$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: QvmgOKPaKzAx7JjM4dT2ogPRqO+YogDZCAUoFakK1h4= Subject key identifier: FE:5E:77:D7:E6:CC:6A:0D:9A:D1:02:A5:54:DF:53:25:AB:33:0A:8B Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 361708B8ED31FE179BC78D0050096731230E6401 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0562 Signing time: Tue 25 Aug 2026 23:38:32 +0000 Manifest this update: Tue 25 Aug 2026 23:33:32 +0000 Manifest next update: Thu 27 Aug 2026 02:48:32 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 1yzxf+plkyGsdaSG9pYyJHoYzPZAGfCeg4lDEjoPHbY=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 02:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:17:08:b8:ed:31:fe:17:9b:c7:8d:00:50:09:67:31:23:0e:64:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 25 23:33:32 2026 GMT Not After : Aug 27 02:48:32 2026 GMT Subject: CN=FE5E77D7E6CC6A0D9AD102A554DF5325AB330A8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e5:13:92:ec:10:36:9c:15:ed:e5:56:7b:70: 44:7b:a9:41:26:33:0d:3f:f3:de:7a:60:4d:a2:04: 68:2b:eb:4a:30:b7:f8:bb:5d:e4:36:bf:80:04:72: 4e:d4:3c:f4:be:8f:45:aa:23:b7:7f:0e:31:ec:a1: 4d:24:5a:68:7c:70:5c:7c:fd:14:9b:34:1f:90:11: 14:ee:65:72:27:2b:c1:1d:90:38:55:d4:e1:bb:a1: 7f:d8:e6:fc:39:b5:95:a4:b7:29:a2:9d:6e:32:b9: ef:a6:b5:83:57:7a:aa:4a:29:06:92:02:c6:00:3c: 94:57:76:b8:4b:27:9c:af:7e:d2:ad:3c:79:5a:27: 02:1b:bf:75:fb:c2:1b:ec:b4:12:a4:86:b0:fa:b1: 1b:68:d5:0e:6b:ec:67:aa:63:a7:9a:ee:d6:f8:fd: fc:6d:6e:5d:e7:04:02:ef:f1:e0:ed:27:b5:42:38: 18:a9:f0:d5:94:c7:86:39:b7:1a:f7:59:fb:85:2c: 23:ca:94:86:5c:32:bc:c3:4b:87:5b:58:63:ab:0f: b1:90:fb:e7:e6:d8:1f:38:48:1a:23:46:ef:95:57: dc:f7:14:79:87:56:20:5f:b0:a0:56:6b:c2:57:f7: 6b:88:22:6f:e6:04:a2:1b:01:7e:c4:55:27:d0:41: 44:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5E:77:D7:E6:CC:6A:0D:9A:D1:02:A5:54:DF:53:25:AB:33:0A:8B X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f2:59:07:e9:a7:c4:dc:ff:48:4c:64:cd:59:08:63:12:e2: ad:ba:e1:77:05:8f:3e:69:41:ec:d2:3e:34:84:fb:f3:6a:f0: d8:6b:86:a5:1e:af:53:43:6a:e4:90:4e:85:8f:16:56:c8:cc: ab:cd:84:80:58:d3:48:5e:24:ae:e9:10:40:c1:d0:4c:1c:9b: e2:1f:91:c8:4a:ca:c0:a4:0a:e7:95:8b:3f:15:87:82:1b:fe: 29:c9:a1:9f:08:6f:10:72:e3:af:2b:7b:c8:16:62:b5:39:3a: 07:ca:de:88:b2:19:c9:53:5c:c1:d9:f7:f6:fb:cf:d0:77:94: 72:71:ee:dd:c7:aa:0b:0d:85:e1:fc:92:30:fb:6d:33:e4:1b: 34:6a:c7:b7:e1:40:2b:bb:c7:d4:10:0d:b4:27:70:bc:e5:40: c6:a0:98:fb:13:1f:7a:0b:0c:9a:d9:6f:02:26:3b:f2:6d:f5: 38:98:e5:ee:84:1c:0e:c2:d8:d0:e3:70:99:6e:bb:8b:81:32: 72:5a:12:23:e0:19:e8:cf:32:51:8f:8e:3b:42:98:7e:28:ad: 6a:a1:e0:05:ba:c8:9f:2e:09:fb:4e:0a:cd:7d:94:4f:16:79: d5:2f:ca:31:fb:38:81:16:fa:94:f6:fa:53:7b:3f:0e:f8:3e: 1e:e5:92:71 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNhcIuO0x/hebx40AUAlnMSMOZAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MjUyMzMzMzJaFw0yNjA4MjcwMjQ4MzJaMDMxMTAvBgNV BAMTKEZFNUU3N0Q3RTZDQzZBMEQ5QUQxMDJBNTU0REY1MzI1QUIzMzBBOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65ROS7BA2nBXt5VZ7cER7qUEm Mw0/8956YE2iBGgr60owt/i7XeQ2v4AEck7UPPS+j0WqI7d/DjHsoU0kWmh8cFx8 /RSbNB+QERTuZXInK8EdkDhV1OG7oX/Y5vw5tZWktyminW4yue+mtYNXeqpKKQaS AsYAPJRXdrhLJ5yvftKtPHlaJwIbv3X7whvstBKkhrD6sRto1Q5r7GeqY6ea7tb4 /fxtbl3nBALv8eDtJ7VCOBip8NWUx4Y5txr3WfuFLCPKlIZcMrzDS4dbWGOrD7GQ ++fm2B84SBojRu+VV9z3FHmHViBfsKBWa8JX92uIIm/mBKIbAX7EVSfQQUSXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/l531+bMag2a0QKlVN9TJaszCoswHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPJZB+mnxNz/SExkzVkI YxLirbrhdwWPPmlB7NI+NIT782rw2GuGpR6vU0Nq5JBOhY8WVsjMq82EgFjTSF4k rukQQMHQTByb4h+RyErKwKQK55WLPxWHghv+KcmhnwhvEHLjryt7yBZitTk6B8re iLIZyVNcwdn39vvP0HeUcnHu3ceqCw2F4fySMPttM+QbNGrHt+FAK7vH1BANtCdw vOVAxqCY+xMfegsMmtlvAiY78m31OJjl7oQcDsLY0ONwmW67i4EycloSI+AZ6M8y UY+OO0KYfiitaqHgBbrIny4J+04KzX2UTxZ51S/KMfs4gRb6lPb6U3s/Dvg+HuWS cQ== -----END CERTIFICATE-----Generated at Wed Aug 26 16:10:42 2026 by rpki-client