$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: ngeg6Os4XghWMqJIfopCJeIgYMUkUtfvYx08fTm8owM= Subject key identifier: D3:4B:3D:FE:78:86:89:D7:67:28:44:DF:87:83:AB:B0:EB:A3:78:59 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 36A41A5F98BF6C16255E989EC286E4C0BEB7BABD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04F4 Signing time: Wed 03 Jun 2026 14:35:58 +0000 Manifest this update: Wed 03 Jun 2026 14:30:58 +0000 Manifest next update: Thu 04 Jun 2026 18:11:58 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: /CWAR4Xu4mVsXNPlZFuundSByCzZQ/4pdrsdICQCB9c=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Jun 2026 13:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a4:1a:5f:98:bf:6c:16:25:5e:98:9e:c2:86:e4:c0:be:b7:ba:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 3 14:30:58 2026 GMT Not After : Jun 4 18:11:58 2026 GMT Subject: CN=D34B3DFE788689D7672844DF8783ABB0EBA37859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2f:04:60:19:c1:8d:91:de:7b:1e:ea:cd:75: 06:9a:a2:9a:05:03:91:cf:68:f3:fb:c6:46:32:9d: d9:e8:84:a0:d7:a8:50:e0:94:6e:4f:fc:6d:db:cb: b4:86:39:65:22:4e:ca:93:3d:a0:74:c8:fc:f3:9c: 2a:71:81:86:ff:ea:7a:f5:69:dc:47:23:ca:db:12: 38:ce:ff:59:11:97:4c:95:13:c7:01:3d:14:64:76: 90:67:eb:c0:96:e0:ed:f2:4a:e1:95:bc:48:bc:a7: e9:6c:ae:15:00:4d:22:45:f7:cc:c8:5a:6c:26:ab: ad:07:9f:62:bd:61:a6:9c:08:09:37:99:a2:58:43: 2b:fe:46:d8:22:bd:e0:8f:1d:d4:15:32:8d:32:4e: 29:b8:50:77:37:45:89:77:74:40:1a:8e:19:33:fe: c0:bc:d3:56:85:06:89:35:57:63:f4:3a:cc:cc:40: f5:00:72:27:58:9b:3a:e7:d5:c1:76:bb:c6:02:c6: d6:22:97:ae:dd:8d:35:a0:8a:af:49:d6:96:7a:e7: b6:64:79:50:e3:10:37:20:86:95:eb:27:8b:18:9d: 50:7c:df:8f:72:a0:b8:9d:59:e7:05:9f:22:c7:77: a5:79:2c:b3:4e:2b:fe:b6:b3:07:ab:34:3c:ba:53: d9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4B:3D:FE:78:86:89:D7:67:28:44:DF:87:83:AB:B0:EB:A3:78:59 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ed:5b:9e:fc:c6:24:59:d8:f9:3d:21:2b:49:53:c2:67:0f: 65:0f:17:94:6c:ae:33:00:a2:5e:30:43:45:dc:e4:f5:76:ec: b0:85:22:88:1f:2e:73:17:fc:ec:29:94:83:53:61:25:a1:5a: 7a:0e:70:17:1b:6d:c3:d2:55:68:8d:65:e4:d0:40:d8:c4:65: ef:8c:4d:17:5e:ca:b6:f2:e1:a8:68:3e:f7:90:a3:da:95:18: 36:42:73:3b:f3:4f:da:27:1d:7f:47:90:2d:bd:7a:fd:20:7f: 41:f0:db:d1:e8:09:e4:64:79:4d:cb:b6:19:51:be:38:80:11: e1:80:1e:4b:b6:ac:c3:78:ca:71:bb:ab:5b:20:8a:18:fd:11: 2d:0e:43:c6:b9:27:e9:cd:2f:df:25:ae:92:d4:0b:37:61:1f: 36:49:99:ec:1c:eb:6a:5c:5a:4a:ce:ac:bc:3d:0f:21:27:71: d0:37:b8:8b:7a:f1:c7:e7:ec:c0:2b:4a:ee:b8:c7:22:28:47: c4:49:be:23:f6:4e:fe:35:50:18:00:a9:32:63:d5:3e:2f:b9: 81:26:b0:f2:2f:47:e6:df:4a:b9:e6:22:5e:0d:cf:39:63:fa: bb:23:37:02:a6:05:87:e8:a0:9d:87:4a:35:17:aa:a4:84:c5: 8e:4e:9b:8c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNqQaX5i/bBYlXpiewobkwL63ur0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MDMxNDMwNThaFw0yNjA2MDQxODExNThaMDMxMTAvBgNV BAMTKEQzNEIzREZFNzg4Njg5RDc2NzI4NDRERjg3ODNBQkIwRUJBMzc4NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6LwRgGcGNkd57HurNdQaaopoF A5HPaPP7xkYyndnohKDXqFDglG5P/G3by7SGOWUiTsqTPaB0yPzznCpxgYb/6nr1 adxHI8rbEjjO/1kRl0yVE8cBPRRkdpBn68CW4O3ySuGVvEi8p+lsrhUATSJF98zI Wmwmq60Hn2K9YaacCAk3maJYQyv+RtgiveCPHdQVMo0yTim4UHc3RYl3dEAajhkz /sC801aFBok1V2P0OszMQPUAcidYmzrn1cF2u8YCxtYil67djTWgiq9J1pZ657Zk eVDjEDcghpXrJ4sYnVB8349yoLidWecFnyLHd6V5LLNOK/62swerNDy6U9nbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU00s9/niGiddnKETfh4OrsOujeFkwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+1bnvzGJFnY+T0hK0lT wmcPZQ8XlGyuMwCiXjBDRdzk9XbssIUiiB8ucxf87CmUg1NhJaFaeg5wFxttw9JV aI1l5NBA2MRl74xNF17KtvLhqGg+95Cj2pUYNkJzO/NP2icdf0eQLb16/SB/QfDb 0egJ5GR5Tcu2GVG+OIAR4YAeS7asw3jKcburWyCKGP0RLQ5Dxrkn6c0v3yWuktQL N2EfNkmZ7BzralxaSs6svD0PISdx0De4i3rxx+fswCtK7rjHIihHxEm+I/ZO/jVQ GACpMmPVPi+5gSaw8i9H5t9KueYiXg3POWP6uyM3AqYFh+ignYdKNReqpITFjk6b jA== -----END CERTIFICATE-----Generated at Wed Jun 3 23:47:12 2026 by rpki-client