$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: JjneQABUkCzgRG6pMi9ZKH5PDdoLKO9iVy0GlV4jP9k= Subject key identifier: 4E:46:E0:7E:7B:6D:33:EB:21:0D:A1:8C:11:98:2E:71:29:06:10:DA Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 6AB2E5E1A9A3D902DAB45ED6FC6BAC529FE831FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0512 Signing time: Fri 26 Jun 2026 23:16:05 +0000 Manifest this update: Fri 26 Jun 2026 23:11:05 +0000 Manifest next update: Sun 28 Jun 2026 00:50:05 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: TMJzbRuqccUoYWn/ZOAPLCJallQMws0D5Y4f/unXUAs=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Jun 2026 00:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b2:e5:e1:a9:a3:d9:02:da:b4:5e:d6:fc:6b:ac:52:9f:e8:31:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 26 23:11:05 2026 GMT Not After : Jun 28 00:50:05 2026 GMT Subject: CN=4E46E07E7B6D33EB210DA18C11982E71290610DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:63:71:55:56:4f:ec:1f:85:99:5e:d8:68:03: 1c:3c:ef:b5:45:51:55:52:34:c0:d0:4a:62:33:31: fb:fa:b1:87:bf:64:9a:15:93:7a:b5:74:a3:0b:76: 28:04:c7:80:1c:ce:d7:41:b1:dc:f7:5e:fd:6a:d3: 21:36:16:7e:5e:42:65:dc:15:dc:c6:ac:0d:55:81: bb:4c:5f:cb:25:71:ff:f8:98:e5:e4:ab:1d:51:e4: 1b:cb:00:da:6d:06:f7:b9:23:38:24:54:f5:d2:eb: 6a:32:bd:93:de:dc:70:01:41:a7:3a:31:b9:6c:14: 85:59:c5:5c:55:5e:17:e4:62:7d:ca:96:c8:24:44: a7:ef:fe:ac:00:6d:b0:d9:7b:04:96:51:bd:ae:af: de:3e:d6:15:be:7d:55:49:9a:f3:e4:7e:d5:70:a6: 7e:e1:66:f2:22:49:d1:5d:13:1a:b8:4e:a2:3d:b0: e3:a9:aa:ef:f3:af:3f:ac:d6:2b:22:61:06:ec:19: 11:51:27:5f:ce:53:90:2e:a7:74:cb:61:ee:80:e5: 5d:46:6c:07:89:9b:36:0c:55:cc:9d:b4:22:a7:7f: c1:39:ee:c3:b1:d7:2a:76:7e:93:f9:9b:4c:7d:f1: 92:cf:a5:9d:87:c9:86:bf:b3:f1:0c:bf:e1:8d:65: 59:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:46:E0:7E:7B:6D:33:EB:21:0D:A1:8C:11:98:2E:71:29:06:10:DA X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:31:01:b1:80:2a:fc:73:3d:d1:03:fd:d9:54:61:2c:67:e3: 7b:9c:4b:92:93:58:d7:c8:8d:58:a0:4b:57:ec:72:15:6a:1b: 83:d8:a8:13:a8:e1:8a:79:f5:62:1b:37:97:b1:44:27:3a:7a: 9b:e5:1b:fc:46:4f:d1:4e:26:8d:7f:84:9f:1b:02:b2:55:9d: a5:2a:bd:2c:dd:af:6e:db:49:ba:e2:ad:54:2e:d2:ca:95:86: 7d:28:15:5f:82:a7:8e:47:1c:c3:c9:97:ba:49:25:36:05:3f: f3:92:45:72:71:fb:72:18:3e:32:b4:fe:2f:2b:1a:1f:38:3e: 84:8e:27:bf:5b:76:9a:38:5b:a5:a8:ea:d3:be:8a:55:12:95: ff:62:c0:1d:d0:f5:b9:15:36:61:5a:b2:86:d0:46:b3:34:e4: 53:8e:51:c9:40:9f:27:94:b7:c8:8b:8b:cd:69:26:53:dc:66: 2a:c4:d1:d5:5c:cc:45:c5:b0:11:d9:d7:bc:34:e0:c2:e6:84: 5c:02:fc:22:35:55:06:6d:a2:85:ac:6c:de:ad:00:5d:bc:65: 68:21:bb:9d:7b:47:af:f4:1b:7d:bd:04:da:e6:2c:8c:35:fc: 97:86:2d:0a:22:db:47:27:74:da:a0:29:a1:09:05:f1:77:54: f8:42:33:34 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUarLl4amj2QLatF7W/GusUp/oMf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MjYyMzExMDVaFw0yNjA2MjgwMDUwMDVaMDMxMTAvBgNV BAMTKDRFNDZFMDdFN0I2RDMzRUIyMTBEQTE4QzExOTgyRTcxMjkwNjEwREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRY3FVVk/sH4WZXthoAxw877VF UVVSNMDQSmIzMfv6sYe/ZJoVk3q1dKMLdigEx4AcztdBsdz3Xv1q0yE2Fn5eQmXc FdzGrA1VgbtMX8slcf/4mOXkqx1R5BvLANptBve5IzgkVPXS62oyvZPe3HABQac6 MblsFIVZxVxVXhfkYn3KlsgkRKfv/qwAbbDZewSWUb2ur94+1hW+fVVJmvPkftVw pn7hZvIiSdFdExq4TqI9sOOpqu/zrz+s1isiYQbsGRFRJ1/OU5Aup3TLYe6A5V1G bAeJmzYMVcydtCKnf8E57sOx1yp2fpP5m0x98ZLPpZ2HyYa/s/EMv+GNZVmvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUTkbgfnttM+shDaGMEZgucSkGENowHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTEBsYAq/HM90QP92VRh LGfje5xLkpNY18iNWKBLV+xyFWobg9ioE6jhinn1Yhs3l7FEJzp6m+Ub/EZP0U4m jX+EnxsCslWdpSq9LN2vbttJuuKtVC7SypWGfSgVX4Knjkccw8mXukklNgU/85JF cnH7chg+MrT+LysaHzg+hI4nv1t2mjhbpajq076KVRKV/2LAHdD1uRU2YVqyhtBG szTkU45RyUCfJ5S3yIuLzWkmU9xmKsTR1VzMRcWwEdnXvDTgwuaEXAL8IjVVBm2i haxs3q0AXbxlaCG7nXtHr/Qbfb0E2uYsjDX8l4YtCiLbRyd02qApoQkF8XdU+EIz NA== -----END CERTIFICATE-----Generated at Sat Jun 27 15:02:53 2026 by rpki-client