$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: x6eA4pl3jWoQ3myTgxGCuvW9d2ZGb4Mj9DKfuj3Bqmg= Subject key identifier: 75:48:0B:29:AB:0A:51:1C:07:8D:19:35:57:A8:DB:14:C0:1A:83:80 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 4D3903498ECA6FFDA1CAE8BBB72D1F3F6D845186 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 046F Signing time: Tue 24 Feb 2026 01:54:16 +0000 Manifest this update: Tue 24 Feb 2026 01:49:16 +0000 Manifest next update: Wed 25 Feb 2026 02:58:16 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: W/E8hIQndPuDYD1Sa0APk7dkjrd4HCR+X3wznYMASB8=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 25 Feb 2026 02:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:39:03:49:8e:ca:6f:fd:a1:ca:e8:bb:b7:2d:1f:3f:6d:84:51:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Feb 24 01:49:16 2026 GMT Not After : Feb 25 02:58:16 2026 GMT Subject: CN=75480B29AB0A511C078D193557A8DB14C01A8380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:45:9c:41:70:02:a6:95:03:aa:fe:e8:32:c9: 11:5e:ab:ae:af:1f:94:fa:e5:75:f8:15:97:d3:d5: 43:f7:39:0e:40:8b:6f:09:0c:c5:e5:1b:76:92:42: 3f:1a:60:54:d3:49:16:0c:72:93:a7:2f:c5:7f:63: 8e:69:aa:12:6a:f2:66:13:ee:5e:df:cb:05:9a:ed: ab:8d:67:e5:12:7f:55:26:31:0d:40:fd:ed:d4:79: d0:ce:59:6a:e5:be:1a:0e:0a:21:10:f1:75:c2:1c: 88:53:73:e0:42:5a:a1:66:91:05:a8:5d:f3:46:9b: 36:41:e7:49:38:6c:fd:83:bf:3a:04:f2:5c:05:cf: b2:b3:2d:17:12:88:aa:d5:ca:86:d7:73:1a:a8:23: c4:45:0a:5a:98:49:e0:3e:f0:69:48:fa:75:97:e5: f9:17:90:2d:2f:d4:07:5c:ff:df:ba:39:06:65:f9: 2e:b5:06:0b:de:36:eb:c4:ba:c5:1b:f6:e5:2d:68: fb:e2:79:a8:11:47:67:4b:ed:be:d5:37:03:95:bd: f2:d9:94:5e:30:8b:ef:a2:a0:a9:bf:d6:8d:0b:68: 82:34:6c:e0:d2:4f:cb:05:28:07:c8:31:4c:0d:6b: 63:ad:51:cf:7a:23:2c:0c:b5:20:d6:73:b3:6a:ed: 94:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:48:0B:29:AB:0A:51:1C:07:8D:19:35:57:A8:DB:14:C0:1A:83:80 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:2d:1f:0e:47:f0:8f:57:91:22:27:31:92:ce:76:e5:a8:15: 87:4a:1a:da:92:28:53:6f:2c:72:9f:e7:41:98:08:9d:d8:c0: ca:54:66:62:a4:5a:b0:fc:52:b8:b6:a8:67:40:76:31:f9:22: a6:18:31:67:86:6d:e1:0d:83:96:b7:61:c6:31:56:24:68:5e: a0:1c:a8:24:d3:a5:36:24:a1:51:3e:f7:74:18:ff:36:0a:4b: 11:30:0a:7e:4e:35:e8:71:80:4f:55:ce:ca:9e:80:d8:fd:84: e1:06:18:b4:84:5b:81:70:2a:17:a4:f8:82:ea:d2:3b:f1:8f: 06:9a:38:90:3a:f9:31:2d:62:fd:08:13:5b:6e:c7:68:32:ac: fa:4b:16:7f:91:d3:9d:1f:00:bb:f2:00:d8:c5:b9:86:54:93: db:12:43:53:ca:fc:27:24:9a:7b:a0:28:3d:44:f3:d5:f5:1f: c9:9a:c2:2b:83:54:24:f1:7e:8d:0b:22:70:84:eb:bd:e9:ca: f7:d9:4a:74:b5:25:92:b3:ed:d0:9a:4a:42:f9:87:82:2d:33: 58:83:cf:58:09:8a:ee:fe:4e:4c:cf:75:a7:60:24:98:99:54: 40:16:e5:f4:b7:bb:d8:71:1b:3c:a8:d5:72:f9:b0:f9:41:a9: 98:b0:f3:55 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTTkDSY7Kb/2hyui7ty0fP22EUYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAyMjQwMTQ5MTZaFw0yNjAyMjUwMjU4MTZaMDMxMTAvBgNV BAMTKDc1NDgwQjI5QUIwQTUxMUMwNzhEMTkzNTU3QThEQjE0QzAxQTgzODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkRZxBcAKmlQOq/ugyyRFeq66v H5T65XX4FZfT1UP3OQ5Ai28JDMXlG3aSQj8aYFTTSRYMcpOnL8V/Y45pqhJq8mYT 7l7fywWa7auNZ+USf1UmMQ1A/e3UedDOWWrlvhoOCiEQ8XXCHIhTc+BCWqFmkQWo XfNGmzZB50k4bP2DvzoE8lwFz7KzLRcSiKrVyobXcxqoI8RFClqYSeA+8GlI+nWX 5fkXkC0v1Adc/9+6OQZl+S61BgveNuvEusUb9uUtaPvieagRR2dL7b7VNwOVvfLZ lF4wi++ioKm/1o0LaII0bODST8sFKAfIMUwNa2OtUc96IywMtSDWc7Nq7ZTTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUdUgLKasKURwHjRk1V6jbFMAag4AwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMy0fDkfwj1eRIicxks52 5agVh0oa2pIoU28scp/nQZgIndjAylRmYqRasPxSuLaoZ0B2MfkiphgxZ4Zt4Q2D lrdhxjFWJGheoByoJNOlNiShUT73dBj/NgpLETAKfk416HGAT1XOyp6A2P2E4QYY tIRbgXAqF6T4gurSO/GPBpo4kDr5MS1i/QgTW27HaDKs+ksWf5HTnR8Au/IA2MW5 hlST2xJDU8r8JySae6AoPUTz1fUfyZrCK4NUJPF+jQsicITrvenK99lKdLUlkrPt 0JpKQvmHgi0zWIPPWAmK7v5OTM91p2AkmJlUQBbl9Le72HEbPKjVcvmw+UGpmLDz VQ== -----END CERTIFICATE-----Generated at Tue Feb 24 10:35:02 2026 by rpki-client