$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: YQksEs0XhHrSAf1jzyq5FI3T4CJZxWWT/eSmTD/vfzc= Subject key identifier: 71:21:EF:02:23:BD:18:D2:EA:23:07:CC:E8:4A:67:C5:43:FA:55:D5 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 7BD18FEB1688929BA64BFC84EF5334A966E98F23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04FE Signing time: Thu 11 Jun 2026 09:13:14 +0000 Manifest this update: Thu 11 Jun 2026 09:08:14 +0000 Manifest next update: Fri 12 Jun 2026 12:46:14 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: OK3JSjODy8VHxQAHOzlhotkA3kqdqwxCV0FAM7Cr/84=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 12:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d1:8f:eb:16:88:92:9b:a6:4b:fc:84:ef:53:34:a9:66:e9:8f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 11 09:08:14 2026 GMT Not After : Jun 12 12:46:14 2026 GMT Subject: CN=7121EF0223BD18D2EA2307CCE84A67C543FA55D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0e:11:d1:f0:bb:24:7d:2f:b7:b5:bd:8c:3e: 53:33:44:7f:c3:ff:25:a7:ef:2a:80:8a:10:cf:cd: df:42:04:20:63:27:c5:cc:cf:0f:ca:a1:61:65:ec: d3:ca:b2:4e:4c:33:00:a6:65:cc:14:af:d5:e0:5f: 18:33:f8:b8:4b:8a:48:5d:9f:ce:04:a3:c4:82:bc: 1b:e0:8b:0e:37:4f:e2:ac:23:82:50:01:7a:ec:9d: 4c:92:4f:c1:8e:95:3d:2b:24:98:09:3f:ea:31:7a: 45:42:cd:47:d8:0d:20:8f:86:8a:42:a8:d6:74:31: 98:22:d5:f6:db:ba:2b:ea:9c:d5:20:1c:73:98:84: ad:07:9a:94:39:45:7d:f4:d7:e8:51:41:7b:91:fd: dd:d0:b7:c7:30:09:f4:bc:9f:bd:c4:af:69:e8:3d: ed:ee:bf:1a:1c:d9:c2:fa:b2:37:dd:ca:11:b7:6e: 33:18:53:19:7d:20:28:67:09:a4:ad:30:3c:39:42: 80:55:14:95:6f:76:24:cb:b9:58:12:39:f8:63:a1: cb:8d:85:94:f8:56:18:95:63:6b:be:8f:8d:5f:3f: ab:6b:90:06:79:48:5d:a4:ae:e9:6c:6f:11:3d:fe: 5f:5d:73:2c:bc:86:18:dd:b5:24:51:f3:e8:8c:8b: 62:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:21:EF:02:23:BD:18:D2:EA:23:07:CC:E8:4A:67:C5:43:FA:55:D5 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b2:96:98:4a:57:5a:bf:77:72:59:d7:fa:24:8a:3c:7b:11: fc:c5:56:03:66:c0:ea:d9:e1:5b:b4:b0:38:53:95:e3:e8:29: 05:e1:39:88:d6:3a:80:7f:46:b2:36:c9:ad:5a:ea:4c:2a:ab: c5:18:a6:12:47:a7:11:0a:0c:dc:ef:59:a6:3f:c8:8e:7e:ba: 0f:c5:29:4b:91:7c:35:c0:4b:56:60:2d:4e:74:7c:f1:2e:14: 02:6c:1e:2c:98:67:48:08:d4:84:d6:2e:03:12:9c:e1:68:66: 2a:d5:37:82:53:cc:92:2b:12:5f:0d:27:bd:f9:61:9f:d3:77: 39:a1:75:7e:ca:ee:af:66:5b:d4:c5:b8:78:07:39:f3:cb:75: 30:e6:f9:64:77:9d:ff:2b:46:28:68:79:8b:50:74:25:27:e6: 83:46:b0:4c:70:d9:c3:59:db:30:d2:8d:be:c5:55:af:f2:6b: e2:82:d7:79:54:78:bd:01:96:f4:42:df:3a:37:d5:66:10:bb: 4e:d5:cc:94:a1:0c:2c:16:e9:e2:41:e7:51:e6:cd:af:83:c0: 8a:b2:57:d4:5c:09:db:55:e2:5d:a5:cc:ba:2c:8a:49:bd:dc: 66:e0:f8:29:39:c5:ac:b6:48:74:51:07:52:eb:a1:ae:36:43: 58:ae:98:eb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUe9GP6xaIkpumS/yE71M0qWbpjyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MTEwOTA4MTRaFw0yNjA2MTIxMjQ2MTRaMDMxMTAvBgNV BAMTKDcxMjFFRjAyMjNCRDE4RDJFQTIzMDdDQ0U4NEE2N0M1NDNGQTU1RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0DhHR8LskfS+3tb2MPlMzRH/D /yWn7yqAihDPzd9CBCBjJ8XMzw/KoWFl7NPKsk5MMwCmZcwUr9XgXxgz+LhLikhd n84Eo8SCvBvgiw43T+KsI4JQAXrsnUyST8GOlT0rJJgJP+oxekVCzUfYDSCPhopC qNZ0MZgi1fbbuivqnNUgHHOYhK0HmpQ5RX301+hRQXuR/d3Qt8cwCfS8n73Er2no Pe3uvxoc2cL6sjfdyhG3bjMYUxl9IChnCaStMDw5QoBVFJVvdiTLuVgSOfhjocuN hZT4VhiVY2u+j41fP6trkAZ5SF2krulsbxE9/l9dcyy8hhjdtSRR8+iMi2LvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUcSHvAiO9GNLqIwfM6EpnxUP6VdUwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7KWmEpXWr93clnX+iSK PHsR/MVWA2bA6tnhW7SwOFOV4+gpBeE5iNY6gH9GsjbJrVrqTCqrxRimEkenEQoM 3O9Zpj/Ijn66D8UpS5F8NcBLVmAtTnR88S4UAmweLJhnSAjUhNYuAxKc4WhmKtU3 glPMkisSXw0nvflhn9N3OaF1fsrur2Zb1MW4eAc588t1MOb5ZHed/ytGKGh5i1B0 JSfmg0awTHDZw1nbMNKNvsVVr/Jr4oLXeVR4vQGW9ELfOjfVZhC7TtXMlKEMLBbp 4kHnUebNr4PAirJX1FwJ21XiXaXMuiyKSb3cZuD4KTnFrLZIdFEHUuuhrjZDWK6Y 6w== -----END CERTIFICATE-----Generated at Fri Jun 12 04:12:42 2026 by rpki-client