR+QaHIA/ZJKIGxYkZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6cjcQrbm3wisHZK24CBP5LdB1wUwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijs1YPJrM2yZbcLIDscp XGXXvR6jyAuzpLN64oGPMs1bENzKlYszvwLUBPYgCQUkVb0f1z0ai/ODYNAwnzQM KeEcicC4mNXZSat/Qn6hn9ZKSOov2re2MOUNuYtd87HkVDFeZlb3sPbD3TLoilQ3 womqjSzLbI2HaZ2TXoIIum2dm9o6/P1OixwX66aNyJWlVbBHYyoJesnQJpxd4zqn u5aLoFhtZCR5iqb1a7/2plhdIc1FR+STGv7HioTcuHr0fKB8R3NQIqKZZdhlb0pb ksddaCcoJw9QRTHjPEIxwhWJomi6p6Y9DmRJZkHSZZH5P4kdh9sWxxqjlsWLfxMe fA== -----END CERTIFICATE-----Generated at Wed Apr 29 11:15:22 2026 by rpki-client