$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: UpxSSyUuopicVNYqtJ0uETME6aWLRGNgby7YW9B+7Ds= Subject key identifier: 3D:60:75:5D:BB:36:CA:BF:49:24:C9:6B:34:D9:E9:E0:79:61:6E:4A Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 36E7B1ABB5C866127CB3D44A32C1ED1B7B7F0DFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0521 Signing time: Tue 07 Jul 2026 21:48:28 +0000 Manifest this update: Tue 07 Jul 2026 21:43:28 +0000 Manifest next update: Thu 09 Jul 2026 01:06:28 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: mwQMEYcG0Oh38AuSUfuljRVQxrMK7IlhdPWT4z6CGrg=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 08 Jul 2026 19:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e7:b1:ab:b5:c8:66:12:7c:b3:d4:4a:32:c1:ed:1b:7b:7f:0d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 7 21:43:28 2026 GMT Not After : Jul 9 01:06:28 2026 GMT Subject: CN=3D60755DBB36CABF4924C96B34D9E9E079616E4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:18:c8:dc:d0:f9:8f:3f:5e:22:86:66:99:66: 5f:05:d5:9c:98:7f:9e:a6:44:72:a6:2d:72:88:e1: 03:d9:3c:07:83:03:82:0c:3c:1f:c5:82:be:9c:65: 5e:30:c5:e5:89:23:e7:cd:2b:0e:6c:33:41:b8:21: 8c:c6:7a:17:e8:28:df:32:fa:17:40:48:2f:4d:00: 07:d8:af:e0:93:2a:80:7c:51:48:dd:4f:ef:f1:db: 95:77:5f:7b:72:5e:32:1d:68:c7:3a:ec:e3:f4:06: 3f:43:cc:ea:a6:0e:ee:78:92:15:a6:16:70:21:0d: 03:2f:9d:3c:27:9c:34:71:36:59:30:32:83:83:c7: b7:fa:1d:cc:3d:83:08:72:90:60:51:ce:d3:ad:27: 21:e1:2c:62:64:38:b8:c8:05:aa:24:97:14:c5:83: 9b:40:98:e5:69:3f:e3:b9:be:b0:5b:9b:b4:0a:b2: 4d:bd:4c:8e:c4:d4:37:54:e8:f1:9b:b7:28:18:8b: d0:9c:1e:e2:c9:2a:65:f5:b7:2f:81:cc:b0:f2:a5: 69:6c:96:51:81:ca:45:73:68:41:18:0d:b3:77:3b: 67:b0:05:a0:12:de:25:4d:dc:34:65:18:91:0e:da: 53:e1:01:3b:e0:20:66:87:8e:42:e6:a6:22:0c:03: 09:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:60:75:5D:BB:36:CA:BF:49:24:C9:6B:34:D9:E9:E0:79:61:6E:4A X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:db:72:f7:27:73:01:7e:f0:30:a0:95:59:61:f7:9a:bb:ad: c4:ec:45:01:a8:c2:8a:f9:9c:9b:68:a4:30:58:6b:05:44:fb: 01:02:d2:f4:15:14:df:33:83:3c:d0:f0:c7:20:2f:dc:ed:1d: 9c:30:0e:42:36:20:e9:a8:02:bf:5b:ff:5c:f5:c4:dd:3a:b4: 05:4d:55:8c:b5:81:64:0e:12:62:f9:aa:e8:1a:62:cb:3c:21: 0f:3e:d7:4d:d7:90:b3:ad:a6:5a:10:0d:82:d8:8e:d4:ba:66: dc:19:76:70:74:85:05:b0:84:d4:06:95:fd:54:d7:78:24:20: 05:24:44:be:59:25:17:76:14:87:61:49:7f:e4:59:01:1f:ce: c8:eb:4f:f2:50:81:e0:b4:56:26:b9:92:92:14:3f:0e:c0:b5: b4:b6:4c:23:f9:b0:18:e2:71:2c:8f:58:37:91:55:30:fe:c0: 6e:72:21:e6:ed:cb:be:b8:19:1b:2f:e5:d7:0f:ef:23:9c:ca: 64:a5:c9:9b:cb:2d:b5:86:4d:00:3f:8d:c2:0e:bd:6e:96:0f: 07:ef:08:87:fd:50:2e:de:10:d8:87:a7:38:2f:c6:d8:7b:ee: d5:4f:f0:40:75:f3:ef:3c:5c:6c:b8:45:e0:43:59:74:c8:f1: d6:4b:c1:af -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNuexq7XIZhJ8s9RKMsHtG3t/DfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MDcyMTQzMjhaFw0yNjA3MDkwMTA2MjhaMDMxMTAvBgNV BAMTKDNENjA3NTVEQkIzNkNBQkY0OTI0Qzk2QjM0RDlFOUUwNzk2MTZFNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOGMjc0PmPP14ihmaZZl8F1ZyY f56mRHKmLXKI4QPZPAeDA4IMPB/Fgr6cZV4wxeWJI+fNKw5sM0G4IYzGehfoKN8y +hdASC9NAAfYr+CTKoB8UUjdT+/x25V3X3tyXjIdaMc67OP0Bj9DzOqmDu54khWm FnAhDQMvnTwnnDRxNlkwMoODx7f6Hcw9gwhykGBRztOtJyHhLGJkOLjIBaoklxTF g5tAmOVpP+O5vrBbm7QKsk29TI7E1DdU6PGbtygYi9CcHuLJKmX1ty+BzLDypWls llGBykVzaEEYDbN3O2ewBaAS3iVN3DRlGJEO2lPhATvgIGaHjkLmpiIMAwlnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPWB1Xbs2yr9JJMlrNNnp4HlhbkowHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtty9ydzAX7wMKCVWWH3 mrutxOxFAajCivmcm2ikMFhrBUT7AQLS9BUU3zODPNDwxyAv3O0dnDAOQjYg6agC v1v/XPXE3Tq0BU1VjLWBZA4SYvmq6BpiyzwhDz7XTdeQs62mWhANgtiO1Lpm3Bl2 cHSFBbCE1AaV/VTXeCQgBSREvlklF3YUh2FJf+RZAR/OyOtP8lCB4LRWJrmSkhQ/ DsC1tLZMI/mwGOJxLI9YN5FVMP7AbnIh5u3LvrgZGy/l1w/vI5zKZKXJm8sttYZN AD+Nwg69bpYPB+8Ih/1QLt4Q2IenOC/G2Hvu1U/wQHXz7zxcbLhF4ENZdMjx1kvB rw== -----END CERTIFICATE-----Generated at Wed Jul 8 03:56:46 2026 by rpki-client