$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 6LY2PbAhlGePz5oREN7UAptY/m2hBvES9MmhvsiB+4Y= Subject key identifier: 04:CF:46:88:C7:72:CB:0E:93:6F:26:F4:00:77:A6:EE:BA:5E:43:2C Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 67732EBDC798E7BDBBCDEA7644DC1B57D517C4BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0479 Signing time: Tue 03 Mar 2026 12:04:49 +0000 Manifest this update: Tue 03 Mar 2026 11:59:49 +0000 Manifest next update: Wed 04 Mar 2026 15:16:49 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: KfCx3edvCrz9/Pt09XP0Yu/YLkt6QuQ7twNGwdPggpE=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Mar 2026 15:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:73:2e:bd:c7:98:e7:bd:bb:cd:ea:76:44:dc:1b:57:d5:17:c4:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Mar 3 11:59:49 2026 GMT Not After : Mar 4 15:16:49 2026 GMT Subject: CN=04CF4688C772CB0E936F26F40077A6EEBA5E432C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:a0:d2:bf:76:eb:e6:0f:a7:09:9f:42:fa: a1:c5:8b:5c:44:6f:e1:13:93:92:4e:86:dd:59:91: b3:b8:8d:41:e1:3f:24:5c:18:87:17:76:63:36:5f: f8:63:df:04:38:e2:e3:af:74:13:81:a4:7f:79:00: fd:b5:bf:e1:44:5e:88:92:6e:cd:9c:5a:90:51:ed: 6b:01:97:7d:99:b5:47:09:51:bf:38:c7:fa:f5:d6: 21:af:10:3b:cb:c9:1d:eb:2d:ef:6c:74:0b:17:f2: 4e:f1:26:db:3e:ae:bf:53:34:48:f3:dd:8f:3f:9b: f4:97:63:13:bf:10:54:42:9e:ad:4d:b6:d7:49:b7: a1:be:2c:38:d1:bc:b8:83:ce:c0:7b:51:2f:fc:23: 12:3d:53:e8:d6:96:23:82:64:a6:d5:68:0a:fd:dc: a3:82:7a:ec:3a:ba:32:dd:2d:2d:32:0e:00:94:b8: f4:5a:dc:ae:20:70:7d:c7:5e:76:d3:ca:12:ca:ad: d7:90:f9:6d:e5:60:02:28:24:6a:8c:5a:28:a4:bb: 0a:7e:d0:1a:98:b5:b8:2d:1a:2c:da:96:94:0b:52: 7b:9c:01:7f:4f:7d:50:ed:60:56:35:20:01:4a:d9: 64:54:c8:e3:92:26:5d:60:c2:a7:16:94:3d:ba:1a: c0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CF:46:88:C7:72:CB:0E:93:6F:26:F4:00:77:A6:EE:BA:5E:43:2C X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b8:a2:bf:7a:dd:a8:6c:8f:68:ab:ac:48:b8:96:d0:7b:cc: 9c:56:87:8f:05:5f:35:16:da:98:24:c8:bd:bb:d6:1e:c5:be: fb:60:0f:92:79:da:8a:b6:2b:15:7c:5b:6f:e9:87:a6:01:93: ba:c0:d4:b5:30:43:5a:1f:d5:f2:b7:88:5f:5f:42:c5:d7:d8: e0:76:66:af:c5:12:59:15:9c:2c:ce:78:22:39:6e:66:ff:05: 53:8a:11:42:4d:54:92:70:26:1f:96:32:20:5b:5c:ec:9c:e5: 01:02:59:f7:fb:90:cd:f0:43:8e:97:88:08:7a:f5:13:61:57: 48:14:a1:67:3d:28:a3:9e:93:3f:20:a2:64:07:8c:2f:9f:90: 94:e3:28:83:0d:38:54:02:09:b2:09:8d:26:cd:53:83:6e:8d: b1:10:81:f4:27:33:90:8f:3b:78:c5:23:f3:bf:a6:1c:22:47: f4:f0:88:aa:d1:10:04:8c:1c:dc:0d:10:36:d2:65:97:09:b8: 40:fc:d7:3e:77:a1:65:03:80:c2:45:16:16:4a:3a:38:6a:47: db:da:55:95:9a:16:66:ef:c5:28:17:15:0d:18:8d:24:f9:b7: 7d:cb:06:56:8f:6a:c8:f8:05:1e:1f:68:16:82:c3:10:b0:d4: 34:74:8f:8b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZ3MuvceY5727zep2RNwbV9UXxLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAzMDMxMTU5NDlaFw0yNjAzMDQxNTE2NDlaMDMxMTAvBgNV BAMTKDA0Q0Y0Njg4Qzc3MkNCMEU5MzZGMjZGNDAwNzdBNkVFQkE1RTQzMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvaKDSv3br5g+nCZ9C+qHFi1xE b+ETk5JOht1ZkbO4jUHhPyRcGIcXdmM2X/hj3wQ44uOvdBOBpH95AP21v+FEXoiS bs2cWpBR7WsBl32ZtUcJUb84x/r11iGvEDvLyR3rLe9sdAsX8k7xJts+rr9TNEjz 3Y8/m/SXYxO/EFRCnq1NttdJt6G+LDjRvLiDzsB7US/8IxI9U+jWliOCZKbVaAr9 3KOCeuw6ujLdLS0yDgCUuPRa3K4gcH3HXnbTyhLKrdeQ+W3lYAIoJGqMWiikuwp+ 0BqYtbgtGizalpQLUnucAX9PfVDtYFY1IAFK2WRUyOOSJl1gwqcWlD26GsD1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBM9GiMdyyw6Tbyb0AHem7rpeQywwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALriiv3rdqGyPaKusSLiW 0HvMnFaHjwVfNRbamCTIvbvWHsW++2APknnairYrFXxbb+mHpgGTusDUtTBDWh/V 8reIX19CxdfY4HZmr8USWRWcLM54IjluZv8FU4oRQk1UknAmH5YyIFtc7JzlAQJZ 9/uQzfBDjpeICHr1E2FXSBShZz0oo56TPyCiZAeML5+QlOMogw04VAIJsgmNJs1T g26NsRCB9CczkI87eMUj87+mHCJH9PCIqtEQBIwc3A0QNtJllwm4QPzXPnehZQOA wkUWFko6OGpH29pVlZoWZu/FKBcVDRiNJPm3fcsGVo9qyPgFHh9oFoLDELDUNHSP iw== -----END CERTIFICATE-----Generated at Tue Mar 3 23:33:09 2026 by rpki-client