$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: WwtMtrimnmny/EmayprS6vVLiSvjVZsKxsJlulahmOQ= Subject key identifier: 8D:B6:60:01:95:33:D4:70:BE:38:6D:43:29:A4:83:FE:60:F5:CB:99 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 5AF21C90CBB5DBA3672CCCB12E448C75A41D2A94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04E5 Signing time: Sat 23 May 2026 09:22:17 +0000 Manifest this update: Sat 23 May 2026 09:17:17 +0000 Manifest next update: Sun 24 May 2026 10:31:17 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: eNzLUsBhtdIiDpPfq2Huu66qIfmAUtRWCui7lrBLUCE=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 May 2026 10:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f2:1c:90:cb:b5:db:a3:67:2c:cc:b1:2e:44:8c:75:a4:1d:2a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 23 09:17:17 2026 GMT Not After : May 24 10:31:17 2026 GMT Subject: CN=8DB660019533D470BE386D4329A483FE60F5CB99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:c1:b8:61:a2:e9:cc:87:c7:de:6c:8d:49: 93:d1:d0:29:c4:d0:15:21:22:a7:db:45:6a:db:e8: 1d:9a:77:d6:bd:92:cf:cc:0f:3c:32:b4:b0:0a:ad: be:f8:9d:68:8b:6f:d7:cc:b5:ae:b8:9d:9f:75:ee: f9:56:7c:47:77:b1:98:a0:88:c0:f5:55:d0:c3:90: 2e:95:7d:31:87:1d:5a:2b:69:e8:a9:bf:5a:09:ad: 79:cf:b1:e2:0b:9d:db:4d:81:45:44:33:b6:22:c4: e8:29:c6:46:d7:51:f1:c9:6f:b7:ac:93:8b:64:6c: f6:9d:ed:c6:81:dc:76:c0:33:6a:aa:0a:9b:1c:ef: 2b:e0:c2:6d:0c:7a:10:f6:40:68:75:c4:28:b6:7b: c9:af:e0:0e:2f:2f:98:f6:9a:f8:02:f7:74:99:02: e1:5f:21:98:42:73:6c:33:e7:5d:b6:9a:91:d4:fa: da:8d:87:99:aa:16:30:62:28:84:23:a3:3f:ea:ce: d9:41:d6:d3:b9:cd:2e:50:37:2d:ee:17:39:1f:73: c4:f6:ad:cc:76:4f:d0:22:37:70:ae:7a:b2:55:58: 5f:c9:53:21:c2:60:70:e0:42:a4:87:89:c9:4f:05: 99:49:9b:b8:a4:e9:83:f2:fe:30:70:93:ca:9e:a6: 4a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B6:60:01:95:33:D4:70:BE:38:6D:43:29:A4:83:FE:60:F5:CB:99 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:3b:fa:5d:bd:2b:70:2b:c3:c0:84:28:e8:e7:b0:6d:69:83: 94:58:9d:b8:39:74:36:13:c6:5f:03:a3:82:c9:34:53:f8:14: bc:92:33:a2:4b:75:59:85:40:01:62:14:41:78:3f:cb:ec:1d: 07:2f:5f:00:1e:0a:3a:dd:90:26:d1:a7:c5:5d:8e:7c:23:0f: 2e:ad:fc:6b:c1:b6:c8:ff:00:4c:8e:16:6b:66:d6:a1:14:eb: 3a:88:0d:1e:f0:ff:63:04:bb:9d:3f:e6:90:29:92:8f:cb:3d: e7:00:c9:8b:91:9f:77:66:6a:88:3a:68:fc:aa:25:0b:34:c0: c0:99:f4:0d:14:5a:46:43:7e:4d:d8:b4:10:77:1f:85:a1:03: 3f:a6:6d:27:32:82:fa:80:ea:54:d2:93:db:46:0f:d5:3c:51: af:4d:50:45:01:b5:0a:31:d8:41:4d:61:2c:03:d7:fd:a1:a6: bc:ed:32:9c:3f:e1:f6:17:b0:3d:f6:d5:40:93:d2:5b:ab:21: f5:09:1a:ff:43:f5:5c:bc:16:3d:a8:f9:75:b7:8e:cf:b7:c9: 7d:5f:03:ad:31:70:37:8e:52:ad:08:6c:7f:11:2f:5b:93:f5: af:6f:b3:f0:4e:dc:09:75:2c:56:42:cf:35:b7:88:00:2e:94: 6a:d0:86:fc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWvIckMu126NnLMyxLkSMdaQdKpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MjMwOTE3MTdaFw0yNjA1MjQxMDMxMTdaMDMxMTAvBgNV BAMTKDhEQjY2MDAxOTUzM0Q0NzBCRTM4NkQ0MzI5QTQ4M0ZFNjBGNUNCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/x8G4YaLpzIfH3myNSZPR0CnE 0BUhIqfbRWrb6B2ad9a9ks/MDzwytLAKrb74nWiLb9fMta64nZ917vlWfEd3sZig iMD1VdDDkC6VfTGHHVoraeipv1oJrXnPseILndtNgUVEM7YixOgpxkbXUfHJb7es k4tkbPad7caB3HbAM2qqCpsc7yvgwm0MehD2QGh1xCi2e8mv4A4vL5j2mvgC93SZ AuFfIZhCc2wz5122mpHU+tqNh5mqFjBiKIQjoz/qztlB1tO5zS5QNy3uFzkfc8T2 rcx2T9AiN3CuerJVWF/JUyHCYHDgQqSHiclPBZlJm7ik6YPy/jBwk8qepkp7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUjbZgAZUz1HC+OG1DKaSD/mD1y5kwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDv6Xb0rcCvDwIQo6Oew bWmDlFiduDl0NhPGXwOjgsk0U/gUvJIzokt1WYVAAWIUQXg/y+wdBy9fAB4KOt2Q JtGnxV2OfCMPLq38a8G2yP8ATI4Wa2bWoRTrOogNHvD/YwS7nT/mkCmSj8s95wDJ i5Gfd2ZqiDpo/KolCzTAwJn0DRRaRkN+Tdi0EHcfhaEDP6ZtJzKC+oDqVNKT20YP 1TxRr01QRQG1CjHYQU1hLAPX/aGmvO0ynD/h9hewPfbVQJPSW6sh9Qka/0P1XLwW Paj5dbeOz7fJfV8DrTFwN45SrQhsfxEvW5P1r2+z8E7cCXUsVkLPNbeIAC6UatCG /A== -----END CERTIFICATE-----Generated at Sat May 23 23:05:00 2026 by rpki-client