$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: qBnTwlvDR3gpwpBTCXA5wwP8PJnokMVejkkNl9xFSjE= Subject key identifier: 38:6F:BF:0E:E2:A0:31:05:2F:36:21:35:4E:A9:B7:B2:E5:C0:AC:1A Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 56A5BC227185F3FE5481CC3FA04FBF1C83F7A200 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0528 Signing time: Mon 13 Jul 2026 06:09:04 +0000 Manifest this update: Mon 13 Jul 2026 06:04:04 +0000 Manifest next update: Tue 14 Jul 2026 07:02:04 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: aBoKe0PiS8XU00Ad4jhualQRFfZZR7nJDId+um3RCig=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 14 Jul 2026 07:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a5:bc:22:71:85:f3:fe:54:81:cc:3f:a0:4f:bf:1c:83:f7:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 13 06:04:04 2026 GMT Not After : Jul 14 07:02:04 2026 GMT Subject: CN=386FBF0EE2A031052F3621354EA9B7B2E5C0AC1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a4:34:b3:e6:ca:4d:a8:d6:09:b0:27:68:15: 3b:ab:ba:62:f1:67:eb:9d:02:3f:bc:e5:d7:00:bf: d4:c2:98:4b:90:41:18:69:62:c5:fa:e6:b8:1c:30: ea:a6:18:1e:bc:cf:32:96:8f:56:b7:a1:4d:2a:2c: c2:25:b4:2b:04:98:1b:c8:e6:92:59:bf:b1:d5:a1: b8:48:45:00:1c:84:63:ac:40:04:e7:2f:31:d3:48: 25:f4:98:1b:6d:4f:06:b6:01:11:36:ad:24:54:38: 09:17:56:38:12:cd:50:3d:13:ca:e7:c7:68:d8:0b: bf:d8:86:12:40:6c:d1:9c:e1:69:ea:e9:1d:75:4e: 81:f2:1e:1a:9b:0e:05:70:b2:7f:80:dc:1e:81:33: 93:db:ce:86:5a:af:0d:72:63:65:a5:ca:fe:34:cc: 58:cb:c8:77:7c:64:1d:62:5e:80:7f:73:10:3b:ff: 4f:0a:43:85:ac:ab:99:b8:19:ba:d4:56:46:65:4e: 14:97:ec:56:80:aa:60:30:44:22:52:a5:62:e7:d8: c5:e9:7e:2c:26:59:a8:23:3e:da:ba:ec:e4:dc:9d: d7:a1:5d:e0:7e:f9:9e:e1:08:78:80:b9:5d:60:16: a7:11:20:0c:e9:e1:30:a8:1d:04:2b:36:4a:b2:8c: d1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6F:BF:0E:E2:A0:31:05:2F:36:21:35:4E:A9:B7:B2:E5:C0:AC:1A X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:b7:9e:02:ee:a1:c7:73:0a:e0:2c:62:30:a4:c4:10:a0:b9: b4:b5:56:a0:b1:bd:ed:c7:b0:b2:09:c6:da:f5:57:0c:c5:10: f2:18:a3:f8:54:4e:71:f4:3f:13:78:c8:42:98:fb:07:bd:46: 66:ad:d9:af:94:4a:b6:81:8c:30:43:54:c0:45:68:02:12:51: 6c:b6:3a:13:cf:17:31:8f:7a:c3:7c:7b:2c:9e:27:0f:e7:71: 92:83:7a:b2:f7:08:14:07:bc:93:f4:b4:89:76:f1:20:f4:18: 61:c7:b0:57:90:87:fa:af:92:0e:77:86:49:21:93:79:42:9f: 0d:df:dd:73:93:e4:52:5d:19:4c:c8:56:c5:5d:df:33:79:80: da:32:c1:24:2e:66:14:01:75:9d:26:0b:9a:af:59:76:3f:ac: 8f:88:ef:d4:0f:c4:84:5e:9c:cb:07:d2:a6:91:3b:a1:85:6c: 26:f8:ed:6b:ba:80:ae:71:b2:ca:57:25:21:6f:1e:4b:2d:eb: 9f:57:cf:e8:c9:6b:04:2f:98:ed:0e:e5:6a:64:3e:45:6e:df: c6:ac:1b:cb:9f:50:df:8a:97:1a:67:ef:52:78:36:61:65:57: 2a:65:cf:37:33:ff:05:7f:b9:f6:a6:c6:17:a7:9a:2a:7c:ae: 8b:00:b1:5f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVqW8InGF8/5Ugcw/oE+/HIP3ogAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MTMwNjA0MDRaFw0yNjA3MTQwNzAyMDRaMDMxMTAvBgNV BAMTKDM4NkZCRjBFRTJBMDMxMDUyRjM2MjEzNTRFQTlCN0IyRTVDMEFDMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYpDSz5spNqNYJsCdoFTurumLx Z+udAj+85dcAv9TCmEuQQRhpYsX65rgcMOqmGB68zzKWj1a3oU0qLMIltCsEmBvI 5pJZv7HVobhIRQAchGOsQATnLzHTSCX0mBttTwa2ARE2rSRUOAkXVjgSzVA9E8rn x2jYC7/YhhJAbNGc4Wnq6R11ToHyHhqbDgVwsn+A3B6BM5PbzoZarw1yY2Wlyv40 zFjLyHd8ZB1iXoB/cxA7/08KQ4Wsq5m4GbrUVkZlThSX7FaAqmAwRCJSpWLn2MXp fiwmWagjPtq67OTcndehXeB++Z7hCHiAuV1gFqcRIAzp4TCoHQQrNkqyjNGNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOG+/DuKgMQUvNiE1Tqm3suXArBowHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLeeAu6hx3MK4CxiMKTE EKC5tLVWoLG97cewsgnG2vVXDMUQ8hij+FROcfQ/E3jIQpj7B71GZq3Zr5RKtoGM MENUwEVoAhJRbLY6E88XMY96w3x7LJ4nD+dxkoN6svcIFAe8k/S0iXbxIPQYYcew V5CH+q+SDneGSSGTeUKfDd/dc5PkUl0ZTMhWxV3fM3mA2jLBJC5mFAF1nSYLmq9Z dj+sj4jv1A/EhF6cywfSppE7oYVsJvjta7qArnGyylclIW8eSy3rn1fP6MlrBC+Y 7Q7lamQ+RW7fxqwby59Q34qXGmfvUng2YWVXKmXPNzP/BX+59qbGF6eaKnyuiwCx Xw== -----END CERTIFICATE-----Generated at Mon Jul 13 09:20:58 2026 by rpki-client