$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: Q9MtsdfAQabEVrsXE2F32cCsXGDVLarVTdDiYxb52rs= Subject key identifier: EC:EE:16:6D:CF:45:02:D5:2B:B6:F6:1B:64:56:62:14:C3:65:33:A6 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 58A0B6B301EAB8E78C4DEAE5FAB3747EE1967E2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 054F Signing time: Tue 11 Aug 2026 11:05:45 +0000 Manifest this update: Tue 11 Aug 2026 11:00:45 +0000 Manifest next update: Wed 12 Aug 2026 14:29:45 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: +o6b+YWxYNX3cjQ38SdKZjMbAI7HV2Q6NsNrK8dJG0E=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 12 Aug 2026 08:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a0:b6:b3:01:ea:b8:e7:8c:4d:ea:e5:fa:b3:74:7e:e1:96:7e:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 11 11:00:45 2026 GMT Not After : Aug 12 14:29:45 2026 GMT Subject: CN=ECEE166DCF4502D52BB6F61B64566214C36533A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:18:53:3f:46:b2:a8:8b:5c:3b:16:ee:d5:2f: 8c:92:2e:25:f0:43:76:c3:96:74:df:c7:e2:ba:d3: c8:fb:64:4b:23:12:62:1b:f7:ec:9c:33:e9:21:d1: 8c:4c:4f:c0:e9:6e:4a:4f:91:96:b8:e4:86:b7:4f: 6e:16:ad:18:83:7f:07:e9:a1:0b:25:26:c2:6b:41: 96:33:64:0e:c4:c8:18:4f:c0:11:d7:9d:f5:a1:e4: 0a:12:cd:d0:ee:c8:cb:22:16:02:42:ad:d1:70:6e: 50:43:ed:7d:39:f0:96:9e:1b:5d:df:44:ea:2e:c9: 95:34:cf:77:a5:87:40:d7:15:4a:49:9c:b8:98:68: be:a9:c2:30:3c:96:49:d3:88:4b:26:93:4f:b1:26: 65:7a:43:0c:c0:72:b9:e7:9c:30:3f:2d:1d:6f:2d: b4:93:8b:b2:8e:cb:e6:e8:8b:9e:b4:69:06:5a:a7: a5:c7:b1:8a:04:ba:97:cf:07:4c:80:e7:6a:7c:a1: 94:03:e9:11:8c:87:79:f2:0d:41:77:8e:c5:26:de: be:27:5b:ab:66:22:3d:2c:d3:1f:be:71:50:10:26: e5:89:ab:86:48:b1:d9:25:e8:42:bd:cd:9e:92:bf: ff:06:58:e9:76:6b:23:2e:e5:47:c7:6a:57:54:59: 3b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EE:16:6D:CF:45:02:D5:2B:B6:F6:1B:64:56:62:14:C3:65:33:A6 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f3:3d:73:94:ff:ee:c8:80:7b:2c:b2:1b:1a:34:38:46:14: db:04:78:21:a2:9c:2c:1a:33:44:f9:82:69:0a:5d:1e:53:26: b5:1c:5b:d0:43:cd:f9:06:8d:68:29:5a:6f:be:57:b6:94:20: 89:0a:6d:88:de:4c:40:13:f6:c7:d5:bf:f2:c4:f1:af:7b:be: 0f:47:45:75:b3:63:a5:d4:73:28:a9:72:43:ca:e4:50:1a:97: e5:90:8f:38:6a:f4:4a:4b:9d:1d:a0:28:9d:48:b7:d0:75:98: 44:f6:1b:87:28:a2:0e:f0:09:58:ed:cc:85:60:56:a9:e7:39: 55:f9:bf:ce:bc:62:c8:24:2e:8d:b7:3c:95:49:33:fe:13:24: 34:37:06:63:7f:96:68:7e:4f:c6:c6:c2:3d:bc:1a:47:c0:e3: 95:97:b2:ad:7a:b7:a4:b1:b2:69:ad:84:b2:65:85:8d:88:97: 3c:14:95:22:fb:a6:7c:de:e2:ca:11:90:a0:ea:f4:24:e2:58: 64:e6:15:02:23:72:d0:63:01:1b:9c:62:14:2a:bf:e2:f7:6c: 55:b5:80:48:67:97:e7:bd:3e:f5:0f:11:d4:48:42:db:82:91: dd:03:42:7f:77:27:d0:9e:4f:5e:d3:1b:67:08:e5:82:79:7b: f8:09:62:1b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWKC2swHquOeMTerl+rN0fuGWfiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MTExMTAwNDVaFw0yNjA4MTIxNDI5NDVaMDMxMTAvBgNV BAMTKEVDRUUxNjZEQ0Y0NTAyRDUyQkI2RjYxQjY0NTY2MjE0QzM2NTMzQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpGFM/RrKoi1w7Fu7VL4ySLiXw Q3bDlnTfx+K608j7ZEsjEmIb9+ycM+kh0YxMT8DpbkpPkZa45Ia3T24WrRiDfwfp oQslJsJrQZYzZA7EyBhPwBHXnfWh5AoSzdDuyMsiFgJCrdFwblBD7X058JaeG13f ROouyZU0z3elh0DXFUpJnLiYaL6pwjA8lknTiEsmk0+xJmV6QwzAcrnnnDA/LR1v LbSTi7KOy+boi560aQZap6XHsYoEupfPB0yA52p8oZQD6RGMh3nyDUF3jsUm3r4n W6tmIj0s0x++cVAQJuWJq4ZIsdkl6EK9zZ6Sv/8GWOl2ayMu5UfHaldUWTvhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7O4Wbc9FAtUrtvYbZFZiFMNlM6YwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/M9c5T/7siAeyyyGxo0 OEYU2wR4IaKcLBozRPmCaQpdHlMmtRxb0EPN+QaNaClab75XtpQgiQptiN5MQBP2 x9W/8sTxr3u+D0dFdbNjpdRzKKlyQ8rkUBqX5ZCPOGr0SkudHaAonUi30HWYRPYb hyiiDvAJWO3MhWBWqec5Vfm/zrxiyCQujbc8lUkz/hMkNDcGY3+WaH5PxsbCPbwa R8DjlZeyrXq3pLGyaa2EsmWFjYiXPBSVIvumfN7iyhGQoOr0JOJYZOYVAiNy0GMB G5xiFCq/4vdsVbWASGeX570+9Q8R1EhC24KR3QNCf3cn0J5PXtMbZwjlgnl7+Ali Gw== -----END CERTIFICATE-----Generated at Tue Aug 11 13:55:55 2026 by rpki-client