$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: IZF4mHf+5C/hgr/2YwGaBi1BgzNZWhsyugCbcOuK4fk= Subject key identifier: 3F:03:82:67:89:33:D4:25:29:26:27:73:90:6C:97:20:19:F5:B6:19 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 75AB94DBABA66623E8E203500C270706C5609B53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0515 Signing time: Mon 29 Jun 2026 05:06:50 +0000 Manifest this update: Mon 29 Jun 2026 05:01:50 +0000 Manifest next update: Tue 30 Jun 2026 05:56:50 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: neSUV9+wy45WYlD394c663R5dp3Cd9dhjPqq+MVPVvU=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 05:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ab:94:db:ab:a6:66:23:e8:e2:03:50:0c:27:07:06:c5:60:9b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 29 05:01:50 2026 GMT Not After : Jun 30 05:56:50 2026 GMT Subject: CN=3F0382678933D42529262773906C972019F5B619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:65:0e:77:2c:4d:7b:0d:15:ce:ca:57:eb:eb: 7c:11:58:75:8e:17:f8:2c:53:5e:8b:47:f6:93:e6: 5a:c8:9c:5b:55:c5:52:ac:f5:8b:f1:91:3f:41:9c: eb:de:39:0b:fd:a0:87:85:17:65:f9:2b:fb:a4:da: 29:34:9e:35:9f:99:10:fe:2f:32:ce:9a:d1:7a:6a: 13:05:b1:6c:bd:de:60:67:66:2f:a0:4f:e2:4a:57: d7:e1:10:a2:79:d0:0b:f4:03:88:a6:df:02:20:5d: 6a:ad:13:04:fb:21:db:ab:78:1e:ec:f8:69:80:b5: bb:68:84:bb:4b:d7:e1:09:dc:26:7e:2d:67:28:a5: 27:bd:ac:c1:2a:93:f7:f8:31:99:43:ad:bb:df:eb: 25:2e:20:75:ca:09:02:0d:e5:b8:d0:cb:b9:08:2e: ad:b5:6f:73:34:4f:c6:37:a6:fe:36:6c:b2:64:70: 6b:ae:1f:3b:4b:e5:80:13:4b:b1:0c:a5:00:98:4c: 82:e5:97:e9:75:86:93:47:ee:6d:49:fe:6b:e3:cc: 6f:43:3c:c0:64:39:38:cb:ff:63:5f:41:2a:d8:06: 82:e3:4e:d1:d8:34:84:8a:fa:14:be:24:db:b6:08: 49:ce:94:8e:96:b5:c6:c1:20:18:38:4a:4d:df:6f: 40:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:03:82:67:89:33:D4:25:29:26:27:73:90:6C:97:20:19:F5:B6:19 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:51:31:b7:7f:27:13:a9:cb:4c:af:01:f6:c0:75:d5:97:36: e4:4a:61:7f:c5:1e:27:51:49:bb:9f:e9:34:a9:e8:e7:a1:9e: 5b:7a:e2:9f:9b:a5:d8:83:fa:a4:6b:10:c3:65:fe:8d:16:c1: 7c:e9:c8:17:b9:2a:d1:bf:64:7c:ca:0b:b2:4b:02:e6:bd:fe: 6a:de:15:12:29:27:25:f9:1c:57:39:a6:e3:ee:e6:ec:60:bd: 25:01:7a:c7:c9:9a:b2:11:27:de:72:8d:32:6c:39:7f:1d:a6: 0c:1d:a2:df:86:a9:6c:9a:d5:f4:84:d4:3d:15:07:61:f3:92: fc:d1:06:d0:67:4d:80:9a:68:3e:26:ea:39:17:71:97:f1:e6: 4f:6d:53:c9:34:13:76:4a:91:2c:37:5f:53:0e:e5:ef:02:28: 8c:62:b0:94:9c:ab:f0:17:38:97:46:5e:89:50:e8:f0:4a:e9: e9:1f:29:67:a4:87:94:78:86:cf:d9:74:1c:f4:c3:ec:18:36: cf:89:27:54:a7:bc:c9:de:22:bb:24:2a:da:26:62:b0:a9:79: f3:a0:c7:93:74:d5:9e:5f:94:5a:fa:53:fc:a5:d1:1d:30:5c: 76:ca:3e:fa:c7:36:0d:a3:36:90:08:8c:82:bc:85:0e:c4:71: 76:5b:3a:11 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdauU26umZiPo4gNQDCcHBsVgm1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MjkwNTAxNTBaFw0yNjA2MzAwNTU2NTBaMDMxMTAvBgNV BAMTKDNGMDM4MjY3ODkzM0Q0MjUyOTI2Mjc3MzkwNkM5NzIwMTlGNUI2MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjZQ53LE17DRXOylfr63wRWHWO F/gsU16LR/aT5lrInFtVxVKs9YvxkT9BnOveOQv9oIeFF2X5K/uk2ik0njWfmRD+ LzLOmtF6ahMFsWy93mBnZi+gT+JKV9fhEKJ50Av0A4im3wIgXWqtEwT7IdureB7s +GmAtbtohLtL1+EJ3CZ+LWcopSe9rMEqk/f4MZlDrbvf6yUuIHXKCQIN5bjQy7kI Lq21b3M0T8Y3pv42bLJkcGuuHztL5YATS7EMpQCYTILll+l1hpNH7m1J/mvjzG9D PMBkOTjL/2NfQSrYBoLjTtHYNISK+hS+JNu2CEnOlI6WtcbBIBg4Sk3fb0DNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPwOCZ4kz1CUpJidzkGyXIBn1thkwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlExt38nE6nLTK8B9sB1 1Zc25Ephf8UeJ1FJu5/pNKno56GeW3rin5ul2IP6pGsQw2X+jRbBfOnIF7kq0b9k fMoLsksC5r3+at4VEiknJfkcVzmm4+7m7GC9JQF6x8mashEn3nKNMmw5fx2mDB2i 34apbJrV9ITUPRUHYfOS/NEG0GdNgJpoPibqORdxl/HmT21TyTQTdkqRLDdfUw7l 7wIojGKwlJyr8Bc4l0ZeiVDo8Erp6R8pZ6SHlHiGz9l0HPTD7Bg2z4knVKe8yd4i uyQq2iZisKl586DHk3TVnl+UWvpT/KXRHTBcdso++sc2DaM2kAiMgryFDsRxdls6 EQ== -----END CERTIFICATE-----Generated at Mon Jun 29 15:10:34 2026 by rpki-client