$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: W/QtMW9zDhZE3sIfmtvUZ2S4efQLINyeCYo45/I8Yms= Subject key identifier: 38:31:4A:54:BA:B7:44:91:73:E5:65:F9:1A:2A:AF:2F:D6:97:1A:3D Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 34FC690049B86B19AA5181296E1C785EC964A810 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0540 Signing time: Fri 31 Jul 2026 14:42:02 +0000 Manifest this update: Fri 31 Jul 2026 14:37:02 +0000 Manifest next update: Sat 01 Aug 2026 17:19:02 +0000 Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: zJ7rTBq6O8qfzVhJv3HtGDQLCKQP3aVzyRdi81h7qLQ=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Aug 2026 17:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:fc:69:00:49:b8:6b:19:aa:51:81:29:6e:1c:78:5e:c9:64:a8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 31 14:37:02 2026 GMT Not After : Aug 1 17:19:02 2026 GMT Subject: CN=38314A54BAB7449173E565F91A2AAF2FD6971A3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:58:1d:0b:aa:00:5d:87:89:fe:9f:5b:59:e0: 13:0d:d1:39:62:ef:0f:2d:57:f0:c5:bc:9c:55:67: 85:23:cc:f2:83:e0:d2:ad:1d:52:e7:45:b3:a3:42: dc:83:ca:6c:01:ab:a6:ad:1b:33:8d:6e:fd:66:d5: 55:93:8c:c4:93:32:a5:39:1c:f2:50:18:9e:dc:10: df:e5:79:bb:d3:e5:2e:6d:23:08:37:40:1a:c3:27: 69:5b:4a:0c:52:0e:ee:b7:f4:cd:78:f0:3e:c6:bf: d3:ed:76:8a:ef:97:85:96:ec:e2:ab:5b:b9:b5:c1: 53:66:96:85:03:71:f8:4a:da:6e:71:44:00:d9:25: 3b:cc:43:fd:92:46:f8:4b:b6:36:39:68:f8:56:30: 89:ef:f0:0c:eb:30:6c:9b:6c:24:1d:ba:3d:31:1b: 5b:11:29:48:15:a3:25:9a:8a:af:97:d1:78:0c:4a: cb:d5:ff:6c:a3:7a:5f:07:0d:0c:b9:66:1e:fd:b5: 21:e3:ee:15:03:95:20:b5:c3:a4:d4:36:2d:f8:5f: 8e:2b:a8:69:c3:84:82:d5:41:92:39:11:18:90:5f: 54:12:f9:8e:64:de:59:81:8a:98:97:74:db:9b:60: 42:23:58:ee:33:3c:c8:ad:52:e2:f4:1a:f5:d8:06: 39:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:31:4A:54:BA:B7:44:91:73:E5:65:F9:1A:2A:AF:2F:D6:97:1A:3D X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:11:9d:ad:69:3c:19:05:2b:33:c1:ec:3c:d5:3b:9d:68:78: 16:73:23:6a:c4:a8:ec:40:fa:28:4f:6e:b2:05:c9:fd:49:97: 03:00:19:ec:dc:85:a7:f9:c0:fc:5f:65:fd:c1:4c:30:65:88: ba:dd:9e:7a:c5:1e:5b:ab:a6:ba:dd:17:50:06:b1:cb:d2:ba: a3:b7:7d:4d:b7:5f:41:83:3a:58:43:52:54:92:bb:3c:82:56: a3:66:cb:bb:46:fb:77:82:30:35:4d:cf:23:a1:a6:2d:c5:b6: 86:da:26:8d:a1:b2:0c:42:47:b3:f5:e1:9e:4d:9c:8c:82:79: 25:ae:bb:72:8a:0a:43:87:51:3b:fe:71:1d:3b:17:97:25:29: 77:3f:04:d1:3c:8c:ec:47:32:90:9b:96:59:42:06:03:46:87: e0:4d:4a:8d:52:71:ba:7f:f3:9e:2c:b9:77:40:d6:e9:fd:f9: 24:cc:f8:8f:4a:8a:c0:72:ec:90:52:31:bc:e2:d3:12:bd:25: 03:53:92:9a:41:8c:df:27:71:2a:16:93:55:b1:b5:12:34:1f: ae:2e:5c:de:00:53:a3:d7:05:be:21:6a:7f:ae:7d:1b:bb:55: c9:59:83:d9:cd:9b:2b:25:15:f7:81:45:1a:5c:d1:a5:a8:78: 4d:66:08:d4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNPxpAEm4axmqUYEpbhx4XslkqBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MzExNDM3MDJaFw0yNjA4MDExNzE5MDJaMDMxMTAvBgNV BAMTKDM4MzE0QTU0QkFCNzQ0OTE3M0U1NjVGOTFBMkFBRjJGRDY5NzFBM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqWB0LqgBdh4n+n1tZ4BMN0Tli 7w8tV/DFvJxVZ4UjzPKD4NKtHVLnRbOjQtyDymwBq6atGzONbv1m1VWTjMSTMqU5 HPJQGJ7cEN/lebvT5S5tIwg3QBrDJ2lbSgxSDu639M148D7Gv9Ptdorvl4WW7OKr W7m1wVNmloUDcfhK2m5xRADZJTvMQ/2SRvhLtjY5aPhWMInv8AzrMGybbCQduj0x G1sRKUgVoyWaiq+X0XgMSsvV/2yjel8HDQy5Zh79tSHj7hUDlSC1w6TUNi34X44r qGnDhILVQZI5ERiQX1QS+Y5k3lmBipiXdNubYEIjWO4zPMitUuL0GvXYBjk7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUODFKVLq3RJFz5WX5GiqvL9aXGj0wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBGdrWk8GQUrM8HsPNU7 nWh4FnMjasSo7ED6KE9usgXJ/UmXAwAZ7NyFp/nA/F9l/cFMMGWIut2eesUeW6um ut0XUAaxy9K6o7d9TbdfQYM6WENSVJK7PIJWo2bLu0b7d4IwNU3PI6GmLcW2htom jaGyDEJHs/Xhnk2cjIJ5Ja67cooKQ4dRO/5xHTsXlyUpdz8E0TyM7EcykJuWWUIG A0aH4E1KjVJxun/zniy5d0DW6f35JMz4j0qKwHLskFIxvOLTEr0lA1OSmkGM3ydx KhaTVbG1EjQfri5c3gBTo9cFviFqf659G7tVyVmD2c2bKyUV94FFGlzRpah4TWYI 1A== -----END CERTIFICATE-----Generated at Sat Aug 1 04:51:03 2026 by rpki-client