$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 6TsG8gvSyDYO5qiaydDlkO+KXOSvBUzLR3TGfFFkwRM= Subject key identifier: C7:A4:BB:5E:7E:14:EE:32:B3:86:59:00:42:3A:77:2E:42:AC:3F:BC Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 010BA2B11DE50197AC4D0E8CB2C07F8B4F75455C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04DB Signing time: Sat 16 May 2026 01:12:08 +0000 Manifest this update: Sat 16 May 2026 01:07:08 +0000 Manifest next update: Sun 17 May 2026 02:13:08 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: AsHjJxqEO4VjG7VdY8ZAOPogcU3ZHc/Ehvr1kinnFfY=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 17 May 2026 02:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0b:a2:b1:1d:e5:01:97:ac:4d:0e:8c:b2:c0:7f:8b:4f:75:45:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 16 01:07:08 2026 GMT Not After : May 17 02:13:08 2026 GMT Subject: CN=C7A4BB5E7E14EE32B3865900423A772E42AC3FBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:68:dc:aa:91:20:6c:d7:9b:33:d8:28:de: 0c:ee:bd:b7:e2:b0:ee:6c:fb:1e:e1:6d:7c:0c:bc: 1c:57:97:67:6d:0c:f6:42:8e:45:8e:cc:d5:97:7f: 58:38:1f:81:b7:0f:6e:e3:d9:12:af:9f:31:4c:c9: f8:f5:e4:7b:26:cc:6f:23:88:97:49:96:1f:b3:e1: 7a:47:07:46:de:ae:22:e8:b0:6a:e6:13:f4:4b:16: 6a:20:f4:db:90:91:18:c4:78:d4:48:94:15:52:20: 50:e8:b5:0f:36:ac:18:e0:ba:b1:ed:fa:c1:3c:32: f4:22:98:57:9c:38:9a:07:27:2e:e6:b5:ac:52:df: 42:9e:3a:01:00:2a:73:48:de:df:34:3e:d4:10:d9: 37:3c:6a:f2:b2:e8:c6:81:fe:fb:8f:cc:d3:20:ea: 02:a7:25:c0:ba:b4:67:8d:a4:26:67:e4:7a:6f:d7: 51:77:58:7f:dd:19:7b:91:01:73:c1:37:03:0d:ec: c3:f2:ca:9d:91:59:68:2b:32:72:ac:66:53:c5:a4: a7:fe:b1:a0:7f:fa:4a:67:fb:77:90:1a:8a:c5:fa: 03:82:73:cd:f5:43:d1:7b:df:84:2e:bc:9b:28:dd: a3:91:a5:de:9b:31:95:cc:b6:7e:5e:66:81:3b:e6: 76:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A4:BB:5E:7E:14:EE:32:B3:86:59:00:42:3A:77:2E:42:AC:3F:BC X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5a:4e:f2:14:ae:8e:26:72:19:69:89:e3:68:64:8a:cc:82: 49:76:5a:88:1c:3f:e1:3b:8d:86:df:09:a5:56:07:51:f9:94: 2b:f0:7d:37:a5:93:bf:78:8d:e1:f4:40:82:cd:9d:07:6b:04: 35:68:e4:44:62:19:a3:05:83:c4:3f:e6:8c:54:0e:05:6f:f4: c8:ad:c1:3c:1b:4c:a3:77:e5:60:a4:44:5e:28:b6:aa:9a:92: 8d:5b:09:52:a0:b8:df:0b:fb:8e:73:bb:53:90:86:9b:2d:71: 00:4d:8d:1b:b2:f7:a9:2c:37:b2:b4:e1:a2:40:48:ce:4f:ca: e5:00:fd:8b:11:d3:c5:ba:d6:47:87:a1:49:65:1f:c5:3a:5e: bd:72:82:89:41:4f:0f:c8:ec:18:86:b7:08:70:26:7c:36:4b: da:a7:2d:bd:fa:5d:76:c1:0b:46:0b:df:8c:4f:b2:b7:41:6e: 57:34:3b:b1:6e:2b:65:c4:09:2f:23:f2:71:5a:73:d1:c5:68: c7:07:9a:5b:ea:77:b8:95:15:65:4f:fd:e8:3d:e3:1d:2e:fa: c4:27:9b:ce:1f:89:be:49:4d:c1:cd:1b:53:22:45:e7:dc:32: 6e:6d:fe:e5:67:00:d4:54:3e:e9:45:ff:8a:b6:f5:44:f4:7a: 42:22:e2:95 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAQuisR3lAZesTQ6MssB/i091RVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MTYwMTA3MDhaFw0yNjA1MTcwMjEzMDhaMDMxMTAvBgNV BAMTKEM3QTRCQjVFN0UxNEVFMzJCMzg2NTkwMDQyM0E3NzJFNDJBQzNGQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBmmjcqpEgbNebM9go3gzuvbfi sO5s+x7hbXwMvBxXl2dtDPZCjkWOzNWXf1g4H4G3D27j2RKvnzFMyfj15HsmzG8j iJdJlh+z4XpHB0beriLosGrmE/RLFmog9NuQkRjEeNRIlBVSIFDotQ82rBjgurHt +sE8MvQimFecOJoHJy7mtaxS30KeOgEAKnNI3t80PtQQ2Tc8avKy6MaB/vuPzNMg 6gKnJcC6tGeNpCZn5Hpv11F3WH/dGXuRAXPBNwMN7MPyyp2RWWgrMnKsZlPFpKf+ saB/+kpn+3eQGorF+gOCc831Q9F734QuvJso3aORpd6bMZXMtn5eZoE75nZdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUx6S7Xn4U7jKzhlkAQjp3LkKsP7wwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlpO8hSujiZyGWmJ42hk isyCSXZaiBw/4TuNht8JpVYHUfmUK/B9N6WTv3iN4fRAgs2dB2sENWjkRGIZowWD xD/mjFQOBW/0yK3BPBtMo3flYKREXii2qpqSjVsJUqC43wv7jnO7U5CGmy1xAE2N G7L3qSw3srThokBIzk/K5QD9ixHTxbrWR4ehSWUfxTpevXKCiUFPD8jsGIa3CHAm fDZL2qctvfpddsELRgvfjE+yt0FuVzQ7sW4rZcQJLyPycVpz0cVoxweaW+p3uJUV ZU/96D3jHS76xCebzh+JvklNwc0bUyJF59wybm3+5WcA1FQ+6UX/irb1RPR6QiLi lQ== -----END CERTIFICATE-----Generated at Sat May 16 16:02:33 2026 by rpki-client