$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 3sjYyriaHbWf1yfGI191viSNhpoI43wkOFCiA+Kgd3U= Subject key identifier: 64:8E:F2:FD:7B:AA:41:52:C1:BB:42:46:CD:8E:3F:82:9E:0A:B4:74 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 58856B6C82174CF0AE1C61C1F3AEEE86BAE52C5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04E7 Signing time: Sun 24 May 2026 21:54:34 +0000 Manifest this update: Sun 24 May 2026 21:49:34 +0000 Manifest next update: Mon 25 May 2026 23:28:34 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: f5fk5+z2/IuqpfWwc8f622dx71WUMwfviF1oenQgXaA=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 25 May 2026 18:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:85:6b:6c:82:17:4c:f0:ae:1c:61:c1:f3:ae:ee:86:ba:e5:2c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 24 21:49:34 2026 GMT Not After : May 25 23:28:34 2026 GMT Subject: CN=648EF2FD7BAA4152C1BB4246CD8E3F829E0AB474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:89:59:27:da:b1:b2:02:52:d8:5a:f2:a3:ed: 34:7b:3d:32:d2:5a:45:3b:b9:b3:fe:34:c8:c2:5f: 9e:16:3a:88:1a:58:41:94:2c:37:69:2a:03:9b:d8: 53:b5:a7:97:a5:04:53:7f:e7:64:c4:aa:47:d3:1d: 74:1f:82:1d:f6:ca:75:04:64:3d:72:c6:ea:5b:15: 0e:0a:56:c7:65:33:91:c1:3b:ed:76:a6:21:00:11: 5b:ec:2c:5c:b4:17:ed:d3:a2:b8:96:b7:7e:1f:54: fc:0e:6b:47:2b:fa:98:ba:aa:5d:c6:c5:b2:c9:dc: 71:fc:a2:d2:72:53:53:e1:7f:90:11:b8:0a:51:35: a4:8d:70:52:b8:0f:e2:76:4b:35:49:54:8b:09:b6: fc:e5:a2:7b:3f:2a:02:07:67:56:46:6f:6e:cb:c4: 33:07:ff:06:b5:f9:33:05:00:c1:25:90:c1:24:2a: 8b:39:9b:92:b1:42:b3:d4:a8:22:e8:fe:35:c2:43: aa:70:4d:6a:c4:1e:d8:b7:9b:5b:67:fe:f2:9b:0b: 5b:b0:d5:8b:68:3d:32:26:09:b5:d8:1e:95:cb:2a: c8:fb:5d:9b:c9:c8:1e:04:be:6a:7d:d0:97:70:be: fb:d2:9f:47:ee:64:6b:48:78:7b:65:33:dd:3d:50: 7e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8E:F2:FD:7B:AA:41:52:C1:BB:42:46:CD:8E:3F:82:9E:0A:B4:74 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:39:00:27:9f:56:10:24:29:1a:65:f3:b6:82:05:de:0d:12: 1b:88:86:85:d3:ff:3c:13:cc:f3:16:5d:1c:94:1e:9f:66:29: 87:32:7f:b2:b1:fa:1e:90:ef:b4:04:a3:21:ac:e0:72:ef:26: 23:90:7d:d2:50:ff:36:e1:fc:31:34:99:d7:1e:4d:1b:da:b0: 82:f0:12:08:3c:63:1d:44:84:cc:20:78:f0:d8:9f:5a:63:2f: eb:89:25:6e:3f:a3:52:4c:79:8d:fc:da:db:a5:e3:c6:46:2c: 93:32:4a:b7:77:28:52:a9:c3:ff:b4:4a:f6:4d:dc:4e:75:db: 66:71:d5:4e:cf:9c:91:5a:69:50:e7:6a:ae:81:18:2e:80:bd: 68:26:04:5c:eb:6e:5c:1f:b6:92:7f:dd:33:db:ed:82:91:78: 82:77:9f:40:70:05:54:71:7a:77:c7:5a:d4:99:99:a6:c9:d6: ed:3f:c0:4a:21:2b:ba:6a:54:e2:e5:cd:0d:f7:fc:03:af:ef: a2:8c:25:ae:ea:c7:7e:e1:a1:45:73:29:b7:5a:9c:55:3e:80: aa:e4:f6:41:72:e2:db:82:e7:2c:b6:e7:c2:57:44:0b:7b:8c: ab:d1:32:d5:c4:d8:e7:d5:4b:af:9d:92:04:4f:6c:49:9c:65: 5f:a4:05:ae -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWIVrbIIXTPCuHGHB867uhrrlLFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MjQyMTQ5MzRaFw0yNjA1MjUyMzI4MzRaMDMxMTAvBgNV BAMTKDY0OEVGMkZEN0JBQTQxNTJDMUJCNDI0NkNEOEUzRjgyOUUwQUI0NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJiVkn2rGyAlLYWvKj7TR7PTLS WkU7ubP+NMjCX54WOogaWEGULDdpKgOb2FO1p5elBFN/52TEqkfTHXQfgh32ynUE ZD1yxupbFQ4KVsdlM5HBO+12piEAEVvsLFy0F+3ToriWt34fVPwOa0cr+pi6ql3G xbLJ3HH8otJyU1Phf5ARuApRNaSNcFK4D+J2SzVJVIsJtvzlons/KgIHZ1ZGb27L xDMH/wa1+TMFAMElkMEkKos5m5KxQrPUqCLo/jXCQ6pwTWrEHti3m1tn/vKbC1uw 1YtoPTImCbXYHpXLKsj7XZvJyB4Evmp90JdwvvvSn0fuZGtIeHtlM909UH7TAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUZI7y/XuqQVLBu0JGzY4/gp4KtHQwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzkAJ59WECQpGmXztoIF 3g0SG4iGhdP/PBPM8xZdHJQen2YphzJ/srH6HpDvtASjIazgcu8mI5B90lD/NuH8 MTSZ1x5NG9qwgvASCDxjHUSEzCB48NifWmMv64klbj+jUkx5jfza26XjxkYskzJK t3coUqnD/7RK9k3cTnXbZnHVTs+ckVppUOdqroEYLoC9aCYEXOtuXB+2kn/dM9vt gpF4gnefQHAFVHF6d8da1JmZpsnW7T/ASiErumpU4uXNDff8A6/voowlrurHfuGh RXMpt1qcVT6AquT2QXLi24LnLLbnwldEC3uMq9Ey1cTY59VLr52SBE9sSZxlX6QF rg== -----END CERTIFICATE-----Generated at Mon May 25 03:14:01 2026 by rpki-client