$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: WqkgId7LVjIPph2oLCwqB6wOJ2yajPePd4DVzy1udzA= Subject key identifier: B0:80:F3:81:29:6E:78:5B:0D:9E:56:6E:B0:FB:EF:CB:F7:E6:3B:F4 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 6C0D29D6BE17226F70DCDCACEABAE008756FC871 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04F5 Signing time: Thu 04 Jun 2026 10:14:53 +0000 Manifest this update: Thu 04 Jun 2026 10:09:53 +0000 Manifest next update: Fri 05 Jun 2026 10:42:53 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: UCtIn+21oIQa2ULXtLvmN1BVWc7QQsxieCR8bzy7Lio=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Jun 2026 10:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:0d:29:d6:be:17:22:6f:70:dc:dc:ac:ea:ba:e0:08:75:6f:c8:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 4 10:09:53 2026 GMT Not After : Jun 5 10:42:53 2026 GMT Subject: CN=B080F381296E785B0D9E566EB0FBEFCBF7E63BF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0f:07:a7:30:05:fb:fc:ee:ea:bb:56:e5:b3: ee:26:43:3e:bf:a4:50:92:2a:24:7c:3f:7e:4e:0f: 63:23:5d:54:e4:02:05:0b:c9:63:a3:08:5a:4d:28: 7b:48:1c:e5:dc:62:0d:b6:b4:d9:99:19:dc:77:97: f6:ca:34:b4:f2:c1:07:97:3f:df:54:dd:42:e8:13: 7b:1e:d7:5b:63:8c:69:f7:98:2e:f9:d0:38:f6:fc: e9:c6:da:e2:4e:9a:16:14:94:54:bf:ac:64:35:4d: 86:dc:e4:74:6d:f4:a8:7a:79:a1:19:b0:63:60:d0: 44:bd:7b:df:31:01:ec:8d:21:00:a7:09:8a:e2:83: ee:7d:08:76:f7:44:1a:c3:d6:ea:6c:12:4c:3e:11: 0f:22:6d:78:6c:9c:01:0f:62:31:a9:e0:cd:82:5d: 7e:e6:57:b2:58:97:6f:14:74:6f:cc:3f:b0:20:19: ed:42:fc:b1:f5:50:31:8b:d8:2c:af:a4:c4:b2:e3: 89:7f:95:19:ab:12:e7:15:e5:53:8b:92:e8:65:c6: 75:f8:d0:66:3a:f0:6b:9f:20:03:89:95:04:5c:4c: 19:5b:70:3e:ca:eb:1c:20:e8:95:8c:8e:73:6b:2b: c5:7e:c2:af:02:07:54:cd:d4:1d:36:56:69:e8:08: 90:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:80:F3:81:29:6E:78:5B:0D:9E:56:6E:B0:FB:EF:CB:F7:E6:3B:F4 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:6a:66:21:d8:5d:b5:34:2f:72:36:79:a6:a1:3b:da:f5:2a: da:ea:cc:f0:bd:24:53:35:8e:59:0c:1a:25:5b:a3:7c:30:dd: 05:c2:b0:b7:5a:56:cc:50:83:24:a1:93:4c:9c:6f:76:96:91: 06:fd:63:40:55:18:d9:6a:83:6f:fa:9d:4d:23:43:ed:af:f8: a2:28:d5:52:46:cc:98:dc:f1:5b:b7:6c:c3:1e:87:7d:dd:4e: c6:a9:78:ed:72:db:83:90:56:fb:bb:02:c2:5a:8a:84:70:0b: e5:f7:05:3f:01:6e:f3:ae:21:4e:e5:27:82:57:56:54:0e:87: 33:ae:e6:ed:30:53:72:b9:ac:62:58:b0:2c:78:f0:a5:20:f4: 92:e4:f9:b2:05:c0:e5:97:71:04:7e:20:b9:cf:c2:ff:3b:2b: 18:c9:66:ef:bf:2b:b5:47:ce:5c:2c:45:a5:13:54:03:1f:dc: c0:69:83:bf:4c:db:bb:c5:d8:25:ab:49:4c:b3:88:67:e7:4b: 6b:8c:df:55:1a:9b:b8:ef:7a:c4:be:0d:de:fc:6b:03:9f:4b: b2:9b:3a:1a:bf:23:80:48:c8:03:ef:53:35:91:38:02:db:01: 4b:43:95:d8:87:5a:99:73:b2:e4:a0:a2:7d:0b:7d:5a:75:f1: cb:5a:6c:75 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbA0p1r4XIm9w3Nys6rrgCHVvyHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MDQxMDA5NTNaFw0yNjA2MDUxMDQyNTNaMDMxMTAvBgNV BAMTKEIwODBGMzgxMjk2RTc4NUIwRDlFNTY2RUIwRkJFRkNCRjdFNjNCRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTDwenMAX7/O7qu1bls+4mQz6/ pFCSKiR8P35OD2MjXVTkAgULyWOjCFpNKHtIHOXcYg22tNmZGdx3l/bKNLTywQeX P99U3ULoE3se11tjjGn3mC750Dj2/OnG2uJOmhYUlFS/rGQ1TYbc5HRt9Kh6eaEZ sGNg0ES9e98xAeyNIQCnCYrig+59CHb3RBrD1upsEkw+EQ8ibXhsnAEPYjGp4M2C XX7mV7JYl28UdG/MP7AgGe1C/LH1UDGL2CyvpMSy44l/lRmrEucV5VOLkuhlxnX4 0GY68GufIAOJlQRcTBlbcD7K6xwg6JWMjnNrK8V+wq8CB1TN1B02VmnoCJCNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUsIDzgSlueFsNnlZusPvvy/fmO/QwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWpmIdhdtTQvcjZ5pqE7 2vUq2urM8L0kUzWOWQwaJVujfDDdBcKwt1pWzFCDJKGTTJxvdpaRBv1jQFUY2WqD b/qdTSND7a/4oijVUkbMmNzxW7dswx6Hfd1Oxql47XLbg5BW+7sCwlqKhHAL5fcF PwFu864hTuUngldWVA6HM67m7TBTcrmsYliwLHjwpSD0kuT5sgXA5ZdxBH4guc/C /zsrGMlm778rtUfOXCxFpRNUAx/cwGmDv0zbu8XYJatJTLOIZ+dLa4zfVRqbuO96 xL4N3vxrA59Lsps6Gr8jgEjIA+9TNZE4AtsBS0OV2IdamXOy5KCifQt9WnXxy1ps dQ== -----END CERTIFICATE-----Generated at Fri Jun 5 02:37:15 2026 by rpki-client