$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 66SWjx5jMwsC5mVJQVDTrMMrt1nSl2alBiylEcD3mJ4= Subject key identifier: 6E:4C:64:F0:69:63:90:D8:13:2F:B0:3A:DC:F1:00:A4:5E:C3:D5:53 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 18DACC5373D59A800ECB48F62EBD2089F6DC86D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0568 Signing time: Sun 30 Aug 2026 15:40:54 +0000 Manifest this update: Sun 30 Aug 2026 15:35:54 +0000 Manifest next update: Mon 31 Aug 2026 16:41:54 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: k4Isw7Y7pzkr6OkSBB5KBMO9i+aqbg8faWjElXZwaDo=) 8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 31 Aug 2026 16:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:da:cc:53:73:d5:9a:80:0e:cb:48:f6:2e:bd:20:89:f6:dc:86:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 30 15:35:54 2026 GMT Not After : Aug 31 16:41:54 2026 GMT Subject: CN=6E4C64F0696390D8132FB03ADCF100A45EC3D553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b5:93:45:b6:9c:58:0b:cf:eb:97:c0:83:52: d9:eb:4f:a4:59:98:e1:b9:91:21:7c:19:d5:ba:7f: 14:4d:f8:24:c2:22:ec:de:f5:bc:c6:01:58:f8:3d: 87:95:b9:7c:73:a4:6f:9c:8a:7b:c6:36:66:0c:4b: 47:db:0b:34:ef:ac:79:3d:78:8b:9e:d1:dc:c8:ae: 78:75:72:83:61:d6:d0:5b:0d:a6:38:6e:42:80:3c: 33:a7:e0:97:5c:84:54:80:3b:38:1e:35:2b:87:39: ff:19:2f:1c:8e:a1:df:27:71:a0:07:70:70:35:2d: fe:0d:50:15:e5:16:65:10:05:be:f3:54:f9:97:e2: 31:0b:68:2a:85:ad:45:4a:1e:64:34:b8:29:06:a3: 3d:d5:e6:92:82:7f:af:0b:90:3b:a5:12:7f:f1:97: b9:da:27:4f:5b:22:37:e6:96:3e:75:74:08:60:27: 96:4e:5a:1c:20:9a:bd:4e:ad:ab:48:48:65:3b:7b: bc:b9:10:7d:1c:98:0d:2e:8c:c6:4c:d6:ad:21:14: 04:da:14:8a:40:1a:e0:7a:2c:1b:3c:65:4f:42:0e: b2:4f:5c:2e:d3:b1:bf:20:8d:7d:20:6d:d4:2f:be: 9b:4d:8d:df:bc:04:ef:36:a6:79:91:13:82:ed:c0: 0d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4C:64:F0:69:63:90:D8:13:2F:B0:3A:DC:F1:00:A4:5E:C3:D5:53 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:bb:8b:73:9a:28:8f:b7:b9:24:d6:2f:e9:94:ec:0b:c3:10: 43:2e:82:5d:60:e9:a3:05:10:4c:96:b9:9a:25:90:d9:79:82: 24:2e:3c:a3:a4:35:85:fa:df:d9:77:54:37:d7:c6:fe:b9:6c: 24:76:a1:a0:f8:35:97:8a:90:aa:3f:75:a7:9f:02:3d:75:41: 7f:3e:91:5a:d1:3e:75:41:a8:d3:9a:4e:8f:bd:34:61:20:23: 44:84:f2:43:4d:14:8b:4e:03:22:a9:db:6f:c9:aa:ee:5b:d8: 47:73:ea:ff:38:2d:89:c2:2b:7a:f8:23:58:a1:2c:b7:00:c1: 00:6b:dc:73:00:e4:db:ee:17:12:f1:a8:82:d3:85:0c:1b:cd: 7a:cd:c0:ce:f6:81:e0:3f:7b:8c:d9:8b:6e:c2:95:23:ea:b9: 42:8f:76:be:47:97:30:fe:86:d9:68:72:1d:e8:51:2a:c8:40: 63:e6:3e:d3:41:dd:28:cb:9a:91:86:71:db:87:ed:01:95:18: 23:d1:2f:e3:97:3f:bd:a0:61:72:6e:f9:15:ac:87:b3:ea:41: e0:12:bc:6e:f7:47:33:80:51:a0:ae:43:f5:78:d7:10:eb:fc: 8d:95:c6:3a:41:46:80:78:57:7c:21:07:72:01:67:ca:f2:8b: b2:48:46:fc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGNrMU3PVmoAOy0j2Lr0gifbchtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MzAxNTM1NTRaFw0yNjA4MzExNjQxNTRaMDMxMTAvBgNV BAMTKDZFNEM2NEYwNjk2MzkwRDgxMzJGQjAzQURDRjEwMEE0NUVDM0Q1NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDetZNFtpxYC8/rl8CDUtnrT6RZ mOG5kSF8GdW6fxRN+CTCIuze9bzGAVj4PYeVuXxzpG+cinvGNmYMS0fbCzTvrHk9 eIue0dzIrnh1coNh1tBbDaY4bkKAPDOn4JdchFSAOzgeNSuHOf8ZLxyOod8ncaAH cHA1Lf4NUBXlFmUQBb7zVPmX4jELaCqFrUVKHmQ0uCkGoz3V5pKCf68LkDulEn/x l7naJ09bIjfmlj51dAhgJ5ZOWhwgmr1OratISGU7e7y5EH0cmA0ujMZM1q0hFATa FIpAGuB6LBs8ZU9CDrJPXC7Tsb8gjX0gbdQvvptNjd+8BO82pnmRE4LtwA3DAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUbkxk8GljkNgTL7A63PEApF7D1VMwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7uLc5ooj7e5JNYv6ZTs C8MQQy6CXWDpowUQTJa5miWQ2XmCJC48o6Q1hfrf2XdUN9fG/rlsJHahoPg1l4qQ qj91p58CPXVBfz6RWtE+dUGo05pOj700YSAjRITyQ00Ui04DIqnbb8mq7lvYR3Pq /zgticIrevgjWKEstwDBAGvccwDk2+4XEvGogtOFDBvNes3AzvaB4D97jNmLbsKV I+q5Qo92vkeXMP6G2WhyHehRKshAY+Y+00HdKMuakYZx24ftAZUYI9Ev45c/vaBh cm75FayHs+pB4BK8bvdHM4BRoK5D9XjXEOv8jZXGOkFGgHhXfCEHcgFnyvKLskhG /A== -----END CERTIFICATE-----Generated at Mon Aug 31 02:42:31 2026 by rpki-client