$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 6lYrW0Lz2tJBRNFi+7IrRH4hC8jx/qmcx22fIctiyOg= Subject key identifier: 2F:31:09:0A:8C:7F:50:A9:E0:5D:0D:EE:81:19:50:3B:B0:E4:E7:72 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 0AD2B2DF450671F720A1D005CF51F30DA1202BFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0529 Signing time: Mon 13 Jul 2026 23:02:26 +0000 Manifest this update: Mon 13 Jul 2026 22:57:26 +0000 Manifest next update: Wed 15 Jul 2026 01:07:26 +0000 Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: TbPnO4KWgoZqvQYIkiBzGbNjckVsPn/aXYPUXaH/3UQ=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 15 Jul 2026 01:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d2:b2:df:45:06:71:f7:20:a1:d0:05:cf:51:f3:0d:a1:20:2b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 13 22:57:26 2026 GMT Not After : Jul 15 01:07:26 2026 GMT Subject: CN=2F31090A8C7F50A9E05D0DEE8119503BB0E4E772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2d:ea:9c:f1:9d:ea:00:07:52:88:18:30:e0: c9:3e:29:3a:7d:91:d6:7d:9f:cf:36:e9:97:4a:97: 9e:01:dd:59:67:3b:84:88:70:60:a8:05:df:42:ab: 60:9c:8c:f4:c6:86:dd:75:f1:19:1a:d2:61:2e:06: 98:f5:53:89:d7:bb:93:9d:98:38:0c:1b:b2:61:14: 4f:38:ed:1c:0c:97:49:59:31:fd:a5:b1:9a:23:d6: 3e:ef:1c:76:b1:7e:c1:de:b3:22:24:38:d7:d0:9a: 51:1e:60:99:80:39:36:e5:42:c0:96:0d:c0:ab:d8: c0:cf:54:e3:11:0c:b0:8a:6a:a0:10:2a:80:12:c4: fa:22:8b:f7:a7:b0:53:ee:23:3f:04:60:89:00:a4: c7:e8:6d:5e:28:d0:aa:fb:0a:97:0d:bd:0d:79:0d: 9a:49:40:2b:51:97:54:a0:28:ec:34:b7:d2:ef:f2: 4f:25:2f:40:8f:42:bb:7d:0d:19:b6:77:2f:8e:04: c4:44:dc:e9:45:93:d8:60:d8:39:88:86:12:de:8a: fe:ab:79:83:7a:8a:33:9c:2a:44:f3:c8:62:5c:70: 1a:23:64:c9:36:1e:09:ee:42:4c:b3:ae:72:74:e0: b8:10:72:79:ed:00:1a:3c:be:7a:d6:31:e1:f0:7f: 7a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:31:09:0A:8C:7F:50:A9:E0:5D:0D:EE:81:19:50:3B:B0:E4:E7:72 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:01:19:d3:cf:0e:2a:eb:02:70:74:8b:66:e9:21:f9:79:3e: c7:13:7f:99:31:ee:5a:2f:d6:d1:21:bb:7e:69:2b:5c:c6:dc: 47:43:40:ff:20:f4:7a:99:15:20:56:cb:84:86:5e:0c:eb:62: 46:c2:a5:ba:63:f2:ef:bd:f3:c2:5b:7c:7a:1e:b1:50:3b:c5: f7:81:3a:48:3f:51:22:ab:42:bf:4d:d9:c8:33:63:e2:f9:45: 95:87:b3:25:b6:34:15:76:d2:b9:da:2b:6b:d1:c3:2a:be:34: bc:1d:f3:90:67:25:5b:41:7b:17:8b:e4:5a:da:74:38:1b:e6: dc:a2:b5:76:b4:4c:5a:45:18:c2:c7:27:09:eb:db:84:20:47: ee:ae:2e:c7:75:33:7c:8c:59:88:a8:73:9a:dc:c4:33:df:f5: d8:67:6f:c1:80:e6:64:2d:d5:c5:e8:89:fc:11:38:63:31:df: d3:c3:21:9b:a8:30:ff:eb:ab:38:b2:4f:c7:d3:06:4d:1f:a4: 0f:84:d0:67:39:46:c1:96:8f:74:49:c3:1b:f1:68:7c:af:1f: f9:b7:3a:5f:ec:40:fd:52:dd:70:00:c4:17:1f:e7:78:3c:44: 2e:01:d8:38:c9:13:ed:f7:6f:72:4c:bb:f6:5e:ff:2b:76:42: 2f:88:17:27 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCtKy30UGcfcgodAFz1HzDaEgK/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MTMyMjU3MjZaFw0yNjA3MTUwMTA3MjZaMDMxMTAvBgNV BAMTKDJGMzEwOTBBOEM3RjUwQTlFMDVEMERFRTgxMTk1MDNCQjBFNEU3NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwLeqc8Z3qAAdSiBgw4Mk+KTp9 kdZ9n8826ZdKl54B3VlnO4SIcGCoBd9Cq2CcjPTGht118Rka0mEuBpj1U4nXu5Od mDgMG7JhFE847RwMl0lZMf2lsZoj1j7vHHaxfsHesyIkONfQmlEeYJmAOTblQsCW DcCr2MDPVOMRDLCKaqAQKoASxPoii/ensFPuIz8EYIkApMfobV4o0Kr7CpcNvQ15 DZpJQCtRl1SgKOw0t9Lv8k8lL0CPQrt9DRm2dy+OBMRE3OlFk9hg2DmIhhLeiv6r eYN6ijOcKkTzyGJccBojZMk2HgnuQkyzrnJ04LgQcnntABo8vnrWMeHwf3pNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQULzEJCox/UKngXQ3ugRlQO7Dk53IwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQEZ088OKusCcHSLZukh +Xk+xxN/mTHuWi/W0SG7fmkrXMbcR0NA/yD0epkVIFbLhIZeDOtiRsKlumPy773z wlt8eh6xUDvF94E6SD9RIqtCv03ZyDNj4vlFlYezJbY0FXbSudora9HDKr40vB3z kGclW0F7F4vkWtp0OBvm3KK1drRMWkUYwscnCevbhCBH7q4ux3UzfIxZiKhzmtzE M9/12GdvwYDmZC3VxeiJ/BE4YzHf08Mhm6gw/+urOLJPx9MGTR+kD4TQZzlGwZaP dEnDG/FofK8f+bc6X+xA/VLdcADEFx/neDxELgHYOMkT7fdvcky79l7/K3ZCL4gX Jw== -----END CERTIFICATE-----Generated at Tue Jul 14 09:46:35 2026 by rpki-client