$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: TK7GgvxZgF1ATYyvCgls/noAEELEWWGLh/satlGE33A= Subject key identifier: DC:5E:E7:51:01:DC:DE:D2:1A:CF:DA:64:FE:81:05:EA:46:4A:D9:27 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 3CC8D9FBD97D376F87D81B00AEC943234023A76D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04AB Signing time: Thu 09 Apr 2026 22:59:11 +0000 Manifest this update: Thu 09 Apr 2026 22:54:11 +0000 Manifest next update: Sat 11 Apr 2026 00:30:11 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: KWDu2S14oik/PiUK+nLappf42ajRMJgSptiHd7TKs/s=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 00:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c8:d9:fb:d9:7d:37:6f:87:d8:1b:00:ae:c9:43:23:40:23:a7:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 9 22:54:11 2026 GMT Not After : Apr 11 00:30:11 2026 GMT Subject: CN=DC5EE75101DCDED21ACFDA64FE8105EA464AD927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5e:21:9f:2e:53:d3:56:68:32:ff:aa:96:6a: 56:e6:56:d2:ef:3b:ad:7b:7a:42:cb:55:68:20:56: 39:2f:99:ac:9f:25:89:b8:11:e1:04:4a:ca:c4:e2: 3b:de:30:f6:4f:8f:d4:8e:67:1e:76:c1:40:41:a7: 09:be:5e:84:83:77:3a:1c:7e:e8:a4:0b:f3:b4:f2: 0f:c3:80:90:03:28:af:74:2d:81:54:41:f0:e4:5c: 0a:6e:5c:17:32:0a:41:f0:03:46:0b:59:73:6e:35: e6:21:24:9c:db:fd:c4:7b:88:a9:4b:e5:9b:88:a0: 55:8e:89:48:7e:0e:e6:a0:db:e7:9a:62:60:0a:90: e3:8f:6a:90:53:6d:55:55:20:ca:f4:61:a7:04:f7: 5b:7e:ef:1a:a8:33:3e:37:34:23:3d:9f:74:d3:39: cb:00:c8:6d:e4:95:43:a3:f9:21:16:b1:e7:66:31: bb:73:ba:5a:47:b1:77:25:ed:9c:93:26:91:84:31: 4a:3c:ae:e0:57:00:c6:26:b3:26:b7:07:02:66:8a: 8f:f4:92:77:d6:d2:8d:9c:28:49:74:8f:51:97:16: 1f:5a:46:ce:92:db:57:c4:b4:93:54:81:5d:d2:8d: 3d:cd:c2:eb:69:91:cd:6a:ab:33:1b:1f:9a:33:a6: 6a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5E:E7:51:01:DC:DE:D2:1A:CF:DA:64:FE:81:05:EA:46:4A:D9:27 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:4a:ad:74:0f:93:3e:7b:65:22:8d:cf:c5:ad:35:da:18:0a: 22:05:ab:da:cd:d0:a6:57:8d:ba:19:77:0f:a5:e7:d6:53:56: 50:da:0f:48:65:98:3a:3b:66:1f:df:90:38:6a:68:25:f2:89: d3:51:69:21:0f:56:93:7c:42:f9:0a:17:c4:30:2f:cd:a0:88: df:69:32:cf:bb:60:e7:1c:c8:ee:3b:47:d3:87:12:8c:0f:5e: 1a:10:fb:bd:57:c0:38:46:70:11:2e:09:8b:dd:34:77:a9:0d: ed:79:d3:34:58:2f:ce:bb:ba:8f:9e:6a:20:f6:85:dd:a8:f7: f9:fc:2e:aa:75:f8:7a:97:84:fc:3a:32:20:96:f9:a6:56:e3: 1d:50:fa:21:61:fd:52:d7:53:bf:7c:ad:e8:05:2b:00:e6:c2: 26:f4:74:ad:9c:52:21:61:c6:1a:5f:87:f1:4a:95:51:72:6a: 18:b1:f9:94:c7:0d:ff:f9:0e:b1:e2:8d:c3:58:d5:4a:05:36: 7e:70:fc:42:0e:78:00:d0:9d:17:ad:42:32:3b:72:d0:9c:99: 4d:4b:8d:cb:9c:81:5f:dd:73:b2:0a:9d:9f:00:3f:09:6a:c5: 61:a3:1a:e7:e7:7a:c5:08:d6:78:ee:e8:5b:af:9e:f7:9d:ba: 22:47:56:20 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPMjZ+9l9N2+H2BsArslDI0Ajp20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA0MDkyMjU0MTFaFw0yNjA0MTEwMDMwMTFaMDMxMTAvBgNV BAMTKERDNUVFNzUxMDFEQ0RFRDIxQUNGREE2NEZFODEwNUVBNDY0QUQ5MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXXiGfLlPTVmgy/6qWalbmVtLv O617ekLLVWggVjkvmayfJYm4EeEESsrE4jveMPZPj9SOZx52wUBBpwm+XoSDdzoc fuikC/O08g/DgJADKK90LYFUQfDkXApuXBcyCkHwA0YLWXNuNeYhJJzb/cR7iKlL 5ZuIoFWOiUh+Duag2+eaYmAKkOOPapBTbVVVIMr0YacE91t+7xqoMz43NCM9n3TT OcsAyG3klUOj+SEWsedmMbtzulpHsXcl7ZyTJpGEMUo8ruBXAMYmsya3BwJmio/0 knfW0o2cKEl0j1GXFh9aRs6S21fEtJNUgV3SjT3Nwutpkc1qqzMbH5ozpmqRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3F7nUQHc3tIaz9pk/oEF6kZK2ScwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEqtdA+TPntlIo3Pxa01 2hgKIgWr2s3QpleNuhl3D6Xn1lNWUNoPSGWYOjtmH9+QOGpoJfKJ01FpIQ9Wk3xC +QoXxDAvzaCI32kyz7tg5xzI7jtH04cSjA9eGhD7vVfAOEZwES4Ji900d6kN7XnT NFgvzru6j55qIPaF3aj3+fwuqnX4epeE/DoyIJb5plbjHVD6IWH9UtdTv3yt6AUr AObCJvR0rZxSIWHGGl+H8UqVUXJqGLH5lMcN//kOseKNw1jVSgU2fnD8Qg54ANCd F61CMjty0JyZTUuNy5yBX91zsgqdnwA/CWrFYaMa5+d6xQjWeO7oW6+e9526IkdW IA== -----END CERTIFICATE-----Generated at Fri Apr 10 12:05:48 2026 by rpki-client