$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: YzufvsUgmsOLLG8kSmYw66eejd/eseSkLDVAc27+DOY= Subject key identifier: DA:D8:E5:F9:91:3E:C3:01:45:64:3E:9C:B6:6B:BF:91:32:4F:33:8A Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 08CCA0F14741AC142401CE3971C6E42837862671 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0509 Signing time: Fri 19 Jun 2026 18:48:27 +0000 Manifest this update: Fri 19 Jun 2026 18:43:27 +0000 Manifest next update: Sat 20 Jun 2026 21:58:27 +0000 Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 7zH1VyKiGjqzSU9yTB+FWimJUgORE03zSxy20zk/wLc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Jun 2026 21:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:cc:a0:f1:47:41:ac:14:24:01:ce:39:71:c6:e4:28:37:86:26:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 19 18:43:27 2026 GMT Not After : Jun 20 21:58:27 2026 GMT Subject: CN=DAD8E5F9913EC30145643E9CB66BBF91324F338A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ea:9e:d8:5e:ac:00:7e:80:36:fa:e1:4c:6c: f9:6c:bd:8d:47:13:01:a4:e3:83:94:c6:e9:33:4b: c0:27:6d:22:2d:00:c9:b3:95:7b:88:e9:01:f7:c6: 46:ca:b8:a3:2d:53:67:f2:9c:ec:16:14:a2:cc:98: dd:8b:69:4a:2d:2b:de:96:cf:34:07:2a:a0:31:f4: ce:79:5d:f0:53:c3:93:e8:86:af:4d:6e:77:80:c1: 5f:89:41:d2:6a:96:1a:16:3d:19:90:dc:af:e7:c5: 22:d6:14:c0:35:14:62:c4:15:33:bb:5b:de:36:0f: 51:2c:f0:86:b6:00:68:53:79:95:b2:00:aa:53:29: b7:0b:b6:bd:9d:9e:9a:01:39:31:70:cb:20:d2:fc: f0:f3:9c:1a:1c:55:dd:3b:24:2b:4f:26:c4:35:01: 19:f2:c4:94:2e:24:0b:ec:d3:35:0d:d9:a7:9e:8a: a4:34:4c:30:db:ae:2b:a9:6a:53:13:7a:5a:9d:7f: c0:fa:2c:4f:6f:c8:c9:28:66:a2:e6:0e:de:d5:24: a6:83:f2:f9:bd:ab:76:94:33:4a:d1:c5:59:e1:e0: a7:e2:ab:e6:59:3d:5f:cc:77:e1:b7:96:df:bb:ed: fe:e3:c0:86:b1:72:71:72:55:b0:ad:b9:9d:a8:c7: 3f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D8:E5:F9:91:3E:C3:01:45:64:3E:9C:B6:6B:BF:91:32:4F:33:8A X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c5:a6:60:2e:c2:02:80:c9:04:28:fe:e3:d7:0a:ee:c5:f1: 7a:06:7f:87:77:83:38:d4:fe:7b:29:ad:84:80:39:c9:68:4f: 47:33:26:3f:f9:8f:9e:8e:e9:3b:c7:94:dd:ff:90:8f:49:0e: 27:d4:3d:2b:63:87:2c:8d:89:b2:05:c6:87:be:80:09:77:59: 49:18:db:81:64:1f:ef:28:4f:a6:bb:a7:ab:ad:3b:ae:6f:66: d4:24:19:dc:b6:cd:87:5a:99:0e:da:a6:9d:b9:f2:7b:fd:4f: f2:c5:7a:73:05:1e:74:c4:e4:26:13:1c:26:cb:52:30:1d:e3: b8:6c:0d:4d:19:7f:c6:b3:43:11:7e:84:bc:ca:24:e9:6b:41: 6f:53:51:c7:46:96:05:ed:18:fd:86:09:ab:56:8b:9b:58:4e: b3:cf:f2:1f:95:9e:f3:6a:d6:6a:69:ea:8a:60:96:75:4b:b1: f8:ee:90:38:75:3e:0e:ad:ff:8c:a8:00:e2:48:61:02:b9:72: 11:29:61:a2:7a:30:30:4c:e7:64:48:b0:40:57:45:01:a1:e0: fc:ae:63:91:7c:cb:8c:2c:2b:16:f1:80:d5:bb:77:8a:b5:c9: d2:aa:8b:d9:62:af:7c:ce:eb:16:17:04:96:08:61:ea:20:f3: 48:0d:89:8b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCMyg8UdBrBQkAc45ccbkKDeGJnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MTkxODQzMjdaFw0yNjA2MjAyMTU4MjdaMDMxMTAvBgNV BAMTKERBRDhFNUY5OTEzRUMzMDE0NTY0M0U5Q0I2NkJCRjkxMzI0RjMzOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT6p7YXqwAfoA2+uFMbPlsvY1H EwGk44OUxukzS8AnbSItAMmzlXuI6QH3xkbKuKMtU2fynOwWFKLMmN2LaUotK96W zzQHKqAx9M55XfBTw5Pohq9NbneAwV+JQdJqlhoWPRmQ3K/nxSLWFMA1FGLEFTO7 W942D1Es8Ia2AGhTeZWyAKpTKbcLtr2dnpoBOTFwyyDS/PDznBocVd07JCtPJsQ1 ARnyxJQuJAvs0zUN2aeeiqQ0TDDbriupalMTelqdf8D6LE9vyMkoZqLmDt7VJKaD 8vm9q3aUM0rRxVnh4Kfiq+ZZPV/Md+G3lt+77f7jwIaxcnFyVbCtuZ2oxz9dAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU2tjl+ZE+wwFFZD6ctmu/kTJPM4owHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsWmYC7CAoDJBCj+49cK 7sXxegZ/h3eDONT+eymthIA5yWhPRzMmP/mPno7pO8eU3f+Qj0kOJ9Q9K2OHLI2J sgXGh76ACXdZSRjbgWQf7yhPprunq607rm9m1CQZ3LbNh1qZDtqmnbnye/1P8sV6 cwUedMTkJhMcJstSMB3juGwNTRl/xrNDEX6EvMok6WtBb1NRx0aWBe0Y/YYJq1aL m1hOs8/yH5We82rWamnqimCWdUux+O6QOHU+Dq3/jKgA4khhArlyESlhonowMEzn ZEiwQFdFAaHg/K5jkXzLjCwrFvGA1bt3irXJ0qqL2WKvfM7rFhcElghh6iDzSA2J iw== -----END CERTIFICATE-----Generated at Sat Jun 20 12:46:31 2026 by rpki-client