$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: U7nXGaPENM+nlgjJK13Z/UIEjRTRf8Yz/mm6t43y12Q= Subject key identifier: 60:EA:92:14:A5:E7:E2:8C:73:DA:6E:95:3B:18:B0:5D:C2:C5:03:4D Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 05AA7110163C7EA214395E8004BB4EF76100D1F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0537 Signing time: Fri 24 Jul 2026 16:08:46 +0000 Manifest this update: Fri 24 Jul 2026 16:03:46 +0000 Manifest next update: Sat 25 Jul 2026 20:01:46 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: HciNgPhwNozQ+pUhwprYHS6qNizjQh344eTKCrQcE64=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 16:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:aa:71:10:16:3c:7e:a2:14:39:5e:80:04:bb:4e:f7:61:00:d1:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 24 16:03:46 2026 GMT Not After : Jul 25 20:01:46 2026 GMT Subject: CN=60EA9214A5E7E28C73DA6E953B18B05DC2C5034D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a1:1f:b3:df:43:e4:f2:bf:f3:e6:9c:84:c8: 3a:a3:1f:26:e2:4d:7d:a2:29:8a:67:36:7d:62:18: 9a:c9:72:93:48:c6:b9:24:c7:74:85:23:24:2d:ee: bc:ed:aa:f6:3b:37:a5:bd:fd:42:61:c9:5d:92:4b: 04:15:0d:35:30:68:85:3e:00:84:4b:a8:0d:4a:58: 76:95:83:09:0c:ed:57:f8:34:c2:87:2b:14:fb:25: c5:7e:6a:41:1f:6a:55:01:43:fb:e7:bb:fd:8b:93: 62:5d:ea:dd:6b:ad:1b:c9:72:37:1e:91:d3:42:e6: d5:ec:a7:00:22:40:cb:c5:7e:28:d2:63:4d:b7:84: 69:14:c2:cf:e0:46:46:71:df:aa:e4:24:fb:40:cf: e3:8b:58:a2:7b:81:1a:06:e3:20:3d:7f:0c:cb:68: 40:0b:b0:a2:60:0d:3d:e5:94:5a:53:5a:88:5a:bd: e7:1a:54:02:2f:96:c9:3b:59:8b:36:f7:31:e3:b7: f5:20:bd:da:2b:a9:63:24:60:4e:43:87:a8:81:d2: 1b:83:c1:87:7a:b2:3b:c8:fe:c5:65:5c:48:d0:60: 41:0e:9a:22:60:3c:27:6c:cc:bf:1f:59:96:2a:a6: 8d:78:cb:f2:a4:7c:54:ce:5b:41:81:5c:11:44:b0: 3f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EA:92:14:A5:E7:E2:8C:73:DA:6E:95:3B:18:B0:5D:C2:C5:03:4D X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3b:0d:c8:79:7d:09:ec:18:44:49:8b:60:2c:cd:a7:f0:4d: 5d:cb:5b:e9:14:5a:0b:22:b4:84:d6:4f:37:bc:ba:76:ee:31: 07:11:ee:80:64:c3:b1:38:b3:e1:5c:ef:ce:3c:0f:2f:c6:23: da:53:11:d5:17:3e:58:09:7c:95:8c:5e:cd:ef:90:3f:aa:a9: c0:27:84:5e:92:ad:94:29:02:06:fe:a3:f6:98:9f:f0:2d:43: 2d:f4:99:92:d1:ab:ed:fd:1a:d0:d4:86:91:4c:e5:79:f8:2f: da:9b:78:bb:cf:7e:08:81:9f:ac:3b:1a:7c:25:eb:10:f6:64: e9:2d:5a:89:61:8d:b1:57:c8:51:55:1e:8d:f7:db:e1:f9:d2: 42:d6:c7:60:ac:83:f3:1d:b6:2e:7b:44:98:ee:ec:26:6a:76: 45:c6:fa:61:b5:04:05:f3:d9:be:6a:2a:d1:45:16:59:24:88: 87:87:e9:f8:a6:b7:40:51:f8:04:6b:78:56:01:33:1c:71:9e: 50:58:b3:16:92:b3:f6:1d:a8:29:ce:1d:f1:fe:51:ae:9d:47: 1d:47:64:39:9b:90:fb:d3:ca:20:c7:36:b3:7f:45:87:c9:cd: ab:94:df:b4:0e:d0:5e:e5:d9:2d:e9:2a:bc:84:4b:93:de:53: 5b:d9:11:74 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBapxEBY8fqIUOV6ABLtO92EA0fEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MjQxNjAzNDZaFw0yNjA3MjUyMDAxNDZaMDMxMTAvBgNV BAMTKDYwRUE5MjE0QTVFN0UyOEM3M0RBNkU5NTNCMThCMDVEQzJDNTAzNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcoR+z30Pk8r/z5pyEyDqjHybi TX2iKYpnNn1iGJrJcpNIxrkkx3SFIyQt7rztqvY7N6W9/UJhyV2SSwQVDTUwaIU+ AIRLqA1KWHaVgwkM7Vf4NMKHKxT7JcV+akEfalUBQ/vnu/2Lk2Jd6t1rrRvJcjce kdNC5tXspwAiQMvFfijSY023hGkUws/gRkZx36rkJPtAz+OLWKJ7gRoG4yA9fwzL aEALsKJgDT3llFpTWohavecaVAIvlsk7WYs29zHjt/UgvdorqWMkYE5Dh6iB0huD wYd6sjvI/sVlXEjQYEEOmiJgPCdszL8fWZYqpo14y/KkfFTOW0GBXBFEsD+tAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYOqSFKXn4oxz2m6VOxiwXcLFA00wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzsNyHl9CewYREmLYCzN p/BNXctb6RRaCyK0hNZPN7y6du4xBxHugGTDsTiz4VzvzjwPL8Yj2lMR1Rc+WAl8 lYxeze+QP6qpwCeEXpKtlCkCBv6j9pif8C1DLfSZktGr7f0a0NSGkUzlefgv2pt4 u89+CIGfrDsafCXrEPZk6S1aiWGNsVfIUVUejffb4fnSQtbHYKyD8x22LntEmO7s Jmp2Rcb6YbUEBfPZvmoq0UUWWSSIh4fp+Ka3QFH4BGt4VgEzHHGeUFizFpKz9h2o Kc4d8f5Rrp1HHUdkOZuQ+9PKIMc2s39Fh8nNq5TftA7QXuXZLekqvIRLk95TW9kR dA== -----END CERTIFICATE-----Generated at Fri Jul 24 18:21:44 2026 by rpki-client