$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: gBIN8c+srVUmGDrutXyH0b5YK6AI5pGoHqVmyv4HKgY= Subject key identifier: B6:71:A1:D8:37:DB:76:A1:D2:97:43:21:C4:9D:6F:AE:64:FA:11:D7 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 3773EC65E98DDC72CD6AE5AA03A2F973D2AF84C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04E8 Signing time: Mon 25 May 2026 15:33:05 +0000 Manifest this update: Mon 25 May 2026 15:28:05 +0000 Manifest next update: Tue 26 May 2026 15:47:05 +0000 Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: X7aYdtMrAKHmDF9+/SqQM1YCBh3Yy2IisxefvMwQers=) 4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 May 2026 15:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:73:ec:65:e9:8d:dc:72:cd:6a:e5:aa:03:a2:f9:73:d2:af:84:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 25 15:28:05 2026 GMT Not After : May 26 15:47:05 2026 GMT Subject: CN=B671A1D837DB76A1D2974321C49D6FAE64FA11D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a2:29:d0:90:9e:f0:55:da:d0:ce:dd:6a:a7: 81:29:8e:73:14:4e:f8:50:2f:74:27:da:00:c1:14: a5:a3:12:f4:90:01:c0:93:6a:36:f6:41:32:46:92: 50:a0:88:18:2e:f0:be:56:76:11:11:5b:bb:4e:b0: 4d:05:32:bd:a7:17:78:e0:1f:e6:f7:47:d8:25:f0: 03:84:78:36:d3:92:79:0a:0a:8e:5d:cd:21:d8:65: 6b:55:2b:ec:22:91:d5:63:cc:57:7d:c5:01:ce:4e: 27:d7:3b:fa:8c:41:cb:20:29:80:4c:af:1d:07:c8: 63:37:d5:9d:b4:f0:90:7a:c5:4d:e8:5c:bf:21:44: 6c:f8:09:f5:a7:1f:24:d5:70:ce:a0:8b:93:33:f6: e0:85:c0:c6:63:71:3d:1f:f3:85:f9:15:0d:fb:99: 71:51:6d:d8:d0:94:68:d3:a0:ac:4c:3e:16:6b:9f: cb:f4:04:d7:e7:9e:bc:1d:57:95:1b:eb:24:d5:34: 99:32:77:d1:c1:75:35:25:0f:f1:95:27:1e:b8:8a: 5f:20:49:8e:5a:15:c7:ec:c6:19:ad:00:be:54:85: a4:28:e0:48:6d:c2:af:59:01:f3:e2:79:7b:56:37: 25:53:c6:54:77:d8:0f:02:cc:30:77:95:55:1c:f7: 64:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:71:A1:D8:37:DB:76:A1:D2:97:43:21:C4:9D:6F:AE:64:FA:11:D7 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b6:ec:34:93:0c:33:a0:36:96:aa:e3:e7:f3:1e:57:8e:e7: 3c:31:e9:7c:73:b7:be:be:29:70:bb:f0:e0:1e:91:f1:84:87: fa:47:42:05:eb:ef:b7:b0:c2:1c:82:ec:0e:5c:1b:ab:5e:d3: 93:fd:c3:67:0d:b7:1d:20:e9:40:ba:fd:ed:6d:d7:8e:84:77: 2a:6f:e4:17:ba:40:99:ec:84:d9:da:ba:82:6e:84:58:3c:2e: 3e:32:56:c1:d2:0e:34:a4:e2:b6:a6:f0:8a:74:9d:63:a9:03: 16:4a:dd:6a:77:7b:66:82:64:23:9f:74:a1:d5:1a:8e:ec:f2: c5:da:86:0a:46:fe:5c:38:6e:6f:b6:0c:6a:26:7b:87:12:68: 49:ed:d6:59:42:81:60:a9:14:17:ab:41:db:17:d2:84:74:92: 3e:87:3e:03:b1:61:41:c6:c9:83:1e:a3:ba:aa:2d:e4:ac:ba: 59:ec:b3:0c:a2:21:45:72:7c:36:63:47:56:37:0b:25:37:9f: 21:01:f8:95:d0:e1:6b:6e:2e:a7:b3:a3:89:42:b7:c0:f0:21: 3a:00:87:e1:5d:42:54:94:29:6e:f0:5d:a8:e4:31:a3:a4:e6: 59:bd:42:af:68:9b:45:ab:68:aa:89:48:15:8d:fb:c1:67:dc: 54:5d:5c:97 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUN3PsZemN3HLNauWqA6L5c9KvhMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MjUxNTI4MDVaFw0yNjA1MjYxNTQ3MDVaMDMxMTAvBgNV BAMTKEI2NzFBMUQ4MzdEQjc2QTFEMjk3NDMyMUM0OUQ2RkFFNjRGQTExRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLoinQkJ7wVdrQzt1qp4EpjnMU TvhQL3Qn2gDBFKWjEvSQAcCTajb2QTJGklCgiBgu8L5WdhERW7tOsE0FMr2nF3jg H+b3R9gl8AOEeDbTknkKCo5dzSHYZWtVK+wikdVjzFd9xQHOTifXO/qMQcsgKYBM rx0HyGM31Z208JB6xU3oXL8hRGz4CfWnHyTVcM6gi5Mz9uCFwMZjcT0f84X5FQ37 mXFRbdjQlGjToKxMPhZrn8v0BNfnnrwdV5Ub6yTVNJkyd9HBdTUlD/GVJx64il8g SY5aFcfsxhmtAL5UhaQo4Ehtwq9ZAfPieXtWNyVTxlR32A8CzDB3lVUc92RFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUtnGh2DfbdqHSl0MhxJ1vrmT6EdcwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7bsNJMMM6A2lqrj5/Me V47nPDHpfHO3vr4pcLvw4B6R8YSH+kdCBevvt7DCHILsDlwbq17Tk/3DZw23HSDp QLr97W3XjoR3Km/kF7pAmeyE2dq6gm6EWDwuPjJWwdIONKTitqbwinSdY6kDFkrd and7ZoJkI590odUajuzyxdqGCkb+XDhub7YMaiZ7hxJoSe3WWUKBYKkUF6tB2xfS hHSSPoc+A7FhQcbJgx6juqot5Ky6WeyzDKIhRXJ8NmNHVjcLJTefIQH4ldDha24u p7OjiUK3wPAhOgCH4V1CVJQpbvBdqOQxo6TmWb1Cr2ibRatoqolIFY37wWfcVF1c lw== -----END CERTIFICATE-----Generated at Tue May 26 03:40:48 2026 by rpki-client