$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 4Mb7lL31nHEOocY69njdsNP2bMPSWDLthbNsbOUoPa4= Subject key identifier: A5:40:DA:93:5A:1E:E9:B8:16:46:45:30:32:8F:0F:E6:18:C9:2F:E1 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 0120F595DA1A088B5807612D5D95A80C27F30DA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04CE Signing time: Wed 06 May 2026 04:39:56 +0000 Manifest this update: Wed 06 May 2026 04:34:56 +0000 Manifest next update: Thu 07 May 2026 05:20:56 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: LblFp6+kbMSEAcRaFDKFttiTV1AkmIQbg5wa3+zjg5Q=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 May 2026 22:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:20:f5:95:da:1a:08:8b:58:07:61:2d:5d:95:a8:0c:27:f3:0d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 6 04:34:56 2026 GMT Not After : May 7 05:20:56 2026 GMT Subject: CN=A540DA935A1EE9B816464530328F0FE618C92FE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4e:d9:f4:0b:d8:07:7c:ba:a7:db:54:77:c0: 07:d2:07:8a:e9:5d:9c:ce:5f:69:54:d6:63:47:d6: 6e:59:81:79:04:da:ff:fa:16:8f:e5:7b:4e:b2:80: f7:91:cb:86:4b:b8:f7:f5:6a:93:b9:3f:09:0c:fe: cb:e0:83:63:e1:fd:c7:af:fa:56:77:e3:a9:01:82: 60:db:a0:95:2e:66:a5:d5:8b:b5:6e:bf:50:c2:1f: e5:0d:e1:a5:36:0b:82:31:6f:0e:5a:a0:c5:87:58: ef:20:c6:4a:29:9c:cc:91:1c:39:98:50:38:28:7f: 01:0b:1e:6a:b5:8f:d5:31:94:6a:01:77:40:d1:8a: 0f:13:b9:de:01:5f:36:35:52:b7:e4:fb:05:54:5b: c9:a6:b9:83:fb:b1:59:01:87:7b:6b:63:56:c5:66: a4:0c:9f:99:47:69:a9:28:4d:16:2a:92:1c:ab:cb: dd:6e:c0:e2:f4:a4:6b:d4:fb:36:4d:3b:09:a6:d4: ab:a7:21:f4:fd:0e:45:8a:e6:ee:72:f2:43:80:8b: 47:46:c3:69:25:23:a1:1b:18:c0:d5:15:68:70:1e: 32:f8:67:37:2f:8c:bd:aa:ca:a3:ef:26:34:39:d5: f0:bd:ed:c6:f9:fa:45:3e:95:61:58:5f:57:a1:bb: d9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:40:DA:93:5A:1E:E9:B8:16:46:45:30:32:8F:0F:E6:18:C9:2F:E1 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d1:dc:d5:14:63:3a:eb:bd:25:7a:48:d4:69:73:ff:be:b3: 51:1f:dc:c7:ee:51:af:cc:da:95:4b:5e:7d:f9:74:80:33:cc: d3:87:71:d9:a1:be:5a:19:c9:2d:47:bc:dd:cb:4f:a7:51:54: c8:89:36:9a:c0:db:79:ce:4e:78:44:d4:f8:ec:50:bb:2a:9e: b9:15:1e:94:e2:b8:00:ea:10:b1:28:f8:da:0c:36:54:80:95: 2d:5b:72:02:7c:17:0e:1d:ee:92:c2:0f:77:13:e2:fb:f5:63: ce:81:67:20:87:48:d7:7d:21:94:4f:80:4e:60:da:7f:b5:c2: ba:cb:6e:88:59:fb:41:b4:74:31:32:2e:f7:e8:27:20:82:80: 6c:11:7b:2d:80:4b:e9:f2:4c:50:0c:7c:95:ec:84:bc:91:c4: 1a:12:bf:4a:7b:26:44:54:64:71:86:2c:bb:57:30:8a:f2:fa: 22:a2:84:88:f5:ba:13:7e:f8:e0:da:4f:b6:e9:7d:d7:c2:c4: 6b:70:82:30:d2:13:9b:10:6c:a6:15:b0:75:c8:a4:dc:9e:cd: 66:c7:60:ea:2d:31:a3:75:e0:77:60:73:9f:45:eb:ee:b1:d2: a1:22:63:dd:72:9d:a0:77:c7:31:b2:f6:80:b2:97:40:2a:6f: f4:d5:e2:dc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUASD1ldoaCItYB2EtXZWoDCfzDaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MDYwNDM0NTZaFw0yNjA1MDcwNTIwNTZaMDMxMTAvBgNV BAMTKEE1NDBEQTkzNUExRUU5QjgxNjQ2NDUzMDMyOEYwRkU2MThDOTJGRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXTtn0C9gHfLqn21R3wAfSB4rp XZzOX2lU1mNH1m5ZgXkE2v/6Fo/le06ygPeRy4ZLuPf1apO5PwkM/svgg2Ph/cev +lZ346kBgmDboJUuZqXVi7Vuv1DCH+UN4aU2C4Ixbw5aoMWHWO8gxkopnMyRHDmY UDgofwELHmq1j9UxlGoBd0DRig8Tud4BXzY1Urfk+wVUW8mmuYP7sVkBh3trY1bF ZqQMn5lHaakoTRYqkhyry91uwOL0pGvU+zZNOwmm1KunIfT9DkWK5u5y8kOAi0dG w2klI6EbGMDVFWhwHjL4ZzcvjL2qyqPvJjQ51fC97cb5+kU+lWFYX1ehu9k5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUpUDak1oe6bgWRkUwMo8P5hjJL+EwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtHc1RRjOuu9JXpI1Glz /76zUR/cx+5Rr8zalUteffl0gDPM04dx2aG+WhnJLUe83ctPp1FUyIk2msDbec5O eETU+OxQuyqeuRUelOK4AOoQsSj42gw2VICVLVtyAnwXDh3uksIPdxPi+/VjzoFn IIdI130hlE+ATmDaf7XCustuiFn7QbR0MTIu9+gnIIKAbBF7LYBL6fJMUAx8leyE vJHEGhK/SnsmRFRkcYYsu1cwivL6IqKEiPW6E3744NpPtul918LEa3CCMNITmxBs phWwdcik3J7NZsdg6i0xo3Xgd2Bzn0Xr7rHSoSJj3XKdoHfHMbL2gLKXQCpv9NXi 3A== -----END CERTIFICATE-----Generated at Wed May 6 08:30:16 2026 by rpki-client