$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: EI5q29ZGgwQ+0MjScKeJjepTSna0uwjm9MSxK2CWdDk= Subject key identifier: 31:07:3E:78:C4:71:61:20:29:81:DD:B5:34:AE:17:39:AA:03:D6:8F Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 141488DC7EEC6FACE16A19151B47B7BC0364EAD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0563 Signing time: Wed 26 Aug 2026 18:52:22 +0000 Manifest this update: Wed 26 Aug 2026 18:47:22 +0000 Manifest next update: Thu 27 Aug 2026 20:26:22 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: lqqLuWVeeYcO1d+p4LARtEpPSJN8rJ1xuLnzqqpFFLA=) 3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 14:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:14:88:dc:7e:ec:6f:ac:e1:6a:19:15:1b:47:b7:bc:03:64:ea:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 26 18:47:22 2026 GMT Not After : Aug 27 20:26:22 2026 GMT Subject: CN=31073E78C47161202981DDB534AE1739AA03D68F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3c:5b:4f:81:31:7d:e9:82:62:ab:08:84:e9: 3a:8c:cc:ef:eb:5c:1c:b8:f0:36:32:c7:17:89:84: 1e:c6:e8:a7:83:24:a3:13:43:70:ce:b9:1d:d0:1e: bc:72:67:d8:8e:8e:d2:a8:9c:68:07:94:a3:f2:65: da:d5:ae:d3:2f:bf:10:31:ec:b8:40:93:0c:88:38: a9:7d:4b:54:a3:90:45:c3:62:9e:ef:83:b4:0a:36: ec:0d:1c:34:dd:f9:df:7e:8e:1f:d9:8a:07:7c:2e: c1:76:29:7a:06:08:15:19:de:e6:0a:4d:0a:26:aa: d8:c0:f3:e0:3d:d4:9b:9d:cc:66:b2:fa:1c:bf:a7: d1:4f:14:c1:ea:25:d3:26:f3:cf:77:f9:a3:3b:b6: 4c:eb:90:0b:be:d1:24:cf:94:a9:55:da:08:5d:91: 07:fc:b9:f7:ad:e2:bc:c9:7e:e5:91:49:97:81:0d: e8:46:b2:42:48:b5:bf:d4:54:b0:8f:e7:08:3d:50: b2:d1:64:38:93:c8:26:2d:28:8b:a3:8b:26:30:a8: 68:c4:48:72:7d:b4:f0:ea:46:6b:eb:90:ba:46:3e: 3e:0b:1a:49:14:cb:a2:54:30:9c:e7:10:72:e2:c9: fe:c8:89:77:bd:7e:58:53:d3:de:31:b0:dc:4b:fa: ef:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:07:3E:78:C4:71:61:20:29:81:DD:B5:34:AE:17:39:AA:03:D6:8F X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d2:96:c1:19:cc:76:2f:d8:b8:80:3b:87:05:9a:87:f9:3f: b7:87:f5:e6:d5:5f:19:1b:5c:92:b7:a8:46:39:92:5d:a7:24: 43:aa:8f:36:31:47:32:0c:a3:c8:49:ea:19:89:4a:a0:b4:18: a0:b5:7d:d1:10:15:49:24:b7:e5:be:e1:e5:eb:d5:f4:70:31: c0:15:dc:b7:b0:95:ba:b7:05:e3:91:cb:e8:5b:0f:76:c7:2a: f9:0f:99:f0:0b:0a:09:60:19:b2:7b:17:97:4c:20:e7:9b:9a: 84:c9:2d:cb:44:1f:03:40:01:fd:24:34:92:16:66:18:de:5a: 55:3a:2d:7a:a4:52:d2:65:ea:88:60:bd:67:60:2d:98:9a:2c: 99:7d:96:dd:64:cf:9f:3b:78:85:f3:76:e0:1f:9a:61:6a:19: d5:70:06:82:af:7b:1c:12:3a:be:f3:02:29:51:fd:96:f4:d2: db:7d:4e:cc:f3:31:9b:cf:fe:7a:7a:20:d0:e9:67:94:dd:24: 86:31:98:e6:60:95:54:d0:29:a6:af:a0:7b:46:99:1f:10:a4: 34:d7:62:6f:13:2b:c9:a9:42:48:9c:a5:00:e0:0b:68:94:11: 13:bf:0e:b2:29:af:48:8b:b5:0e:b2:f5:31:f5:a8:12:ca:41: 00:2e:07:f1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFBSI3H7sb6zhahkVG0e3vANk6tEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MjYxODQ3MjJaFw0yNjA4MjcyMDI2MjJaMDMxMTAvBgNV BAMTKDMxMDczRTc4QzQ3MTYxMjAyOTgxRERCNTM0QUUxNzM5QUEwM0Q2OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYPFtPgTF96YJiqwiE6TqMzO/r XBy48DYyxxeJhB7G6KeDJKMTQ3DOuR3QHrxyZ9iOjtKonGgHlKPyZdrVrtMvvxAx 7LhAkwyIOKl9S1SjkEXDYp7vg7QKNuwNHDTd+d9+jh/Zigd8LsF2KXoGCBUZ3uYK TQomqtjA8+A91JudzGay+hy/p9FPFMHqJdMm8893+aM7tkzrkAu+0STPlKlV2ghd kQf8ufet4rzJfuWRSZeBDehGskJItb/UVLCP5wg9ULLRZDiTyCYtKIujiyYwqGjE SHJ9tPDqRmvrkLpGPj4LGkkUy6JUMJznEHLiyf7IiXe9flhT094xsNxL+u/HAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUMQc+eMRxYSApgd21NK4XOaoD1o8wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtKWwRnMdi/YuIA7hwWa h/k/t4f15tVfGRtckreoRjmSXackQ6qPNjFHMgyjyEnqGYlKoLQYoLV90RAVSSS3 5b7h5evV9HAxwBXct7CVurcF45HL6FsPdscq+Q+Z8AsKCWAZsnsXl0wg55uahMkt y0QfA0AB/SQ0khZmGN5aVToteqRS0mXqiGC9Z2AtmJosmX2W3WTPnzt4hfN24B+a YWoZ1XAGgq97HBI6vvMCKVH9lvTS231OzPMxm8/+enog0OlnlN0khjGY5mCVVNAp pq+ge0aZHxCkNNdibxMryalCSJylAOALaJQRE78OsimvSIu1DrL1MfWoEspBAC4H 8Q== -----END CERTIFICATE-----Generated at Wed Aug 26 23:38:16 2026 by rpki-client