$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 0PM6l4Wzgco9NNe2Zf485ra0kT9VJLv6/2HcJacFSBM= Subject key identifier: 1C:A7:89:41:3D:98:DF:16:D9:E0:DB:C2:BA:69:9D:53:F8:85:47:4E Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 5CA1EFD0DF8BB7A4978EF4280E977F9CBD35CEC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0544 Signing time: Mon 03 Aug 2026 16:06:40 +0000 Manifest this update: Mon 03 Aug 2026 16:01:40 +0000 Manifest next update: Tue 04 Aug 2026 19:49:40 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: EiNAYC6Vt5S9WrOOQnE989Iut0n032mkdaGf4DIA+Mg=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Aug 2026 19:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a1:ef:d0:df:8b:b7:a4:97:8e:f4:28:0e:97:7f:9c:bd:35:ce:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 3 16:01:40 2026 GMT Not After : Aug 4 19:49:40 2026 GMT Subject: CN=1CA789413D98DF16D9E0DBC2BA699D53F885474E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4a:e6:c7:68:64:5d:57:a6:a6:75:e3:79:b8: 9e:15:00:38:b2:94:96:30:10:8f:60:47:e4:ef:e6: fb:7d:53:64:ff:f2:5e:52:f3:8d:2a:2a:dd:f6:0e: 66:7f:7c:b5:d4:1a:14:6c:42:d3:ac:9a:6b:97:c0: 63:e9:32:93:1f:2f:7e:2c:78:5a:f8:09:b9:3a:39: 44:e3:52:0f:ef:a0:fe:c4:a4:c4:9b:e3:89:aa:b9: b4:0a:7f:58:f9:ec:1f:a1:73:16:52:8c:73:20:1d: 3d:59:59:a0:34:0c:7f:85:99:eb:fd:9d:1d:27:79: 46:84:ec:2e:64:9b:ab:71:dd:04:3a:f4:bf:53:8a: c7:47:4e:dc:c8:c6:14:ca:7f:02:5b:5d:64:4e:7a: fb:c3:54:be:2d:62:97:b6:ee:f3:ee:ea:a1:6d:10: 92:39:27:1d:dd:76:62:a0:d4:56:74:f0:fb:9e:5f: 16:a1:3e:9f:6c:be:86:ef:79:83:8b:32:87:cc:fc: b0:b1:38:e0:ce:c3:0e:27:b8:8d:29:81:0f:d7:78: dc:96:70:ae:54:75:df:d8:75:91:55:e8:82:04:b8: 03:95:b2:b2:e6:01:27:a4:06:23:7d:1a:ee:45:15: 29:f8:36:99:d0:95:db:61:6b:6f:c1:ab:7c:a1:4b: 46:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A7:89:41:3D:98:DF:16:D9:E0:DB:C2:BA:69:9D:53:F8:85:47:4E X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:79:85:da:07:31:8c:86:58:13:19:26:59:02:ac:ab:0a:1a: ea:93:db:30:9d:59:eb:b7:95:65:51:20:19:3c:e7:01:0d:36: 51:57:1d:23:77:6d:5f:b2:b7:01:e2:03:42:99:10:ea:f9:66: e2:58:16:29:e4:56:12:96:cc:a3:81:13:85:d2:93:b5:9b:f1: 84:fe:25:68:c7:a5:6d:61:1a:83:06:35:a7:84:47:2f:39:d3: 9e:f0:75:1d:d3:54:a0:51:d6:33:be:cb:b4:a1:a2:b3:36:9e: d0:49:21:9b:c4:76:39:05:15:7f:93:57:6b:fb:ec:a5:00:e3: 49:db:13:c1:3b:45:f1:6b:52:53:aa:7b:90:b6:c9:62:e7:61: a3:a9:26:b4:56:52:89:e6:74:ca:19:3c:5a:48:c7:07:39:47: 77:91:b5:01:4c:15:14:9a:e4:e7:ed:12:4d:90:ca:6b:f9:78: 43:e6:9f:8d:a0:ea:89:ab:e3:4a:c4:57:e9:1d:91:5a:80:02: ed:5a:6e:88:78:ec:14:da:6b:ea:dc:e7:aa:c4:8a:2b:0a:d6: 20:3f:60:c8:90:da:29:9b:37:fb:ac:6b:9e:d5:cd:31:2b:ba: 8a:64:50:2d:4f:bc:6b:01:d5:bd:2f:fb:9e:f4:04:97:29:08: d5:da:4c:71 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXKHv0N+Lt6SXjvQoDpd/nL01zsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MDMxNjAxNDBaFw0yNjA4MDQxOTQ5NDBaMDMxMTAvBgNV BAMTKDFDQTc4OTQxM0Q5OERGMTZEOUUwREJDMkJBNjk5RDUzRjg4NTQ3NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqSubHaGRdV6amdeN5uJ4VADiy lJYwEI9gR+Tv5vt9U2T/8l5S840qKt32DmZ/fLXUGhRsQtOsmmuXwGPpMpMfL34s eFr4Cbk6OUTjUg/voP7EpMSb44mqubQKf1j57B+hcxZSjHMgHT1ZWaA0DH+Fmev9 nR0neUaE7C5km6tx3QQ69L9TisdHTtzIxhTKfwJbXWROevvDVL4tYpe27vPu6qFt EJI5Jx3ddmKg1FZ08PueXxahPp9svobveYOLMofM/LCxOODOww4nuI0pgQ/XeNyW cK5Udd/YdZFV6IIEuAOVsrLmASekBiN9Gu5FFSn4NpnQldtha2/Bq3yhS0YrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHKeJQT2Y3xbZ4NvCummdU/iFR04wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHmF2gcxjIZYExkmWQKs qwoa6pPbMJ1Z67eVZVEgGTznAQ02UVcdI3dtX7K3AeIDQpkQ6vlm4lgWKeRWEpbM o4EThdKTtZvxhP4laMelbWEagwY1p4RHLznTnvB1HdNUoFHWM77LtKGiszae0Ekh m8R2OQUVf5NXa/vspQDjSdsTwTtF8WtSU6p7kLbJYudho6kmtFZSieZ0yhk8WkjH BzlHd5G1AUwVFJrk5+0STZDKa/l4Q+afjaDqiavjSsRX6R2RWoAC7VpuiHjsFNpr 6tznqsSKKwrWID9gyJDaKZs3+6xrntXNMSu6imRQLU+8awHVvS/7nvQElykI1dpM cQ== -----END CERTIFICATE-----Generated at Tue Aug 4 06:00:30 2026 by rpki-client