$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: yjrH5a8+TRUzEOpdfeeNdqrVSLPQojA3aoY8p8Wv/iQ= Subject key identifier: 96:51:30:F1:E8:23:55:C8:B1:FD:07:4D:6E:7A:51:C8:A3:07:50:2A Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 231460FC4978351254D1B72DA0F759C0D0C28343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04A3 Signing time: Fri 03 Apr 2026 20:50:01 +0000 Manifest this update: Fri 03 Apr 2026 20:45:01 +0000 Manifest next update: Sun 05 Apr 2026 00:12:01 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: eyzSBrZeLzqfEICgLowkc7issDKO2vNgf37UykUJ3qA=) 6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 04 Apr 2026 22:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:14:60:fc:49:78:35:12:54:d1:b7:2d:a0:f7:59:c0:d0:c2:83:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 3 20:45:01 2026 GMT Not After : Apr 5 00:12:01 2026 GMT Subject: CN=965130F1E82355C8B1FD074D6E7A51C8A307502A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:ae:d5:27:48:72:c5:5b:49:b1:6b:22:79: 19:1a:49:c2:d3:bd:02:2c:ea:b4:14:63:3c:18:7c: d3:c0:32:5c:04:a5:a6:6e:68:7c:89:ff:58:aa:da: 65:e8:a6:f8:e1:d6:f7:1c:2d:1d:d4:86:e9:8b:4e: 61:c7:b5:c5:44:6f:b6:cc:4e:5a:69:c4:0e:86:96: 61:e9:b9:e9:c8:d2:95:83:bc:f3:13:a8:f5:0e:8f: 91:34:a8:74:ee:d2:b4:00:4a:47:b3:43:2e:ea:b7: 8f:d6:52:44:ab:0d:ce:43:ca:d8:43:f7:54:07:db: 2f:37:f7:dd:18:74:4d:8d:04:92:58:77:e8:74:3c: 4d:2e:a5:ae:5b:87:2d:fd:be:4b:35:8e:74:6c:a0: d3:49:72:17:e2:5d:4d:57:f6:7b:62:b1:00:83:ba: 81:1b:82:98:4d:fe:fe:40:94:da:e6:7f:81:42:72: 39:db:1d:b7:ec:7b:fd:b0:cb:97:e5:15:f7:11:f5: 1a:bf:6e:05:7c:7d:3b:25:2d:46:61:f7:00:a7:64: ae:42:1d:17:6d:ca:81:3f:a0:b0:a6:ce:36:d1:57: 0b:40:42:1d:4b:d7:04:c7:15:07:c1:59:3d:f3:ba: b3:70:e0:52:1c:f7:88:c0:f7:4f:3c:5b:f9:54:d1: 25:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:51:30:F1:E8:23:55:C8:B1:FD:07:4D:6E:7A:51:C8:A3:07:50:2A X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:5f:11:7b:73:66:8c:26:8c:65:5d:87:66:6d:be:e6:f1:94: fb:96:cf:f2:82:9e:a8:61:8c:22:92:ee:43:66:50:f6:22:67: 95:aa:70:ca:86:08:02:d9:9f:f2:70:a5:0c:24:c3:b6:55:04: ce:42:76:92:9e:2d:59:bd:3f:49:e7:0d:6a:fe:95:d3:f7:65: 3d:30:11:12:b1:e1:a3:5e:be:b5:33:0d:f1:1f:3b:1e:1b:85: 32:16:0a:ef:01:74:e5:30:d1:4c:01:7b:af:f1:cb:1b:59:66: ec:8c:23:1b:ef:1f:6e:db:76:2b:04:00:74:1e:cf:ca:88:27: 45:86:9d:22:45:3c:55:42:a7:ab:b8:57:01:4a:fb:68:6d:d5: c9:27:18:b9:a3:28:e8:7b:08:f0:92:d6:7e:6a:ff:c6:71:28: 95:d6:47:7b:02:e0:79:67:f3:74:81:2e:d3:7d:94:f7:fe:66: 2b:3e:a0:f7:3a:cb:01:5f:5b:f1:5a:98:94:74:05:18:e9:66: a2:3d:64:a5:77:72:44:18:de:95:ca:3e:4c:33:4b:9e:c1:62: ee:b5:f9:69:80:b8:ff:42:27:17:1f:3e:23:dc:e8:c0:70:a4: 72:c5:18:72:1b:3f:ae:53:f5:6a:14:b4:53:b2:96:c6:39:7f: a2:df:02:a9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIxRg/El4NRJU0bctoPdZwNDCg0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA0MDMyMDQ1MDFaFw0yNjA0MDUwMDEyMDFaMDMxMTAvBgNV BAMTKDk2NTEzMEYxRTgyMzU1QzhCMUZEMDc0RDZFN0E1MUM4QTMwNzUwMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3oq7VJ0hyxVtJsWsieRkaScLT vQIs6rQUYzwYfNPAMlwEpaZuaHyJ/1iq2mXopvjh1vccLR3UhumLTmHHtcVEb7bM TlppxA6GlmHpuenI0pWDvPMTqPUOj5E0qHTu0rQASkezQy7qt4/WUkSrDc5DythD 91QH2y83990YdE2NBJJYd+h0PE0upa5bhy39vks1jnRsoNNJchfiXU1X9ntisQCD uoEbgphN/v5AlNrmf4FCcjnbHbfse/2wy5flFfcR9Rq/bgV8fTslLUZh9wCnZK5C HRdtyoE/oLCmzjbRVwtAQh1L1wTHFQfBWT3zurNw4FIc94jA9088W/lU0SUnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUllEw8egjVcix/QdNbnpRyKMHUCowHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN18Re3NmjCaMZV2HZm2+ 5vGU+5bP8oKeqGGMIpLuQ2ZQ9iJnlapwyoYIAtmf8nClDCTDtlUEzkJ2kp4tWb0/ SecNav6V0/dlPTARErHho16+tTMN8R87HhuFMhYK7wF05TDRTAF7r/HLG1lm7Iwj G+8fbtt2KwQAdB7PyognRYadIkU8VUKnq7hXAUr7aG3VyScYuaMo6HsI8JLWfmr/ xnEoldZHewLgeWfzdIEu032U9/5mKz6g9zrLAV9b8VqYlHQFGOlmoj1kpXdyRBje lco+TDNLnsFi7rX5aYC4/0InFx8+I9zowHCkcsUYchs/rlP1ahS0U7KWxjl/ot8C qQ== -----END CERTIFICATE-----Generated at Sat Apr 4 08:57:19 2026 by rpki-client