$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: rwo/xDcoMJafnhqt/ENlzXGbpHFQxw+LfTPm0Uk9new= Subject key identifier: 75:50:B7:20:70:43:8E:EC:0D:80:8A:6C:C6:0F:B5:F9:E1:FA:18:18 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 781D9E8615D3B5CA63592C843139466CBDB5B2C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04BD Signing time: Thu 23 Apr 2026 13:34:25 +0000 Manifest this update: Thu 23 Apr 2026 13:29:25 +0000 Manifest next update: Fri 24 Apr 2026 14:59:25 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: FruD+V5KxtLsNbbHfdv2F8Zjo9ipg+a6Yb7S9B5duaU=) 7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Apr 2026 14:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1d:9e:86:15:d3:b5:ca:63:59:2c:84:31:39:46:6c:bd:b5:b2:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 23 13:29:25 2026 GMT Not After : Apr 24 14:59:25 2026 GMT Subject: CN=7550B72070438EEC0D808A6CC60FB5F9E1FA1818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:73:82:d7:ed:7b:55:ca:b2:52:24:eb:7b:95: e8:e6:74:79:44:f3:c3:1a:e3:2d:a2:ea:a6:fc:1c: e7:fd:a3:41:47:d1:b1:5b:94:48:37:85:a1:b1:bf: d6:c5:6e:8c:98:99:93:41:fc:4a:59:d0:0a:7b:07: 7b:e3:3c:7f:0a:5a:57:66:f3:a7:74:1a:8a:b6:cc: 1c:d5:59:5c:45:7d:8f:29:63:f2:d8:28:12:af:80: b3:b7:6f:b4:76:cf:2f:69:67:41:70:49:a8:d0:83: 63:8c:46:1c:8e:26:f0:44:6b:73:f7:e8:60:7e:4f: 70:bd:d0:62:9f:84:31:68:f7:81:7e:ef:33:e9:d4: 82:45:c9:ce:c6:58:d7:ef:05:b0:da:05:07:8a:32: 00:86:7a:3e:19:dc:ad:62:65:10:a6:c9:9f:e9:86: eb:06:24:ee:7d:ff:69:dd:7a:81:80:be:c1:83:a6: d4:5c:0b:de:53:1b:a0:7d:6c:71:64:fd:18:2f:18: 07:ab:64:66:bb:dd:ed:72:9f:6d:4d:c3:c8:8f:d8: 07:68:e0:2f:56:6f:8a:9e:c2:b3:85:fc:76:e7:1c: d5:f6:9f:f3:c9:d7:ee:1c:ba:15:10:b2:7b:d4:47: 15:ba:2c:f1:97:4d:ea:4c:ed:7a:8e:68:61:b1:f6: da:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:50:B7:20:70:43:8E:EC:0D:80:8A:6C:C6:0F:B5:F9:E1:FA:18:18 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:23:f8:d2:79:21:5c:76:dd:b3:d8:4b:be:a1:c9:ed:14:16: 52:60:62:82:47:af:b7:6e:1a:09:ca:92:24:92:7e:14:ba:b9: a7:05:1b:49:7e:e2:0c:0e:ef:d0:ca:66:01:56:c5:4f:61:0a: 25:54:29:79:86:b9:88:7d:90:36:be:cb:ee:96:52:64:20:75: 31:cf:4f:a0:fa:d3:0b:74:d7:7c:59:ea:52:9b:d0:e5:e6:13: 1e:46:18:b9:c0:9d:ba:ed:dd:19:99:bd:f2:ec:d4:7e:fe:5b: e8:f2:31:f5:68:b5:de:29:69:7d:6b:43:a4:95:f1:45:ad:cd: 13:01:5a:f5:a4:30:00:01:c9:75:c2:11:8f:78:38:c9:fe:f7: 4b:f4:e0:d4:1d:20:5b:c3:61:a1:a5:c3:11:17:df:38:30:e3: 00:65:4d:12:cd:ff:a3:29:0e:97:22:56:05:52:fc:08:6e:27: 69:17:6e:05:47:51:79:aa:8f:bf:f9:08:2e:5d:9e:93:5d:78: 2c:84:20:0c:c1:61:a0:1b:64:fc:75:ee:77:d9:89:ea:e1:66: 06:85:ad:13:96:04:db:31:f3:2f:34:f8:27:c4:21:90:c9:5b: 6a:b6:46:c7:37:8c:6d:e5:38:40:e7:2b:42:fc:33:2e:88:52: b3:49:a9:29 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUeB2ehhXTtcpjWSyEMTlGbL21ssYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA0MjMxMzI5MjVaFw0yNjA0MjQxNDU5MjVaMDMxMTAvBgNV BAMTKDc1NTBCNzIwNzA0MzhFRUMwRDgwOEE2Q0M2MEZCNUY5RTFGQTE4MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYc4LX7XtVyrJSJOt7lejmdHlE 88Ma4y2i6qb8HOf9o0FH0bFblEg3haGxv9bFboyYmZNB/EpZ0Ap7B3vjPH8KWldm 86d0Goq2zBzVWVxFfY8pY/LYKBKvgLO3b7R2zy9pZ0FwSajQg2OMRhyOJvBEa3P3 6GB+T3C90GKfhDFo94F+7zPp1IJFyc7GWNfvBbDaBQeKMgCGej4Z3K1iZRCmyZ/p husGJO59/2ndeoGAvsGDptRcC95TG6B9bHFk/RgvGAerZGa73e1yn21Nw8iP2Ado 4C9Wb4qewrOF/HbnHNX2n/PJ1+4cuhUQsnvURxW6LPGXTepM7XqOaGGx9tq1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUdVC3IHBDjuwNgIpsxg+1+eH6GBgwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCP40nkhXHbds9hLvqHJ 7RQWUmBigkevt24aCcqSJJJ+FLq5pwUbSX7iDA7v0MpmAVbFT2EKJVQpeYa5iH2Q Nr7L7pZSZCB1Mc9PoPrTC3TXfFnqUpvQ5eYTHkYYucCduu3dGZm98uzUfv5b6PIx 9Wi13ilpfWtDpJXxRa3NEwFa9aQwAAHJdcIRj3g4yf73S/Tg1B0gW8NhoaXDERff ODDjAGVNEs3/oykOlyJWBVL8CG4naRduBUdReaqPv/kILl2ek114LIQgDMFhoBtk /HXud9mJ6uFmBoWtE5YE2zHzLzT4J8QhkMlbarZGxzeMbeU4QOcrQvwzLohSs0mp KQ== -----END CERTIFICATE-----Generated at Thu Apr 23 23:16:19 2026 by rpki-client