$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 1Y83WJy8Nsj1pOQc8oIwxtOdPiBzn4v3szXLLPauwlE= Subject key identifier: 30:AC:EE:DE:80:8E:1C:80:8C:8B:A9:FA:88:2B:BD:08:F6:3B:1F:B6 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 16658B8837A5A0B7195A4713620CE18D6A67C52D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0497 Signing time: Wed 25 Mar 2026 20:31:52 +0000 Manifest this update: Wed 25 Mar 2026 20:26:52 +0000 Manifest next update: Thu 26 Mar 2026 21:25:52 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: nt5ZC2U3XdnXkboOk7mH4k9+oKsr0et/N0G2ncz4H14=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:65:8b:88:37:a5:a0:b7:19:5a:47:13:62:0c:e1:8d:6a:67:c5:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Mar 25 20:26:52 2026 GMT Not After : Mar 26 21:25:52 2026 GMT Subject: CN=30ACEEDE808E1C808C8BA9FA882BBD08F63B1FB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e4:d3:7b:38:41:21:18:1b:a7:e8:05:db:54: 69:eb:a8:98:18:43:9c:d4:de:ea:4f:c7:36:01:ce: f3:5b:67:63:c6:ea:97:93:a6:6c:e2:d1:a3:fe:94: dd:90:c0:be:23:8b:c7:49:91:cb:ab:20:84:a1:a5: 46:5b:2a:3b:54:87:0e:74:4d:2c:d2:07:e4:54:16: 12:58:dc:e5:51:53:e3:28:5d:37:75:db:a8:c7:6e: 0e:a1:00:28:8b:10:45:ee:f9:50:6e:01:45:0f:33: 61:d9:31:1d:73:b2:61:d7:5f:21:52:42:66:cf:18: 3e:84:62:15:d8:c4:95:74:90:9c:73:0d:c2:1a:6f: dc:80:f0:bd:c1:15:1d:c7:bd:e9:69:be:fe:4a:4e: 4c:7c:00:51:f5:6d:4e:f7:fa:dd:47:87:9d:42:7a: 90:fa:3c:28:fa:ff:be:b7:e1:59:ca:16:8c:83:52: 80:67:7b:c9:b2:37:e3:a2:a4:2d:93:67:64:be:af: 1d:1d:ef:b7:f9:07:50:9d:6b:92:8b:f9:01:2d:78: bc:cb:15:71:2b:cc:2f:61:1b:6b:20:2f:8a:67:76: 01:26:41:31:81:fa:c2:89:8e:bc:28:6b:ee:39:08: 96:6d:f3:1e:9d:b6:e6:55:13:ab:56:40:d4:dd:4c: c4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AC:EE:DE:80:8E:1C:80:8C:8B:A9:FA:88:2B:BD:08:F6:3B:1F:B6 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:2e:52:b8:0e:20:12:67:c2:bc:06:33:84:b9:62:b0:69:de: 0c:bd:81:bd:e0:c7:23:96:b8:27:6e:26:57:8d:f6:f5:84:a3: fb:a9:c1:53:17:92:b8:7e:d7:74:a4:95:78:86:77:4b:2f:ed: 37:8c:f1:d0:f6:98:27:d7:6f:2a:34:c6:99:d8:05:75:e0:6e: e9:a4:2a:f8:aa:f6:2c:67:4f:96:81:4e:42:68:7c:6f:c0:ca: cc:91:89:be:9f:8a:18:19:67:f6:69:da:34:7d:32:43:92:1b: cd:be:89:37:5e:88:ad:3c:24:25:c5:70:b1:1a:17:9a:35:f6: bb:2e:6f:4b:e0:1d:91:66:70:e2:89:47:f5:fc:f1:f6:0d:db: c3:ec:2d:98:ba:00:52:d5:e7:44:4a:e4:af:4a:00:4e:bc:38: 7d:c3:d2:6e:32:58:c6:6a:82:08:39:61:75:92:dd:6f:56:c8: a6:9f:9e:73:ea:42:65:95:ea:6e:1d:92:bd:32:42:eb:cc:c2: 73:d8:0a:06:78:e2:ce:94:ae:1d:14:02:38:7a:56:83:72:81: 04:81:66:c5:c7:b8:ef:0f:5b:01:c9:7d:7d:b0:d3:b1:a3:a5: f1:4c:9e:52:94:d0:df:f1:ab:d8:20:26:56:cb:94:22:28:56: 51:42:2c:da -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFmWLiDeloLcZWkcTYgzhjWpnxS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAzMjUyMDI2NTJaFw0yNjAzMjYyMTI1NTJaMDMxMTAvBgNV BAMTKDMwQUNFRURFODA4RTFDODA4QzhCQTlGQTg4MkJCRDA4RjYzQjFGQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd5NN7OEEhGBun6AXbVGnrqJgY Q5zU3upPxzYBzvNbZ2PG6peTpmzi0aP+lN2QwL4ji8dJkcurIIShpUZbKjtUhw50 TSzSB+RUFhJY3OVRU+MoXTd126jHbg6hACiLEEXu+VBuAUUPM2HZMR1zsmHXXyFS QmbPGD6EYhXYxJV0kJxzDcIab9yA8L3BFR3Hvelpvv5KTkx8AFH1bU73+t1Hh51C epD6PCj6/7634VnKFoyDUoBne8myN+OipC2TZ2S+rx0d77f5B1Cda5KL+QEteLzL FXErzC9hG2sgL4pndgEmQTGB+sKJjrwoa+45CJZt8x6dtuZVE6tWQNTdTMQRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUMKzu3oCOHICMi6n6iCu9CPY7H7YwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOS5SuA4gEmfCvAYzhLli sGneDL2BveDHI5a4J24mV4329YSj+6nBUxeSuH7XdKSVeIZ3Sy/tN4zx0PaYJ9dv KjTGmdgFdeBu6aQq+Kr2LGdPloFOQmh8b8DKzJGJvp+KGBln9mnaNH0yQ5Ibzb6J N16IrTwkJcVwsRoXmjX2uy5vS+AdkWZw4olH9fzx9g3bw+wtmLoAUtXnRErkr0oA Trw4fcPSbjJYxmqCCDlhdZLdb1bIpp+ec+pCZZXqbh2SvTJC68zCc9gKBnjizpSu HRQCOHpWg3KBBIFmxce47w9bAcl9fbDTsaOl8UyeUpTQ3/Gr2CAmVsuUIihWUUIs 2g== -----END CERTIFICATE-----Generated at Thu Mar 26 03:37:56 2026 by rpki-client