$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: CJDefC2iW7tShcYgdUL9fGfpcxtFQhJxht6BmMBN4is= Subject key identifier: 3D:26:1E:1E:71:B2:EE:EE:63:58:C1:94:5D:82:FF:83:0B:3B:29:DB Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 4CF03B8687BCE46DFE8D16B5742537C3D5AAA5A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0514 Signing time: Sun 28 Jun 2026 10:58:12 +0000 Manifest this update: Sun 28 Jun 2026 10:53:12 +0000 Manifest next update: Mon 29 Jun 2026 13:02:12 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 7qYQlJPAdJ3fYJGOyJ2M+FukDb+JA8CjIFujcZHR+UY=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Jun 2026 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f0:3b:86:87:bc:e4:6d:fe:8d:16:b5:74:25:37:c3:d5:aa:a5:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 28 10:53:12 2026 GMT Not After : Jun 29 13:02:12 2026 GMT Subject: CN=3D261E1E71B2EEEE6358C1945D82FF830B3B29DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:b8:e3:8d:98:5c:98:6c:9c:4f:f5:d9:c6: 03:df:60:f7:b6:4b:fd:15:90:dc:bd:05:d0:0b:44: 71:58:49:50:7a:5e:e8:34:89:ff:c5:bf:9a:63:d9: 3b:32:bc:21:e5:1f:c0:3f:b4:45:d3:a3:06:e1:81: 15:c2:a0:40:a9:45:58:a8:bd:41:e3:20:1d:fe:d7: 52:0b:84:94:b0:86:4b:18:88:98:af:49:38:07:f0: 9c:34:49:e3:7e:fa:a4:b7:3a:cd:c3:6e:d0:d7:22: a8:09:9e:34:37:c8:5a:16:b4:cd:a4:b1:f7:da:c0: 4b:54:fe:97:bd:8e:68:ce:1f:39:46:f4:1c:2c:14: a3:bc:73:3b:51:2a:52:92:76:90:bb:a5:d7:2c:90: 6f:6c:63:a8:db:8b:76:f0:78:00:2e:ab:87:c5:ce: 32:8e:5b:ec:a6:ed:b9:8f:ce:62:01:2e:b6:a9:28: 15:d6:57:eb:05:e0:fa:79:44:e2:30:65:41:3e:3c: b6:88:a6:f8:6b:3a:c9:35:68:f5:af:f9:16:9d:e5: c8:0b:6a:65:42:e8:b6:5f:a2:22:b5:77:e8:3e:6c: 44:3c:db:57:ba:d2:51:29:30:0e:e9:d2:b7:c3:5e: 91:c7:ea:1c:25:6e:7c:fe:0f:58:bd:cc:39:06:cd: 3e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:26:1E:1E:71:B2:EE:EE:63:58:C1:94:5D:82:FF:83:0B:3B:29:DB X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:f3:e9:09:7e:be:f2:34:0e:62:76:29:91:72:58:80:d6:9a: 28:7b:92:70:49:ea:0f:ee:04:98:88:a2:a2:ef:08:cc:37:0c: 29:c2:a0:46:be:9d:09:ed:cc:88:93:41:38:fe:03:3e:16:88: ea:f7:94:37:b8:dc:3d:13:69:f6:c1:e5:63:6c:0d:25:8b:d1: 8f:89:d3:8a:4c:97:4c:66:de:0c:cf:82:a1:93:0e:bc:0d:18: fb:47:c4:a2:f4:21:cf:f0:c5:3f:ac:ae:d9:c7:9b:ed:7c:e2: 1c:d9:8f:76:b9:c0:e3:09:64:cb:fe:f5:72:ae:13:a2:b2:98: 27:9c:17:59:82:ff:a7:01:93:a3:e1:42:b3:ba:dc:6a:e2:0a: 11:93:6e:4b:ac:7c:52:67:31:6f:0e:3b:39:ed:43:f9:9b:45: 1e:ef:7d:72:88:03:f3:d1:2f:a0:b9:6a:ec:b6:53:59:7c:7f: fe:de:3e:2c:c8:20:36:6f:83:24:74:1a:71:b4:b9:d8:9a:ce: 87:6c:cd:cf:81:8c:28:b6:e8:7e:a2:19:2a:3e:8f:40:53:6e: b4:f4:73:aa:b5:a4:b4:2b:46:65:a3:9d:ba:e4:bd:0a:b5:d7: 2c:03:c1:6e:d9:a0:6c:60:3c:91:e5:97:71:54:c0:ef:83:b1: bc:1c:d8:35 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTPA7hoe85G3+jRa1dCU3w9WqpaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MjgxMDUzMTJaFw0yNjA2MjkxMzAyMTJaMDMxMTAvBgNV BAMTKDNEMjYxRTFFNzFCMkVFRUU2MzU4QzE5NDVEODJGRjgzMEIzQjI5REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAT7jjjZhcmGycT/XZxgPfYPe2 S/0VkNy9BdALRHFYSVB6Xug0if/Fv5pj2TsyvCHlH8A/tEXTowbhgRXCoECpRVio vUHjIB3+11ILhJSwhksYiJivSTgH8Jw0SeN++qS3Os3DbtDXIqgJnjQ3yFoWtM2k sffawEtU/pe9jmjOHzlG9BwsFKO8cztRKlKSdpC7pdcskG9sY6jbi3bweAAuq4fF zjKOW+ym7bmPzmIBLrapKBXWV+sF4Pp5ROIwZUE+PLaIpvhrOsk1aPWv+Rad5cgL amVC6LZfoiK1d+g+bEQ821e60lEpMA7p0rfDXpHH6hwlbnz+D1i9zDkGzT7/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPSYeHnGy7u5jWMGUXYL/gws7KdswHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfPpCX6+8jQOYnYpkXJY gNaaKHuScEnqD+4EmIiiou8IzDcMKcKgRr6dCe3MiJNBOP4DPhaI6veUN7jcPRNp 9sHlY2wNJYvRj4nTikyXTGbeDM+CoZMOvA0Y+0fEovQhz/DFP6yu2ceb7XziHNmP drnA4wlky/71cq4TorKYJ5wXWYL/pwGTo+FCs7rcauIKEZNuS6x8Umcxbw47Oe1D +ZtFHu99cogD89EvoLlq7LZTWXx//t4+LMggNm+DJHQacbS52JrOh2zNz4GMKLbo fqIZKj6PQFNutPRzqrWktCtGZaOduuS9CrXXLAPBbtmgbGA8keWXcVTA74OxvBzY NQ== -----END CERTIFICATE-----Generated at Sun Jun 28 15:17:19 2026 by rpki-client