$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: Nd6dOtaYOLbO9U/n8LGYMgBkEKqBjx8J+LNY4CveWm8= Subject key identifier: FB:3E:4E:B3:43:3D:F8:0E:57:F2:83:33:E0:34:22:79:28:AC:92:D3 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 622D08949E4AAD322F0A15932B32EA0AE0E0560F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04C2 Signing time: Mon 27 Apr 2026 03:16:34 +0000 Manifest this update: Mon 27 Apr 2026 03:11:34 +0000 Manifest next update: Tue 28 Apr 2026 05:20:34 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: S5aP7htZWapS5pe9MMaiW4R2KfAbIBqfSpZVPrGK5Pw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 05:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:2d:08:94:9e:4a:ad:32:2f:0a:15:93:2b:32:ea:0a:e0:e0:56:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 27 03:11:34 2026 GMT Not After : Apr 28 05:20:34 2026 GMT Subject: CN=FB3E4EB3433DF80E57F28333E034227928AC92D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:30:68:da:76:e2:93:d9:12:83:52:1f:e5:93: 28:2a:3c:b8:57:22:e3:46:51:bf:06:07:be:35:d4: ab:78:67:3e:49:d8:37:fd:18:02:aa:20:57:7c:dd: f4:9b:d5:ff:a6:4f:4e:f5:4a:35:ec:1c:cd:ae:3b: 2e:40:98:08:6c:12:de:a7:6b:1c:fe:3f:21:48:6c: 3e:9f:7a:e1:5c:df:35:b8:3e:11:ba:f9:c9:e6:64: 3c:f5:0d:63:91:b6:79:e9:41:fd:3a:02:ae:d8:b6: 92:6b:d5:5a:ea:c1:91:a6:d5:a7:b7:4e:4c:1c:a9: 70:92:7c:4f:aa:bc:8a:51:ad:a9:fd:36:c2:15:27: 68:e6:c7:f8:6a:61:3c:f1:6b:8c:90:d3:d9:44:18: b7:57:02:b2:5e:cc:af:ee:c4:e0:15:af:41:ea:d5: 41:5f:4d:10:ff:dc:ed:01:95:70:ce:55:6f:64:8f: c6:6a:bc:20:3a:3f:d3:f2:6c:7c:12:4f:71:4c:5b: da:12:81:d9:3d:14:7f:dc:ce:fc:82:23:1f:12:a4: 4f:f8:f0:bf:80:26:50:84:bc:3f:ba:44:ee:4a:20: e2:a6:c4:8b:88:0c:9f:78:a0:49:8b:db:c5:78:d9: c4:ef:3d:d3:f2:1e:42:7e:fd:4f:17:4f:db:fb:f4: bc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3E:4E:B3:43:3D:F8:0E:57:F2:83:33:E0:34:22:79:28:AC:92:D3 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:76:e5:1a:a6:df:0a:8e:22:5f:6b:1d:eb:3d:28:65:40:22: 70:f6:a0:45:82:03:30:19:9d:d5:52:a2:44:ec:d7:5e:8a:5f: 41:76:0a:6e:e8:83:54:9d:4e:f5:bb:0e:e0:1b:e8:3d:51:80: d2:e0:1f:7a:cd:b0:33:d8:c0:d1:24:8a:26:81:24:38:d0:10: 99:23:c8:55:1f:4f:1f:f1:fd:c2:f2:35:9c:d2:98:72:36:dc: 70:a6:cc:ad:2d:38:73:86:af:e4:00:12:73:9f:2a:ad:40:d9: cf:df:40:c4:e5:88:fa:15:04:7f:75:4b:2f:e9:c6:17:d7:22: 6b:2b:d1:c9:a3:64:33:14:e0:7d:25:6a:76:13:fd:1d:dd:31: 45:19:41:f7:50:69:86:61:5c:48:06:fc:8a:2f:17:29:8c:2e: f9:e2:43:19:07:c2:91:6f:80:a1:c4:18:86:ab:bb:13:6c:0e: 10:08:87:1e:d6:27:d6:de:2b:09:03:4b:62:6b:7f:02:aa:4b: 19:ee:b6:f2:8b:3b:9e:43:98:5f:eb:eb:fd:e3:13:12:63:4d: 3e:f4:ac:8b:4d:56:88:83:d9:cb:24:bb:3b:71:a4:34:79:85: 11:70:c8:fc:f0:6e:03:b1:72:8e:b4:e6:28:4a:44:d1:2d:c3: f0:5b:dd:8e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYi0IlJ5KrTIvChWTKzLqCuDgVg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA0MjcwMzExMzRaFw0yNjA0MjgwNTIwMzRaMDMxMTAvBgNV BAMTKEZCM0U0RUIzNDMzREY4MEU1N0YyODMzM0UwMzQyMjc5MjhBQzkyRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAMGjaduKT2RKDUh/lkygqPLhX IuNGUb8GB7411Kt4Zz5J2Df9GAKqIFd83fSb1f+mT071SjXsHM2uOy5AmAhsEt6n axz+PyFIbD6feuFc3zW4PhG6+cnmZDz1DWORtnnpQf06Aq7YtpJr1VrqwZGm1ae3 TkwcqXCSfE+qvIpRran9NsIVJ2jmx/hqYTzxa4yQ09lEGLdXArJezK/uxOAVr0Hq 1UFfTRD/3O0BlXDOVW9kj8ZqvCA6P9PybHwST3FMW9oSgdk9FH/czvyCIx8SpE/4 8L+AJlCEvD+6RO5KIOKmxIuIDJ94oEmL28V42cTvPdPyHkJ+/U8XT9v79LwBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+z5Os0M9+A5X8oMz4DQieSisktMwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnblGqbfCo4iX2sd6z0o ZUAicPagRYIDMBmd1VKiROzXXopfQXYKbuiDVJ1O9bsO4BvoPVGA0uAfes2wM9jA 0SSKJoEkONAQmSPIVR9PH/H9wvI1nNKYcjbccKbMrS04c4av5AASc58qrUDZz99A xOWI+hUEf3VLL+nGF9ciayvRyaNkMxTgfSVqdhP9Hd0xRRlB91BphmFcSAb8ii8X KYwu+eJDGQfCkW+AocQYhqu7E2wOEAiHHtYn1t4rCQNLYmt/AqpLGe628os7nkOY X+vr/eMTEmNNPvSsi01WiIPZyyS7O3GkNHmFEXDI/PBuA7FyjrTmKEpE0S3D8Fvd jg== -----END CERTIFICATE-----Generated at Mon Apr 27 15:47:43 2026 by rpki-client