$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: u5JQRIMXKaWmG84Y12z+owHJGeQVrkGDIVxXKNtsBE4= Subject key identifier: 11:A9:77:62:96:D6:2D:F2:97:85:49:B7:33:12:52:0A:6F:C2:FE:FA Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 082ACAB5800031F96C26522BB778A3C544EFD668 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 056B Signing time: Tue 01 Sep 2026 22:06:47 +0000 Manifest this update: Tue 01 Sep 2026 22:01:47 +0000 Manifest next update: Thu 03 Sep 2026 00:00:47 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: efZbV8kogxkrx8Fon9Ru/QZSFBVXhhd1Maz3m/s5e6A=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Sep 2026 23:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:2a:ca:b5:80:00:31:f9:6c:26:52:2b:b7:78:a3:c5:44:ef:d6:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Sep 1 22:01:47 2026 GMT Not After : Sep 3 00:00:47 2026 GMT Subject: CN=11A9776296D62DF2978549B73312520A6FC2FEFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f8:2b:a6:31:43:73:ad:b6:7c:ee:06:5f:e2: ca:be:93:91:dc:c4:12:c0:72:57:87:5f:be:fe:c2: a0:d4:7f:2a:81:15:44:69:13:cc:bb:48:5e:eb:6f: 83:8c:50:9c:fb:43:b4:9d:80:cd:19:69:76:55:67: de:56:e7:10:d1:b3:02:46:4e:9e:ad:41:89:8a:dc: e7:1b:34:a6:d0:95:8d:b9:39:d0:b5:66:0a:cf:11: c3:93:2f:c2:c9:1c:3b:fe:02:d1:89:b6:f0:fb:50: 16:8e:3c:f9:90:9f:49:10:5c:4b:8d:cf:d4:b6:d0: ee:0a:82:75:89:7b:af:b6:17:75:f1:09:38:75:46: 04:34:9a:25:c1:15:56:65:1c:49:e3:fb:80:64:30: c6:22:e1:e9:7c:b0:4c:72:c4:a8:cd:db:3d:d8:8e: 56:8c:a9:97:1e:89:50:b0:7e:ca:30:c3:ae:a6:42: 0c:2e:b4:b9:bc:d1:f6:cc:3c:7c:d4:d6:87:84:c6: 8e:10:26:ba:70:66:39:ea:f8:c1:a1:b4:0c:9e:d8: 09:d4:45:ce:c1:2d:58:6a:67:7f:1b:dc:82:da:9c: 32:e4:00:b5:e3:a8:34:bc:88:e0:9f:f3:8d:65:39: 1d:84:52:0e:ae:a1:07:c0:ee:b8:76:39:a8:86:9d: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A9:77:62:96:D6:2D:F2:97:85:49:B7:33:12:52:0A:6F:C2:FE:FA X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:7f:f7:24:b0:af:f8:ac:2c:21:97:8b:99:04:e0:10:07:e9: fc:d6:ce:cd:ff:07:62:44:1b:d2:4e:43:3c:0e:9b:18:6c:28: e1:d1:4a:94:65:9a:4c:6a:f7:3e:e9:40:a6:1e:d0:24:76:16: 94:6d:15:06:77:5e:1b:55:80:9d:95:40:4b:ff:dd:ad:ef:03: e5:45:08:53:fe:45:48:b4:1d:88:4f:2a:1c:37:f8:f4:75:43: be:0d:a9:78:53:c0:ee:09:f1:79:5d:5c:72:ea:f9:93:76:a5: c7:94:85:bf:a4:41:73:67:d6:84:f1:ba:a2:d2:91:94:f7:b9: 5a:a1:77:ea:36:d7:25:5a:5a:cb:24:33:8f:58:a1:09:88:6f: cf:1a:05:ed:7f:db:52:2e:54:99:66:48:f5:53:72:37:f1:30: 08:d5:c9:7c:f7:05:be:3d:1f:42:b9:37:ce:98:9f:f5:54:d5: 07:9d:08:1f:d0:5b:e6:36:2f:83:87:28:b7:ce:52:63:7e:46: 2b:9e:df:05:e8:31:07:8e:d3:ba:78:1c:f7:32:2b:e7:6b:9e: ad:aa:d0:fe:6a:5e:73:73:91:9b:3e:a0:d8:01:ba:40:1c:99: 8a:ff:18:1b:65:63:09:a7:d7:55:64:f2:a8:d9:21:c5:51:97: 0c:02:64:8a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCCrKtYAAMflsJlIrt3ijxUTv1mgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA5MDEyMjAxNDdaFw0yNjA5MDMwMDAwNDdaMDMxMTAvBgNV BAMTKDExQTk3NzYyOTZENjJERjI5Nzg1NDlCNzMzMTI1MjBBNkZDMkZFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+CumMUNzrbZ87gZf4sq+k5Hc xBLAcleHX77+wqDUfyqBFURpE8y7SF7rb4OMUJz7Q7SdgM0ZaXZVZ95W5xDRswJG Tp6tQYmK3OcbNKbQlY25OdC1ZgrPEcOTL8LJHDv+AtGJtvD7UBaOPPmQn0kQXEuN z9S20O4KgnWJe6+2F3XxCTh1RgQ0miXBFVZlHEnj+4BkMMYi4el8sExyxKjN2z3Y jlaMqZceiVCwfsoww66mQgwutLm80fbMPHzU1oeExo4QJrpwZjnq+MGhtAye2AnU Rc7BLVhqZ38b3ILanDLkALXjqDS8iOCf841lOR2EUg6uoQfA7rh2OaiGnZ97AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUEal3YpbWLfKXhUm3MxJSCm/C/vowHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3/3JLCv+KwsIZeLmQTg EAfp/NbOzf8HYkQb0k5DPA6bGGwo4dFKlGWaTGr3PulAph7QJHYWlG0VBndeG1WA nZVAS//dre8D5UUIU/5FSLQdiE8qHDf49HVDvg2peFPA7gnxeV1ccur5k3alx5SF v6RBc2fWhPG6otKRlPe5WqF36jbXJVpayyQzj1ihCYhvzxoF7X/bUi5UmWZI9VNy N/EwCNXJfPcFvj0fQrk3zpif9VTVB50IH9Bb5jYvg4cot85SY35GK57fBegxB47T ungc9zIr52uerarQ/mpec3ORmz6g2AG6QByZiv8YG2VjCafXVWTyqNkhxVGXDAJk ig== -----END CERTIFICATE-----Generated at Wed Sep 2 04:54:28 2026 by rpki-client