$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: PhLXiNBphwGiZ5t8PO2MDeWSduCeIhEGzI2fyhGZnHs= Subject key identifier: 3E:6A:CA:7B:F6:00:8E:4E:14:3B:8A:A1:6A:1D:5A:49:76:DC:A9:C1 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 3FF5973911CF246F496C1117C88E91B9C09A658E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04F0 Signing time: Sun 31 May 2026 16:57:04 +0000 Manifest this update: Sun 31 May 2026 16:52:04 +0000 Manifest next update: Mon 01 Jun 2026 17:33:04 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: nsB6VuoT+3A7AMI04GWt160ULoP6/s64HtsPHE/OC7E=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Jun 2026 11:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f5:97:39:11:cf:24:6f:49:6c:11:17:c8:8e:91:b9:c0:9a:65:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 31 16:52:04 2026 GMT Not After : Jun 1 17:33:04 2026 GMT Subject: CN=3E6ACA7BF6008E4E143B8AA16A1D5A4976DCA9C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:88:6e:62:a1:13:5a:b4:50:cc:65:08:bb:20: ad:3f:3c:d4:8d:f8:aa:af:f3:53:75:a9:59:7a:39: e9:a7:4c:84:61:22:79:d6:7e:2e:64:02:01:fa:bd: b7:5c:50:c8:df:ac:8d:c8:60:20:bd:8a:22:77:dd: 07:19:44:16:5e:48:db:9d:c7:62:72:e4:01:18:58: 44:cd:9e:c8:f6:2f:73:97:77:4f:25:1b:96:a3:9b: f0:a9:a8:79:90:60:22:f4:3e:48:45:83:3e:4d:16: fd:7e:3a:a2:1c:5a:0c:bc:b9:9d:5a:f3:89:fd:45: ef:1a:66:35:f0:3b:fc:cc:37:b4:18:1b:8b:e6:81: af:ec:fe:db:ca:41:26:d5:d7:1e:24:29:04:b4:07: 01:bd:8d:36:9a:9d:32:54:7b:cc:f5:24:a5:04:a9: cd:74:c3:5d:ac:0f:46:94:fb:c6:e4:55:04:04:a2: f1:4a:55:0c:6a:9f:2f:7a:49:47:da:e7:88:40:b5: 29:17:2e:89:3c:84:53:ec:da:6c:1b:79:01:00:f7: 8f:43:12:3d:18:f3:db:66:80:64:45:35:92:90:3c: 94:e7:33:ca:27:05:9a:85:99:81:1b:7f:8f:8e:7f: 17:d9:44:25:de:e7:89:d4:34:47:34:6b:43:ed:63: c3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6A:CA:7B:F6:00:8E:4E:14:3B:8A:A1:6A:1D:5A:49:76:DC:A9:C1 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:b2:d4:cf:ac:ca:9a:c3:bc:5d:9e:5e:03:b1:f7:04:1d:60: 60:06:58:a3:cb:b3:71:a8:f6:f7:de:5a:f9:a2:ef:41:02:65: 7f:b6:ba:47:6c:9d:a9:82:b5:f2:ac:c3:22:4c:01:45:91:27: de:00:f5:50:30:60:db:51:29:2b:0b:f3:e5:70:14:ec:d0:62: de:75:96:e1:8b:18:8c:21:1a:b0:84:1e:4f:0c:3a:24:6f:02: b5:ce:6f:c8:56:4a:4b:02:36:2a:23:73:c8:35:6f:a5:6a:3e: dd:59:80:0c:7a:97:20:8a:11:11:58:6a:87:d0:70:30:b9:38: 7f:f5:69:07:82:76:c0:0e:75:47:92:bc:d7:fb:d9:8d:86:a0: c5:35:df:25:26:60:f2:00:fc:25:57:9a:7e:47:b2:33:fe:eb: cc:0b:82:1c:51:3c:00:21:9b:2f:43:8e:4b:35:ff:28:68:36: 29:f7:ce:e5:4e:fd:25:55:5c:22:99:be:8f:ea:d3:29:bb:7c: c3:39:5a:16:21:92:b8:68:05:59:c3:f3:86:fa:50:ec:a9:2e: b4:7f:16:ba:71:3d:2d:1a:63:66:53:3c:28:e9:e2:48:bd:1a: 76:cc:a9:eb:91:89:37:87:cd:1f:36:93:47:cb:92:ff:ae:12: 4f:d1:31:45 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUP/WXORHPJG9JbBEXyI6RucCaZY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MzExNjUyMDRaFw0yNjA2MDExNzMzMDRaMDMxMTAvBgNV BAMTKDNFNkFDQTdCRjYwMDhFNEUxNDNCOEFBMTZBMUQ1QTQ5NzZEQ0E5QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmiG5ioRNatFDMZQi7IK0/PNSN +Kqv81N1qVl6OemnTIRhInnWfi5kAgH6vbdcUMjfrI3IYCC9iiJ33QcZRBZeSNud x2Jy5AEYWETNnsj2L3OXd08lG5ajm/CpqHmQYCL0PkhFgz5NFv1+OqIcWgy8uZ1a 84n9Re8aZjXwO/zMN7QYG4vmga/s/tvKQSbV1x4kKQS0BwG9jTaanTJUe8z1JKUE qc10w12sD0aU+8bkVQQEovFKVQxqny96SUfa54hAtSkXLok8hFPs2mwbeQEA949D Ej0Y89tmgGRFNZKQPJTnM8onBZqFmYEbf4+OfxfZRCXe54nUNEc0a0PtY8PFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPmrKe/YAjk4UO4qhah1aSXbcqcEwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLLUz6zKmsO8XZ5eA7H3 BB1gYAZYo8uzcaj2995a+aLvQQJlf7a6R2ydqYK18qzDIkwBRZEn3gD1UDBg21Ep Kwvz5XAU7NBi3nWW4YsYjCEasIQeTww6JG8Ctc5vyFZKSwI2KiNzyDVvpWo+3VmA DHqXIIoREVhqh9BwMLk4f/VpB4J2wA51R5K81/vZjYagxTXfJSZg8gD8JVeafkey M/7rzAuCHFE8ACGbL0OOSzX/KGg2KffO5U79JVVcIpm+j+rTKbt8wzlaFiGSuGgF WcPzhvpQ7KkutH8WunE9LRpjZlM8KOniSL0adsyp65GJN4fNHzaTR8uS/64ST9Ex RQ== -----END CERTIFICATE-----Generated at Sun May 31 19:11:05 2026 by rpki-client