$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: ejBCx07/gvDvo7EvK2tKRRKWAP3BRf+794lj4uoersw= Subject key identifier: 86:07:D9:BE:1A:67:6B:BB:E6:4D:28:0D:D0:D8:98:D9:CC:09:59:DC Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 24C531B566A142D3E1EF8B9BB3B5C6A03F33E406 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04DF Signing time: Tue 19 May 2026 01:41:35 +0000 Manifest this update: Tue 19 May 2026 01:36:35 +0000 Manifest next update: Wed 20 May 2026 02:22:35 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: yPEr8D5lZhiGxS/w4k/1swh+qLhueuf1TAKkO19c2oE=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 20 May 2026 02:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c5:31:b5:66:a1:42:d3:e1:ef:8b:9b:b3:b5:c6:a0:3f:33:e4:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 19 01:36:35 2026 GMT Not After : May 20 02:22:35 2026 GMT Subject: CN=8607D9BE1A676BBBE64D280DD0D898D9CC0959DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dd:60:16:f1:a6:66:9b:17:41:57:0e:21:34: d9:4f:ea:e2:f1:df:c3:02:0f:45:f7:de:16:0c:c6: 19:6f:3d:5e:7e:ad:5f:52:4e:c3:31:92:88:7c:65: da:02:6a:14:42:2d:1a:e7:16:23:32:ee:06:a7:9a: 68:71:d2:05:ac:3c:f8:c0:7e:d3:d6:b4:03:71:5a: 5a:fb:d6:03:17:60:69:99:3f:e7:18:0c:e6:bb:07: 24:ca:f3:5b:22:0c:36:4e:bc:02:95:02:2d:7f:c8: 97:43:92:b2:a6:fd:79:73:25:fb:03:ed:af:e5:17: 72:65:90:0b:3d:81:d9:99:34:37:e9:57:6a:5d:6b: 1c:05:ee:fd:05:69:30:ce:e8:76:7b:26:bc:d9:ec: 37:d6:1a:09:8d:94:03:51:d1:63:13:4f:d6:e0:b2: 68:c8:4d:a6:e5:b0:20:ca:c7:19:8d:b7:a1:d4:78: dd:41:f1:00:36:6c:51:cd:a8:99:f7:24:9a:a1:16: c2:dc:c0:db:5e:4a:e5:f1:cb:9a:b1:f9:b1:5a:0e: 2e:f5:74:2f:79:1f:02:06:2e:63:4b:b0:f1:90:46: 23:3a:ff:a5:7d:48:0c:16:58:83:c7:64:9e:ad:6a: a0:b4:3f:3b:2e:d7:74:47:db:2e:04:5c:af:bb:de: 93:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:07:D9:BE:1A:67:6B:BB:E6:4D:28:0D:D0:D8:98:D9:CC:09:59:DC X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:cb:d2:73:c7:c8:7e:ef:88:30:c9:20:14:10:76:d8:bf:33: 0c:f0:2e:51:f2:4a:18:7a:c2:17:f1:21:5e:e5:d5:55:af:62: 1d:3f:2f:38:0f:ae:5a:fc:29:fe:89:ab:b5:f8:55:0f:d1:f7: 62:88:ea:f0:7c:fb:36:8f:e1:38:80:da:ea:55:04:a2:35:3c: 26:7c:77:d1:13:e9:76:ee:c6:d8:79:95:63:5a:b9:7a:2d:77: c9:a0:c6:4c:6d:86:6f:2d:f2:65:f8:57:21:0a:dd:ff:46:5e: a3:79:e4:4b:63:c2:1d:12:29:97:4d:12:0a:bf:f2:21:16:26: 10:4c:46:15:30:21:49:52:12:08:f6:74:db:64:0d:b0:78:0a: 5e:6f:d3:a2:6e:f9:7b:ab:7f:b3:33:e7:81:ab:af:8a:34:ac: e2:ee:52:25:f1:ba:22:b5:c1:b5:70:b1:48:35:08:2b:54:22: 22:80:3a:70:56:94:40:5a:58:20:34:e1:97:97:8d:07:d4:8d: cb:de:76:a3:b0:65:e1:f4:28:51:b1:88:31:51:f9:15:d5:9f: 70:d4:f5:7a:f4:73:6e:58:d4:17:fc:03:d8:02:21:8c:5f:2d: 52:05:c6:fe:17:15:5c:88:51:fb:10:98:d0:74:cb:e2:7f:ab: 38:47:4e:96 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJMUxtWahQtPh74ubs7XGoD8z5AYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MTkwMTM2MzVaFw0yNjA1MjAwMjIyMzVaMDMxMTAvBgNV BAMTKDg2MDdEOUJFMUE2NzZCQkJFNjREMjgwREQwRDg5OEQ5Q0MwOTU5REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3WAW8aZmmxdBVw4hNNlP6uLx 38MCD0X33hYMxhlvPV5+rV9STsMxkoh8ZdoCahRCLRrnFiMy7ganmmhx0gWsPPjA ftPWtANxWlr71gMXYGmZP+cYDOa7ByTK81siDDZOvAKVAi1/yJdDkrKm/XlzJfsD 7a/lF3JlkAs9gdmZNDfpV2pdaxwF7v0FaTDO6HZ7JrzZ7DfWGgmNlANR0WMTT9bg smjITablsCDKxxmNt6HUeN1B8QA2bFHNqJn3JJqhFsLcwNteSuXxy5qx+bFaDi71 dC95HwIGLmNLsPGQRiM6/6V9SAwWWIPHZJ6taqC0Pzsu13RH2y4EXK+73pMHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhgfZvhpna7vmTSgN0NiY2cwJWdwwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsvSc8fIfu+IMMkgFBB2 2L8zDPAuUfJKGHrCF/EhXuXVVa9iHT8vOA+uWvwp/omrtfhVD9H3Yojq8Hz7No/h OIDa6lUEojU8Jnx30RPpdu7G2HmVY1q5ei13yaDGTG2Gby3yZfhXIQrd/0Zeo3nk S2PCHRIpl00SCr/yIRYmEExGFTAhSVISCPZ022QNsHgKXm/Tom75e6t/szPngauv ijSs4u5SJfG6IrXBtXCxSDUIK1QiIoA6cFaUQFpYIDThl5eNB9SNy952o7Bl4fQo UbGIMVH5FdWfcNT1evRzbljUF/wD2AIhjF8tUgXG/hcVXIhR+xCY0HTL4n+rOEdO lg== -----END CERTIFICATE-----Generated at Tue May 19 17:38:54 2026 by rpki-client