$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: H6B/5/m5+GZ3HeQt9e6dYdJt4dye30Ce6LHFA9rSEwo= Subject key identifier: 9E:B7:6C:71:C5:CD:C2:76:50:1D:63:28:83:52:3E:67:90:AF:2D:8D Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 720E9A27DF311EEAA57AB44737BBE93C2F93E8B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 053B Signing time: Mon 27 Jul 2026 16:58:18 +0000 Manifest this update: Mon 27 Jul 2026 16:53:18 +0000 Manifest next update: Tue 28 Jul 2026 19:23:18 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: IrW2p43tg5Fl94ik1D7B0PREXPD9AHky+tw/Zxd8hAc=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Jul 2026 13:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:0e:9a:27:df:31:1e:ea:a5:7a:b4:47:37:bb:e9:3c:2f:93:e8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 27 16:53:18 2026 GMT Not After : Jul 28 19:23:18 2026 GMT Subject: CN=9EB76C71C5CDC276501D632883523E6790AF2D8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7c:5d:45:ba:a6:9c:59:7f:30:00:2b:95:9e: ee:22:3f:ba:91:a5:88:28:14:5a:8d:b8:4a:cf:0a: 4e:07:36:c6:60:aa:30:79:c3:e2:1b:8e:36:d8:59: 3b:57:69:26:e3:44:75:08:f5:ff:1c:aa:b9:2b:15: 22:64:fd:49:24:dc:06:4d:2e:b6:55:9f:de:59:2f: 01:29:1b:cb:d6:78:af:ad:e7:df:5c:61:74:8f:d2: 66:75:5e:7e:67:8f:ce:b2:68:5c:4e:5b:4b:e6:32: f4:68:a9:08:0b:50:69:f9:2e:fa:e3:4b:82:ed:4b: 29:8f:b9:7b:7a:73:25:b6:ce:9a:24:f7:33:47:37: 3c:78:39:59:7f:a5:e9:ec:28:73:60:e9:7e:da:a7: aa:c5:cd:6c:29:f9:e8:8f:80:08:01:97:eb:6a:5b: a9:66:80:17:89:58:e6:7b:75:97:e0:c5:24:2d:de: 7d:fc:dc:ec:dc:d2:41:4e:71:e7:e7:f8:8c:0c:2d: c0:1a:02:9c:52:b5:bd:a7:44:df:0d:8a:c0:01:39: 4e:89:ee:9d:11:82:4a:a3:e5:30:a3:39:7c:58:4e: ca:7d:64:49:76:16:20:b1:85:c6:4e:4e:58:f2:06: 27:95:a1:ee:f8:36:df:17:a4:85:e6:4e:19:72:64: 45:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B7:6C:71:C5:CD:C2:76:50:1D:63:28:83:52:3E:67:90:AF:2D:8D X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:db:ed:6b:c0:31:f3:32:f1:5d:f9:2e:77:31:b3:87:0a:2b: 81:88:a0:1e:5c:06:89:dc:ab:1b:35:aa:9b:82:e4:5a:8d:2a: 43:d7:53:f8:d3:04:fc:23:3d:4a:a3:e7:74:5b:b4:d7:d6:ea: eb:b9:bc:9f:53:6f:6c:17:1d:6a:2a:b7:1a:14:51:6c:21:e7: b4:05:32:d4:b1:b6:52:b7:b6:a9:84:12:9f:d6:fb:f5:b1:a9: 57:a1:77:03:9c:70:f3:07:39:84:da:65:ea:af:ce:e3:24:68: a2:27:b7:df:8d:b4:02:ec:c6:5c:25:02:19:de:45:93:5b:30: 77:96:75:6a:1c:0e:5b:be:d9:f4:04:d6:6a:1b:2c:0e:ab:cb: e4:b5:70:e0:86:43:55:ff:c1:df:39:5d:e0:86:19:2e:69:31: 01:1b:03:e1:81:df:d1:64:96:0c:a3:db:8d:d7:6c:f1:d9:1f: 8a:fc:48:7b:1a:a5:04:79:be:34:8c:d2:f5:6e:dc:86:68:62: ec:de:92:5a:53:70:6f:bd:37:a1:5a:ab:15:7f:6e:36:39:a0: b2:8a:65:3b:a4:04:9f:3e:c8:4f:b1:1e:a6:ec:53:b3:f9:3f: 9c:e1:15:74:2a:b1:4b:07:db:19:30:97:76:6a:b5:e3:ed:20: 1f:78:80:98 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcg6aJ98xHuqlerRHN7vpPC+T6LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MjcxNjUzMThaFw0yNjA3MjgxOTIzMThaMDMxMTAvBgNV BAMTKDlFQjc2QzcxQzVDREMyNzY1MDFENjMyODgzNTIzRTY3OTBBRjJEOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfF1FuqacWX8wACuVnu4iP7qR pYgoFFqNuErPCk4HNsZgqjB5w+IbjjbYWTtXaSbjRHUI9f8cqrkrFSJk/Ukk3AZN LrZVn95ZLwEpG8vWeK+t599cYXSP0mZ1Xn5nj86yaFxOW0vmMvRoqQgLUGn5Lvrj S4LtSymPuXt6cyW2zpok9zNHNzx4OVl/pensKHNg6X7ap6rFzWwp+eiPgAgBl+tq W6lmgBeJWOZ7dZfgxSQt3n383Ozc0kFOcefn+IwMLcAaApxStb2nRN8NisABOU6J 7p0Rgkqj5TCjOXxYTsp9ZEl2FiCxhcZOTljyBieVoe74Nt8XpIXmThlyZEV7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnrdsccXNwnZQHWMog1I+Z5CvLY0wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONvta8Ax8zLxXfkudzGz hworgYigHlwGidyrGzWqm4LkWo0qQ9dT+NME/CM9SqPndFu019bq67m8n1NvbBcd aiq3GhRRbCHntAUy1LG2Ure2qYQSn9b79bGpV6F3A5xw8wc5hNpl6q/O4yRooie3 3420AuzGXCUCGd5Fk1swd5Z1ahwOW77Z9ATWahssDqvL5LVw4IZDVf/B3zld4IYZ LmkxARsD4YHf0WSWDKPbjdds8dkfivxIexqlBHm+NIzS9W7chmhi7N6SWlNwb703 oVqrFX9uNjmgsoplO6QEnz7IT7EepuxTs/k/nOEVdCqxSwfbGTCXdmq14+0gH3iA mA== -----END CERTIFICATE-----Generated at Mon Jul 27 20:32:13 2026 by rpki-client