$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: Zy/GU4K378ZecYaUHbaPytfmm2fHQKnPriALxWBsVlI= Subject key identifier: E7:86:BE:7B:F3:F3:FC:12:97:FB:86:00:96:48:53:0A:43:66:45:61 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 29F7DCDD6701A91E4DA3399DDDA6FC880D3E1148 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0572 Signing time: Mon 07 Sep 2026 03:11:43 +0000 Manifest this update: Mon 07 Sep 2026 03:06:43 +0000 Manifest next update: Tue 08 Sep 2026 07:05:43 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: ftotHety7x/eUY5fH0BUqZJcyYjyj48UPl3+zapLZ84=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 08 Sep 2026 07:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f7:dc:dd:67:01:a9:1e:4d:a3:39:9d:dd:a6:fc:88:0d:3e:11:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Sep 7 03:06:43 2026 GMT Not After : Sep 8 07:05:43 2026 GMT Subject: CN=E786BE7BF3F3FC1297FB86009648530A43664561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5f:bd:70:03:6f:e6:d0:42:6d:25:09:6f:a9: 42:35:5a:31:f6:29:a7:30:86:cb:67:f6:57:80:49: b3:d1:36:59:01:ab:75:99:7f:ad:c4:06:88:ea:06: d8:20:7d:80:83:89:8e:52:0c:0c:f1:ad:b5:6a:5b: 4a:40:49:a7:c4:5d:6a:19:db:14:12:81:50:c4:e3: d5:43:58:2c:79:59:b7:4a:34:f2:76:f1:6d:d6:7f: 51:de:ce:0a:f4:3b:0b:7d:07:52:a8:50:64:0d:ef: 59:61:fe:ef:52:4d:e2:3c:96:50:ff:7c:a7:51:94: 30:90:fa:07:2c:b4:3d:19:db:56:61:5a:db:72:10: d7:8d:01:98:97:36:5c:30:14:bb:a8:3c:8b:98:64: 42:f1:af:62:15:d2:39:33:aa:39:1f:32:87:92:da: 65:9d:50:31:4b:a1:f5:2b:1a:6b:4c:9a:f7:ec:a6: 1b:3d:ce:67:83:29:99:28:ba:e7:da:90:0e:1d:6d: d5:8b:96:89:b8:fd:d6:bf:2b:af:f0:6e:ee:7d:b4: 19:13:fe:29:cb:38:a8:ad:3a:72:4d:d1:d2:a8:1f: 8f:ce:63:a9:9b:a0:75:1c:6e:ad:44:09:8c:a7:9d: 42:d5:20:e5:3d:34:38:dc:2c:90:c5:11:91:e0:dd: a5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:86:BE:7B:F3:F3:FC:12:97:FB:86:00:96:48:53:0A:43:66:45:61 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:7e:d7:93:2c:89:43:57:93:07:72:b7:4a:5d:43:d4:b0:03: db:7e:bd:3a:68:80:26:ab:f2:6e:3e:f5:cf:b3:39:f4:26:45: ff:b8:bf:48:35:ed:5a:08:4f:aa:b1:24:08:ef:17:40:6c:e0: 3a:41:46:74:ad:8c:2c:80:69:eb:92:8f:83:68:59:80:cc:cd: c7:7e:c2:f1:54:34:0e:b6:c5:9a:ce:67:3e:e3:e9:2b:56:51: cc:bd:5d:4e:a3:19:3c:f8:9f:29:dd:48:f4:ee:c3:0b:a4:fe: f9:93:a9:49:91:55:71:0a:d1:58:55:6a:d3:50:8b:91:e3:b9: 31:f9:6c:a4:74:e3:4a:48:76:e6:cc:0c:eb:3d:de:e2:01:8a: de:09:b3:4b:26:ce:25:99:fc:cf:20:aa:86:44:88:b0:70:bb: 28:1f:c7:8a:0a:85:0c:e9:b0:95:c7:ed:0b:47:24:53:84:fb: b5:ca:cb:69:89:a5:71:d3:86:ef:c7:9f:b6:d0:d7:07:f8:9b: f3:b0:74:ce:8c:21:96:f1:13:ed:58:40:09:ba:a5:bf:f2:c1: 17:12:31:7b:2f:1a:69:5b:1a:f4:86:38:a2:7e:04:bf:54:b6: d1:97:6b:c5:d9:ac:d2:e8:d1:21:d9:ba:84:9e:06:57:e4:b4: c7:c4:17:7c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKffc3WcBqR5Nozmd3ab8iA0+EUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA5MDcwMzA2NDNaFw0yNjA5MDgwNzA1NDNaMDMxMTAvBgNV BAMTKEU3ODZCRTdCRjNGM0ZDMTI5N0ZCODYwMDk2NDg1MzBBNDM2NjQ1NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEX71wA2/m0EJtJQlvqUI1WjH2 Kacwhstn9leASbPRNlkBq3WZf63EBojqBtggfYCDiY5SDAzxrbVqW0pASafEXWoZ 2xQSgVDE49VDWCx5WbdKNPJ28W3Wf1Hezgr0Owt9B1KoUGQN71lh/u9STeI8llD/ fKdRlDCQ+gcstD0Z21ZhWttyENeNAZiXNlwwFLuoPIuYZELxr2IV0jkzqjkfMoeS 2mWdUDFLofUrGmtMmvfsphs9zmeDKZkouufakA4dbdWLlom4/da/K6/wbu59tBkT /inLOKitOnJN0dKoH4/OY6mboHUcbq1ECYynnULVIOU9NDjcLJDFEZHg3aWPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU54a+e/Pz/BKX+4YAlkhTCkNmRWEwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACH7XkyyJQ1eTB3K3Sl1D 1LAD2369OmiAJqvybj71z7M59CZF/7i/SDXtWghPqrEkCO8XQGzgOkFGdK2MLIBp 65KPg2hZgMzNx37C8VQ0DrbFms5nPuPpK1ZRzL1dTqMZPPifKd1I9O7DC6T++ZOp SZFVcQrRWFVq01CLkeO5MflspHTjSkh25swM6z3e4gGK3gmzSybOJZn8zyCqhkSI sHC7KB/HigqFDOmwlcftC0ckU4T7tcrLaYmlcdOG78efttDXB/ib87B0zowhlvET 7VhACbqlv/LBFxIxey8aaVsa9IY4on4Ev1S20Zdrxdms0ujRIdm6hJ4GV+S0x8QX fA== -----END CERTIFICATE-----Generated at Mon Sep 7 09:08:32 2026 by rpki-client