$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: LToVp5zijcbsl2VRLhEUEBlWs8jSSe8Pgu3rrcUWQzg= Subject key identifier: CF:70:EB:27:14:87:A5:A4:06:A2:0F:C9:8E:AA:B0:D9:09:DB:33:1F Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 4A093DB62746FF6CE15495C22FDBC98AFB4682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0469 Signing time: Thu 19 Feb 2026 15:18:00 +0000 Manifest this update: Thu 19 Feb 2026 15:13:00 +0000 Manifest next update: Fri 20 Feb 2026 18:50:00 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: qGsCndnsr/CNViIUNjm+oWva7/XUXMKGKC5WeFOYDXM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Feb 2026 18:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:09:3d:b6:27:46:ff:6c:e1:54:95:c2:2f:db:c9:8a:fb:46:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Feb 19 15:13:00 2026 GMT Not After : Feb 20 18:50:00 2026 GMT Subject: CN=CF70EB271487A5A406A20FC98EAAB0D909DB331F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:f2:6e:39:6c:c7:25:18:1a:b4:b1:00:9d: 28:7c:7b:e3:4d:e4:e6:aa:82:af:aa:90:a5:9d:b5: 53:03:1d:24:ff:b8:24:1c:64:55:84:57:da:0c:3b: b2:98:6c:16:f8:cb:b4:2b:18:59:a3:33:75:31:ac: 26:be:e1:f5:27:9c:4d:fb:a7:88:b9:56:1b:6d:83: 02:01:8e:d3:63:74:59:5f:7a:62:2a:f8:11:75:d0: 99:59:50:f0:67:06:e1:f0:ec:a7:1e:a2:3b:6a:c1: 2e:c4:46:12:34:b7:8c:f6:e1:b1:e9:01:0c:d0:cd: b3:63:28:5d:38:c2:0d:fc:74:9d:a6:44:fa:c1:f6: e4:72:37:07:07:ea:bb:4e:76:d5:c1:84:2a:04:39: 89:bf:45:9d:61:a9:61:7a:71:aa:50:e8:12:57:b8: 33:55:0e:e9:59:aa:96:ad:f4:3d:15:a5:40:8e:54: 8b:ea:5b:55:dc:b0:0a:94:2d:47:06:98:14:e2:0f: fe:8c:47:c6:a4:53:5c:e8:fa:76:e5:e7:75:25:2b: 86:e3:96:a5:12:f2:b3:08:3c:19:6c:78:ac:ac:19: 6a:26:3a:b9:ea:96:82:82:d5:a9:b5:f6:3d:75:be: 76:b5:86:51:98:d2:1a:39:73:eb:fd:83:a6:cc:73: d0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:70:EB:27:14:87:A5:A4:06:A2:0F:C9:8E:AA:B0:D9:09:DB:33:1F X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fb:66:08:85:93:ab:d9:ed:36:bc:bc:cf:9d:c1:f3:e6:29: e8:5e:b6:ef:6a:10:37:6d:84:1d:ec:e3:8d:9d:0c:6d:fd:22: 17:b2:96:c3:2b:14:34:0c:d9:a1:31:88:f5:f4:7c:9d:11:d9: 69:ac:f4:8e:16:9e:20:9e:e3:af:05:0c:6c:97:d9:a1:80:a6: da:2b:17:be:7a:9c:8a:cf:37:dc:28:07:17:62:43:f8:00:b9: cc:80:76:41:f7:eb:0a:93:99:79:6f:73:a7:6a:91:80:ca:f1: 3f:d1:db:45:64:13:69:5f:5f:dc:e8:d2:f8:52:18:42:1a:c4: c8:a4:19:55:49:07:94:08:71:60:61:47:1a:f4:3e:50:1a:ef: b9:76:1d:aa:b7:b4:a6:e0:78:91:74:93:83:56:55:ea:f7:15: 42:99:92:62:5f:29:6c:eb:29:1a:fb:df:1a:6a:42:a0:83:ac: 60:fb:ae:18:30:fa:dc:a9:6c:12:8b:ed:ed:35:59:a2:6b:7a: 46:41:d4:c0:6d:d0:c1:fe:48:77:51:06:c5:6b:c7:5d:a2:1a: 7a:f9:86:bc:df:2f:6b:51:61:56:3c:f5:86:fd:3a:b3:66:7a: 36:13:4f:f4:46:6a:da:67:5d:29:15:04:d5:37:3f:83:33:e1: 04:75:7b:e4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgITSgk9tidG/2zhVJXCL9vJivtGgjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg0NTAyZTYzY2UwMWNhZDIzOWFjMzk3YmMyYmI1ZTZjMzQ3 ZGNlZWVhMB4XDTI2MDIxOTE1MTMwMFoXDTI2MDIyMDE4NTAwMFowMzExMC8GA1UE AxMoQ0Y3MEVCMjcxNDg3QTVBNDA2QTIwRkM5OEVBQUIwRDkwOURCMzMxRjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJgZ8m45bMclGBq0sQCdKHx7403k 5qqCr6qQpZ21UwMdJP+4JBxkVYRX2gw7sphsFvjLtCsYWaMzdTGsJr7h9SecTfun iLlWG22DAgGO02N0WV96Yir4EXXQmVlQ8GcG4fDspx6iO2rBLsRGEjS3jPbhsekB DNDNs2MoXTjCDfx0naZE+sH25HI3Bwfqu0521cGEKgQ5ib9FnWGpYXpxqlDoEle4 M1UO6Vmqlq30PRWlQI5Ui+pbVdywCpQtRwaYFOIP/oxHxqRTXOj6duXndSUrhuOW pRLyswg8GWx4rKwZaiY6ueqWgoLVqbX2PXW+drWGUZjSGjlz6/2Dpsxz0PUCAwEA AaOCAkcwggJDMB0GA1UdDgQWBBTPcOsnFIelpAaiD8mOqrDZCdszHzAfBgNVHSME GDAWgBRFAuY84BytI5rDl7wrtebDR9zu6jAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTEx YjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFDMzk3QkMyQkI1RTZDMzQ3RENFRUVBLmNy bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvUlFMbVBPQWNyU09hdzVlOEs3WG13MGZj N3VvLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdl NGYtNDg0NC04NGUyLWI3MTUzYjU1MTFiNC8wLzQ1MDJFNjNDRTAxQ0FEMjM5QUMz OTdCQzJCQjVFNkMzNDdEQ0VFRUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAs+2YIhZOr2e02vLzPncHz 5inoXrbvahA3bYQd7OONnQxt/SIXspbDKxQ0DNmhMYj19HydEdlprPSOFp4gnuOv BQxsl9mhgKbaKxe+epyKzzfcKAcXYkP4ALnMgHZB9+sKk5l5b3OnapGAyvE/0dtF ZBNpX1/c6NL4UhhCGsTIpBlVSQeUCHFgYUca9D5QGu+5dh2qt7Sm4HiRdJODVlXq 9xVCmZJiXyls6yka+98aakKgg6xg+64YMPrcqWwSi+3tNVmia3pGQdTAbdDB/kh3 UQbFa8ddohp6+Ya83y9rUWFWPPWG/TqzZno2E0/0RmraZ10pFQTVNz+DM+EEdXvk -----END CERTIFICATE-----Generated at Fri Feb 20 06:48:28 2026 by rpki-client