$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: uKqrxHcgXVUQEfhtifeFJEhtWgm6Eas7fimZoOH5Rd4= Subject key identifier: BB:1A:E5:41:86:CD:F3:3D:31:0A:39:17:AE:03:54:2B:10:BD:33:10 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 290DCC12AC32900C1ECDAF2DFCD46F713932DEA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0573 Signing time: Mon 07 Sep 2026 23:10:42 +0000 Manifest this update: Mon 07 Sep 2026 23:05:42 +0000 Manifest next update: Wed 09 Sep 2026 02:25:42 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: tD9/sJMnX0EH6k86sfqzf2sIcIRcZpOs8cKJBWNG/Ss=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 09 Sep 2026 01:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:0d:cc:12:ac:32:90:0c:1e:cd:af:2d:fc:d4:6f:71:39:32:de:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Sep 7 23:05:42 2026 GMT Not After : Sep 9 02:25:42 2026 GMT Subject: CN=BB1AE54186CDF33D310A3917AE03542B10BD3310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:66:aa:7d:a4:b4:89:01:17:2e:4f:2d:bb:25: 9c:d2:be:f1:85:b8:36:28:d0:9f:3e:91:37:cc:78: 94:43:fe:9e:de:5e:c8:09:bf:bb:2f:83:20:a7:29: 7b:c4:e8:81:5b:46:42:df:e6:18:8e:55:db:88:12: 86:7b:db:e9:36:ee:3f:ef:ea:e0:30:14:b5:cb:0f: 2a:73:de:38:23:36:2e:20:59:ee:38:4d:8f:e3:e8: cb:36:94:83:ba:ef:58:2f:0c:b1:87:a2:c8:34:1f: de:37:32:2b:0a:6d:e4:8b:5f:4b:2d:7b:30:46:ed: 5d:4c:19:e6:88:14:0c:99:14:cc:c5:7f:33:53:7f: bf:13:11:eb:9a:fe:b8:c9:a2:e6:6b:53:06:54:8b: e9:4b:88:df:96:a4:f4:15:32:97:93:d9:96:cf:c2: bf:bf:cb:1a:cc:42:e5:c7:8a:c5:92:30:5c:e9:2e: 88:d5:df:9e:41:b5:7a:2e:e5:78:20:43:de:0f:77: a3:39:f3:fc:1f:a6:a8:a4:77:b2:08:01:d0:50:57: 8e:ea:24:07:ca:04:96:71:d8:8b:79:3a:49:4e:a5: f7:20:e1:b5:fe:4a:10:0f:dc:bd:b0:70:16:13:51: 00:d4:57:6c:8c:55:96:19:0f:b4:a6:32:10:ec:a5: b7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1A:E5:41:86:CD:F3:3D:31:0A:39:17:AE:03:54:2B:10:BD:33:10 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:95:51:bc:63:32:b7:16:0c:0c:a5:59:2c:d3:5b:68:7c:3a: 8e:c9:8b:bc:f0:47:50:5b:31:16:83:4a:b7:91:c4:e3:9a:b5: c7:dc:6b:72:de:88:30:b9:2a:e6:02:a0:8e:f9:6a:bb:a1:bf: 35:1a:5b:b5:ab:20:13:3a:ed:dd:cd:b0:93:c1:4a:ce:63:db: ae:f8:cc:5f:c5:a7:f5:ad:cd:3a:c2:8a:4f:20:8d:82:22:4c: f3:7f:c8:64:f1:3b:cc:5f:34:41:94:28:7b:dc:a7:58:1c:4a: 2e:e8:35:e5:d1:18:29:71:e4:ec:57:e1:b6:0e:79:f4:83:85: 5b:0b:9b:45:92:7f:a1:94:68:c2:95:00:2e:cc:56:b3:b1:ad: 06:cf:fa:06:07:b6:73:36:ee:f4:42:83:ab:ca:cc:f0:0a:48: 46:1c:bb:55:28:29:1b:7f:9a:60:59:1a:03:7c:ee:01:87:5b: 2b:9d:53:ef:0f:71:dd:77:ea:68:37:56:58:d7:84:3c:55:3d: 46:05:de:49:2d:2a:d9:b3:58:8f:fd:bc:46:15:7c:c0:76:48: cc:36:a0:e7:aa:2e:4a:38:c8:ee:bf:82:9b:59:6f:71:62:d0: 82:75:c6:11:ba:8c:e7:31:a3:bd:b1:f5:2a:5e:30:9b:2e:79: a9:e4:01:7d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKQ3MEqwykAweza8t/NRvcTky3qYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA5MDcyMzA1NDJaFw0yNjA5MDkwMjI1NDJaMDMxMTAvBgNV BAMTKEJCMUFFNTQxODZDREYzM0QzMTBBMzkxN0FFMDM1NDJCMTBCRDMzMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWZqp9pLSJARcuTy27JZzSvvGF uDYo0J8+kTfMeJRD/p7eXsgJv7svgyCnKXvE6IFbRkLf5hiOVduIEoZ72+k27j/v 6uAwFLXLDypz3jgjNi4gWe44TY/j6Ms2lIO671gvDLGHosg0H943MisKbeSLX0st ezBG7V1MGeaIFAyZFMzFfzNTf78TEeua/rjJouZrUwZUi+lLiN+WpPQVMpeT2ZbP wr+/yxrMQuXHisWSMFzpLojV355BtXou5XggQ94Pd6M58/wfpqikd7IIAdBQV47q JAfKBJZx2It5OklOpfcg4bX+ShAP3L2wcBYTUQDUV2yMVZYZD7SmMhDspbefAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUuxrlQYbN8z0xCjkXrgNUKxC9MxAwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJVRvGMytxYMDKVZLNNb aHw6jsmLvPBHUFsxFoNKt5HE45q1x9xrct6IMLkq5gKgjvlqu6G/NRpbtasgEzrt 3c2wk8FKzmPbrvjMX8Wn9a3NOsKKTyCNgiJM83/IZPE7zF80QZQoe9ynWBxKLug1 5dEYKXHk7Ffhtg559IOFWwubRZJ/oZRowpUALsxWs7GtBs/6Bge2czbu9EKDq8rM 8ApIRhy7VSgpG3+aYFkaA3zuAYdbK51T7w9x3XfqaDdWWNeEPFU9RgXeSS0q2bNY j/28RhV8wHZIzDag56ouSjjI7r+Cm1lvcWLQgnXGEbqM5zGjvbH1Kl4wmy55qeQB fQ== -----END CERTIFICATE-----Generated at Tue Sep 8 09:42:30 2026 by rpki-client