$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: Wg79tvjrTieTylCKtXuTy9wevnkisT6Lt4J7KU48404= Subject key identifier: F1:D7:7A:E1:35:83:9A:3E:A8:1D:91:EC:A6:E0:57:E7:C0:12:86:E6 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 740145725ADAA3187DF1FC0692938A0E0BD5ACF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0556 Signing time: Sun 16 Aug 2026 23:30:26 +0000 Manifest this update: Sun 16 Aug 2026 23:25:26 +0000 Manifest next update: Tue 18 Aug 2026 01:19:26 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: e2Tj9t3lzhvqPGcWaDFBjIz9+zIMUu1PCyZUpNnhQTw=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 18 Aug 2026 01:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:01:45:72:5a:da:a3:18:7d:f1:fc:06:92:93:8a:0e:0b:d5:ac:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 16 23:25:26 2026 GMT Not After : Aug 18 01:19:26 2026 GMT Subject: CN=F1D77AE135839A3EA81D91ECA6E057E7C01286E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6f:85:7f:49:2a:7a:db:06:c9:84:b7:85:51: 97:b3:40:81:34:7e:76:7c:c3:e7:58:36:72:9d:74: 5a:ce:fb:bb:a2:f7:a3:fb:cf:04:2c:d4:a5:1c:2b: ba:3e:64:79:6d:1e:ff:de:d4:1b:9b:cb:12:35:3d: d5:14:df:2a:cb:eb:3f:8d:ac:5b:bb:0a:a5:80:b7: 7c:15:e5:32:c9:80:42:cf:31:12:14:98:3f:24:0b: be:8a:40:b5:f9:b9:bb:81:2c:1a:cd:9d:1c:94:af: 52:08:a0:ee:d5:d3:df:f0:be:f4:4b:5f:a5:37:b2: ba:16:ba:66:3d:77:f9:e3:5e:2f:27:86:21:8a:68: 1a:b2:11:1e:36:87:e9:93:3f:06:a3:7d:36:6f:66: ae:79:9a:bc:d2:ff:c4:40:f6:8e:8e:e8:bc:58:12: b9:6f:d9:d3:81:74:79:dc:c5:9d:96:23:b8:9d:de: 4b:67:8b:9d:b9:7f:f5:ff:0d:a4:aa:0d:22:be:2b: 62:15:fc:80:bc:dc:07:a9:59:12:4c:45:1a:83:0c: 74:a5:cf:0f:57:fe:17:e2:13:ba:8e:76:73:4a:d9: 07:3b:05:c8:69:68:51:cb:da:8e:17:f1:3f:05:9c: 41:8b:70:91:7c:10:b7:85:79:cf:80:28:9b:80:62: 2f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D7:7A:E1:35:83:9A:3E:A8:1D:91:EC:A6:E0:57:E7:C0:12:86:E6 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c3:20:bf:8b:1a:b8:a3:22:90:4d:c3:3b:21:a9:0d:bc:92: 48:ca:d0:09:97:2d:32:80:d1:16:6c:35:b8:02:67:35:7d:33: 87:ca:a8:69:3c:b7:85:c8:41:18:49:89:52:30:35:b5:ed:6c: 63:e1:35:57:38:66:fc:9c:13:38:90:50:b9:51:28:db:52:55: c8:61:c0:c6:06:03:6d:22:c8:42:76:f4:3f:40:f0:97:e4:b7: 40:56:72:ca:75:a4:09:34:66:03:4e:b2:18:7a:57:a7:30:e0: eb:17:8d:89:c8:d8:b7:26:72:11:e5:0d:5b:67:52:81:1e:60: e6:30:04:16:e5:26:c3:4e:ee:06:da:d9:1d:49:74:bc:fb:cd: 51:19:f6:07:d5:8b:9f:95:26:47:aa:02:89:3d:b9:a4:57:5d: 6a:40:91:ee:dd:e2:e9:81:20:fb:ad:d5:12:e7:10:9e:d1:cd: c8:6b:5c:9a:66:12:d8:b6:ce:a8:3c:07:9f:2f:32:6d:3e:eb: c1:02:72:99:b1:b9:ca:c9:1d:89:80:f8:08:dd:54:7a:5b:ee: e0:b4:75:6a:8c:ca:6f:d3:91:8f:3d:35:01:b8:72:7e:48:92: a0:a7:78:d2:9c:e7:dc:a8:93:aa:9d:1c:e8:0e:5d:7b:57:de: 96:4c:d9:16 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdAFFclraoxh98fwGkpOKDgvVrPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MTYyMzI1MjZaFw0yNjA4MTgwMTE5MjZaMDMxMTAvBgNV BAMTKEYxRDc3QUUxMzU4MzlBM0VBODFEOTFFQ0E2RTA1N0U3QzAxMjg2RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZb4V/SSp62wbJhLeFUZezQIE0 fnZ8w+dYNnKddFrO+7ui96P7zwQs1KUcK7o+ZHltHv/e1BubyxI1PdUU3yrL6z+N rFu7CqWAt3wV5TLJgELPMRIUmD8kC76KQLX5ubuBLBrNnRyUr1IIoO7V09/wvvRL X6U3sroWumY9d/njXi8nhiGKaBqyER42h+mTPwajfTZvZq55mrzS/8RA9o6O6LxY Erlv2dOBdHncxZ2WI7id3ktni525f/X/DaSqDSK+K2IV/IC83AepWRJMRRqDDHSl zw9X/hfiE7qOdnNK2Qc7BchpaFHL2o4X8T8FnEGLcJF8ELeFec+AKJuAYi+JAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU8dd64TWDmj6oHZHspuBX58AShuYwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksMgv4sauKMikE3DOyGp DbySSMrQCZctMoDRFmw1uAJnNX0zh8qoaTy3hchBGEmJUjA1te1sY+E1Vzhm/JwT OJBQuVEo21JVyGHAxgYDbSLIQnb0P0Dwl+S3QFZyynWkCTRmA06yGHpXpzDg6xeN icjYtyZyEeUNW2dSgR5g5jAEFuUmw07uBtrZHUl0vPvNURn2B9WLn5UmR6oCiT25 pFddakCR7t3i6YEg+63VEucQntHNyGtcmmYS2LbOqDwHny8ybT7rwQJymbG5yskd iYD4CN1Uelvu4LR1aozKb9ORjz01AbhyfkiSoKd40pzn3KiTqp0c6A5de1felkzZ Fg== -----END CERTIFICATE-----Generated at Mon Aug 17 18:15:15 2026 by rpki-client