$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: l2+kN6ooXwdv+bTuT5E1/dsgV38jgmZPWDG9Vws1JrU= Subject key identifier: 2F:33:07:F7:04:86:B4:92:9F:8D:AE:64:0E:30:8F:20:C8:82:88:3D Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 0CC34C5561604BDA43E9792FBA048D0CBE052DD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 051B Signing time: Fri 03 Jul 2026 16:28:15 +0000 Manifest this update: Fri 03 Jul 2026 16:23:15 +0000 Manifest next update: Sat 04 Jul 2026 17:29:15 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: YFvPpHUWpX1j4Nu7W1CKPm2fm1NX5Lf52NbDEhQ7jFk=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 04 Jul 2026 17:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c3:4c:55:61:60:4b:da:43:e9:79:2f:ba:04:8d:0c:be:05:2d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 3 16:23:15 2026 GMT Not After : Jul 4 17:29:15 2026 GMT Subject: CN=2F3307F70486B4929F8DAE640E308F20C882883D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cb:14:a6:6d:ea:54:01:ad:e7:39:c7:ab:3d: bc:dd:aa:30:7f:3f:a6:e3:13:b0:12:6c:c5:1b:c5: e0:76:0e:b0:e4:24:6a:80:59:ba:5b:fb:13:83:2e: 5f:fe:de:d8:68:36:51:a2:e4:c6:b1:15:58:19:2d: 6d:71:03:5c:72:f2:0f:b5:45:9f:6c:fe:88:a8:d5: d7:d4:61:0b:f4:66:39:b6:22:2f:1c:a2:97:43:20: 24:79:1b:d0:3f:cd:5d:a2:76:99:f0:5d:14:d4:ef: 58:42:2e:51:4b:62:f3:bc:0c:c4:44:7f:a5:e5:de: 3f:6b:16:28:23:17:34:36:0f:69:64:21:d7:f2:b4: 8b:38:ec:ce:e8:bf:8c:37:16:44:2d:d6:9a:e5:24: 89:ff:aa:ad:48:69:f6:ca:e6:a6:29:d6:0f:82:fc: c4:03:f3:0e:e4:c0:d5:40:3f:64:c6:49:55:31:d2: 89:a1:8e:06:c1:cf:fd:67:2e:7e:ef:d7:66:c0:85: 0c:6e:b5:33:17:c3:81:dd:54:bd:28:0e:3b:8a:3f: 4e:97:56:69:b1:7a:e9:e5:88:e5:8c:09:84:1f:10: 8d:07:bf:fe:cc:9c:be:47:15:e4:9f:bf:eb:02:e4: d7:95:ee:fd:45:ab:cc:bf:52:f3:bc:e7:2a:64:ab: 83:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:33:07:F7:04:86:B4:92:9F:8D:AE:64:0E:30:8F:20:C8:82:88:3D X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:67:c7:32:55:0a:9d:15:05:6b:c8:d2:62:7c:a0:9d:45:53: 4b:8f:10:de:b2:84:86:45:aa:8f:ba:3a:d1:e6:86:bf:03:f4: e4:a9:68:87:de:b0:72:9c:26:38:fb:37:e0:cc:96:77:34:0b: 7c:a7:3c:f1:7e:bb:3d:51:8f:10:e8:65:a9:92:b9:ac:b0:a4: 27:08:ae:c0:3c:35:32:9a:1b:0f:83:f8:fb:98:93:24:13:30: 1a:16:bb:3f:af:26:5b:25:85:89:0e:ec:07:76:0d:4c:59:8b: df:e6:82:79:de:c4:72:4e:0b:e7:d6:b7:38:f8:2a:5d:ad:55: a0:94:1b:c9:e8:08:20:72:65:41:ba:95:4b:6d:e8:a5:06:54: 24:02:7e:a4:35:9d:9a:a7:6d:6d:00:70:75:bf:c2:98:ff:25: 1c:f7:66:38:13:13:94:63:43:c7:60:71:52:60:84:93:76:38: a0:33:65:5d:74:0c:9f:e3:29:cd:10:41:93:96:54:11:35:f4: 2a:fd:60:60:27:96:56:b9:d5:0c:58:9d:db:1e:74:37:26:db: 2d:5d:11:ea:a4:b7:d3:a7:3a:32:7f:c0:33:1b:a4:e8:55:92: f7:f1:70:51:d3:7c:ab:e0:07:2e:89:9c:55:51:26:03:d2:51: 11:3b:50:e0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDMNMVWFgS9pD6XkvugSNDL4FLdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MDMxNjIzMTVaFw0yNjA3MDQxNzI5MTVaMDMxMTAvBgNV BAMTKDJGMzMwN0Y3MDQ4NkI0OTI5RjhEQUU2NDBFMzA4RjIwQzg4Mjg4M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTyxSmbepUAa3nOcerPbzdqjB/ P6bjE7ASbMUbxeB2DrDkJGqAWbpb+xODLl/+3thoNlGi5MaxFVgZLW1xA1xy8g+1 RZ9s/oio1dfUYQv0Zjm2Ii8copdDICR5G9A/zV2idpnwXRTU71hCLlFLYvO8DMRE f6Xl3j9rFigjFzQ2D2lkIdfytIs47M7ov4w3FkQt1prlJIn/qq1IafbK5qYp1g+C /MQD8w7kwNVAP2TGSVUx0omhjgbBz/1nLn7v12bAhQxutTMXw4HdVL0oDjuKP06X VmmxeunliOWMCYQfEI0Hv/7MnL5HFeSfv+sC5NeV7v1Fq8y/UvO85ypkq4OhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQULzMH9wSGtJKfja5kDjCPIMiCiD0wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWfHMlUKnRUFa8jSYnyg nUVTS48Q3rKEhkWqj7o60eaGvwP05Kloh96wcpwmOPs34MyWdzQLfKc88X67PVGP EOhlqZK5rLCkJwiuwDw1MpobD4P4+5iTJBMwGha7P68mWyWFiQ7sB3YNTFmL3+aC ed7Eck4L59a3OPgqXa1VoJQbyegIIHJlQbqVS23opQZUJAJ+pDWdmqdtbQBwdb/C mP8lHPdmOBMTlGNDx2BxUmCEk3Y4oDNlXXQMn+MpzRBBk5ZUETX0Kv1gYCeWVrnV DFid2x50NybbLV0R6qS306c6Mn/AMxuk6FWS9/FwUdN8q+AHLomcVVEmA9JRETtQ 4A== -----END CERTIFICATE-----Generated at Sat Jul 4 00:22:54 2026 by rpki-client