$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: ltQxWgAXpwOYXEK00dR1iFkYZiWkqXW1ym+frtcvzbs= Subject key identifier: 4D:1E:CA:C0:03:B4:09:11:6D:14:8A:B4:DD:97:7A:CF:6A:A3:CA:E5 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 36458457AD17DEE038136E725A0D1D7B75A0CC1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0551 Signing time: Wed 12 Aug 2026 23:36:17 +0000 Manifest this update: Wed 12 Aug 2026 23:31:17 +0000 Manifest next update: Fri 14 Aug 2026 02:24:17 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: mhJWaZbIbNMB7b0P2sYBStpC+tCE7FnLC1rTwZhNZmU=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 02:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:45:84:57:ad:17:de:e0:38:13:6e:72:5a:0d:1d:7b:75:a0:cc:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 12 23:31:17 2026 GMT Not After : Aug 14 02:24:17 2026 GMT Subject: CN=4D1ECAC003B409116D148AB4DD977ACF6AA3CAE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a1:ad:66:81:5a:4b:14:23:4d:19:3e:8a:86: bd:25:6f:5c:66:d5:e6:38:49:6d:f2:cd:20:bd:85: f1:9e:6b:2e:9e:f1:0e:54:cd:c9:47:b4:80:f5:b1: 3d:75:5b:14:10:86:11:e6:78:eb:9a:ca:1f:9d:29: b1:a2:a8:f7:97:74:37:12:86:28:2a:9c:ee:89:9c: 8a:66:1a:77:49:8b:64:9c:1f:f8:62:87:46:bf:8b: 3d:fc:15:07:d3:40:28:de:45:5f:d1:66:80:a1:e6: 46:74:f9:22:c6:14:32:2c:37:ad:70:29:f5:31:7e: 01:5a:6d:ba:df:8e:3a:9f:65:41:93:ee:d5:1f:43: 37:c3:a5:4c:c5:19:59:92:3f:ee:e3:b6:f6:8c:fd: 14:06:9e:28:97:da:2c:b6:2a:09:e6:00:99:20:e7: 00:a1:ff:e5:ab:2a:c1:70:47:fc:e9:3f:ed:b3:93: 04:08:77:77:53:ae:e7:93:17:a5:0d:66:39:67:3f: b4:4d:c4:e4:ab:cf:61:dd:8e:7e:7c:a1:28:62:4d: 0b:68:cd:05:a8:a9:a7:80:46:75:40:66:69:e3:23: 55:f4:4b:41:0f:64:30:4d:9b:17:75:9f:32:62:64: cd:f6:55:a0:f5:ff:31:0a:9b:c9:83:ad:6c:2e:a2: e6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1E:CA:C0:03:B4:09:11:6D:14:8A:B4:DD:97:7A:CF:6A:A3:CA:E5 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:96:82:ba:2e:9d:f0:1c:c1:1a:6f:49:ea:04:e2:c0:75:2c: 8f:3d:9a:86:24:c6:66:be:a1:6e:6e:50:8c:3a:01:5f:29:48: 2c:a4:6c:0b:06:07:d1:4f:68:8f:37:ff:b5:db:90:0a:e3:99: 80:72:3f:b8:ee:ec:88:da:90:dd:ef:e0:d2:dc:e7:97:05:4c: 3d:98:14:16:81:c0:71:9f:65:d8:b1:c6:3b:c3:e7:3a:2b:2b: 45:4b:17:19:a6:ad:32:70:44:22:09:a6:f2:e6:1d:36:87:b8: 64:43:cb:c0:c8:4c:66:76:b4:be:d4:47:26:6c:9d:e5:ff:ff: 41:42:5e:b1:47:6e:d8:45:e5:d6:66:e0:90:fe:f1:e4:a5:41: 8f:6a:f3:03:24:4b:e4:f4:4a:a9:df:ef:71:38:f3:18:b5:1c: c7:34:60:8e:e9:54:30:38:1e:6c:2f:a4:08:4b:1b:d2:e7:64: 67:90:51:ec:31:f6:31:6f:5b:0e:69:6f:60:16:ed:91:7c:d6: 62:f9:fb:ed:79:41:48:19:24:bf:ec:1e:65:48:b1:ae:9b:b6: bf:d5:ed:53:a0:71:d8:9b:f8:9f:60:2c:51:e3:d6:d4:79:3e: 00:50:60:4a:96:54:45:eb:28:ca:67:e4:5c:56:2f:98:ab:ec: 7f:d6:e2:62 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNkWEV60X3uA4E25yWg0de3WgzBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MTIyMzMxMTdaFw0yNjA4MTQwMjI0MTdaMDMxMTAvBgNV BAMTKDREMUVDQUMwMDNCNDA5MTE2RDE0OEFCNEREOTc3QUNGNkFBM0NBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKoa1mgVpLFCNNGT6Khr0lb1xm 1eY4SW3yzSC9hfGeay6e8Q5UzclHtID1sT11WxQQhhHmeOuayh+dKbGiqPeXdDcS higqnO6JnIpmGndJi2ScH/hih0a/iz38FQfTQCjeRV/RZoCh5kZ0+SLGFDIsN61w KfUxfgFabbrfjjqfZUGT7tUfQzfDpUzFGVmSP+7jtvaM/RQGniiX2iy2KgnmAJkg 5wCh/+WrKsFwR/zpP+2zkwQId3dTrueTF6UNZjlnP7RNxOSrz2Hdjn58oShiTQto zQWoqaeARnVAZmnjI1X0S0EPZDBNmxd1nzJiZM32VaD1/zEKm8mDrWwuoubxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUTR7KwAO0CRFtFIq03Zd6z2qjyuUwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZaCui6d8BzBGm9J6gTi wHUsjz2ahiTGZr6hbm5QjDoBXylILKRsCwYH0U9ojzf/tduQCuOZgHI/uO7siNqQ 3e/g0tznlwVMPZgUFoHAcZ9l2LHGO8PnOisrRUsXGaatMnBEIgmm8uYdNoe4ZEPL wMhMZna0vtRHJmyd5f//QUJesUdu2EXl1mbgkP7x5KVBj2rzAyRL5PRKqd/vcTjz GLUcxzRgjulUMDgebC+kCEsb0udkZ5BR7DH2MW9bDmlvYBbtkXzWYvn77XlBSBkk v+weZUixrpu2v9XtU6Bx2Jv4n2AsUePW1Hk+AFBgSpZUResoymfkXFYvmKvsf9bi Yg== -----END CERTIFICATE-----Generated at Thu Aug 13 15:23:13 2026 by rpki-client