$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: r4JFwzdRfcIddDKdcxXBDjDzwEy4lZuGsxEsI83GaII= Subject key identifier: 0B:8B:D9:C4:4F:1A:CE:22:8C:AA:62:0D:6B:3C:EB:5F:44:92:6C:C7 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 4F622F8EA23ACE3B192DB4A2979015A343F6E420 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0566 Signing time: Sat 29 Aug 2026 00:33:06 +0000 Manifest this update: Sat 29 Aug 2026 00:28:06 +0000 Manifest next update: Sun 30 Aug 2026 03:45:06 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: M1Mm+tIbsIf96x8Ct7hBzjRT9m7SmcOn1zbA3vyxYBA=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 30 Aug 2026 03:45:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:62:2f:8e:a2:3a:ce:3b:19:2d:b4:a2:97:90:15:a3:43:f6:e4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 29 00:28:06 2026 GMT Not After : Aug 30 03:45:06 2026 GMT Subject: CN=0B8BD9C44F1ACE228CAA620D6B3CEB5F44926CC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ea:d1:aa:32:c5:10:38:03:83:4f:b4:cc:0b: e8:32:b4:0d:88:88:82:3c:19:d0:a2:6c:3e:98:04: 56:54:3b:93:ed:d9:7d:a2:86:8f:d5:90:df:e1:46: eb:1a:78:4e:8e:98:e0:1a:e1:ed:d0:ff:50:66:35: d0:ed:cc:ac:de:ff:71:18:72:dd:40:ca:23:b1:9b: a7:6c:a3:c0:60:da:56:22:7c:80:d5:40:d4:1c:ec: 59:75:39:56:4b:47:51:c7:68:95:e9:6b:ad:1d:15: dc:af:07:54:24:81:cf:ee:99:9e:8f:d4:6f:e3:e0: 3f:4a:e3:21:eb:c8:91:67:aa:3e:e2:98:c2:4b:34: 7c:21:70:44:ad:1c:9a:72:51:a7:a4:b5:5f:26:4b: 95:c7:0b:41:57:91:5f:ac:cd:1b:24:58:0b:5f:dd: d6:5e:33:fc:5e:44:87:32:69:50:f9:fc:db:55:69: f1:c6:e2:47:8e:9e:bd:20:39:8f:c5:8b:26:ca:6b: 57:08:ca:24:d2:cd:84:44:a0:eb:c8:af:42:5f:2f: d0:e5:f8:c9:36:f4:dd:cd:5a:7d:30:67:79:7e:e5: d7:d8:50:4b:45:bc:60:20:f5:02:4f:b6:15:f6:75: 93:df:05:bb:5f:ab:3b:01:60:89:53:ea:d0:96:12: 72:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8B:D9:C4:4F:1A:CE:22:8C:AA:62:0D:6B:3C:EB:5F:44:92:6C:C7 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:55:90:71:9b:39:05:28:f8:43:54:42:fc:a5:3e:46:bd:17: 52:10:89:2f:f1:9c:81:0c:47:7f:61:b6:2d:34:35:e2:bc:63: e1:3f:7b:c6:a7:da:8f:58:da:88:1d:ec:28:35:e1:43:9a:47: 3c:4a:ff:aa:94:46:25:d0:12:73:a3:9f:68:f3:bb:ee:90:f4: 3b:77:32:2f:12:db:7d:ee:35:68:21:35:00:90:88:8c:26:22: f1:3a:e7:df:f8:e5:9b:11:c5:4b:1b:ef:e9:11:2f:1b:66:26: af:47:6c:41:14:61:4c:4d:fa:55:00:c7:69:0a:e2:fe:bf:4c: f1:32:1f:ae:b7:c6:dc:25:1e:f4:7e:54:40:7a:77:48:90:18: ba:6a:dd:98:2d:c3:78:92:81:24:c5:3f:15:5e:45:e1:f8:ac: b9:8f:ba:4b:91:30:fb:03:87:a9:f9:cb:c4:5d:ec:9a:d8:03: 13:fd:34:d0:5e:98:2d:42:92:9d:6b:70:ff:da:fd:b4:4b:07: 87:23:3c:b4:d5:77:1e:94:02:4c:76:fe:69:24:00:6f:17:7e: fc:2a:d8:53:d3:ca:ae:6e:ae:58:41:d5:aa:cc:7b:3f:f7:f9: 31:8f:95:13:1f:61:d4:68:b2:41:89:df:03:d2:87:f6:0c:41: 11:47:5a:01 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUT2IvjqI6zjsZLbSil5AVo0P25CAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MjkwMDI4MDZaFw0yNjA4MzAwMzQ1MDZaMDMxMTAvBgNV BAMTKDBCOEJEOUM0NEYxQUNFMjI4Q0FBNjIwRDZCM0NFQjVGNDQ5MjZDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs6tGqMsUQOAODT7TMC+gytA2I iII8GdCibD6YBFZUO5Pt2X2iho/VkN/hRusaeE6OmOAa4e3Q/1BmNdDtzKze/3EY ct1AyiOxm6dso8Bg2lYifIDVQNQc7Fl1OVZLR1HHaJXpa60dFdyvB1Qkgc/umZ6P 1G/j4D9K4yHryJFnqj7imMJLNHwhcEStHJpyUaektV8mS5XHC0FXkV+szRskWAtf 3dZeM/xeRIcyaVD5/NtVafHG4keOnr0gOY/FiybKa1cIyiTSzYREoOvIr0JfL9Dl +Mk29N3NWn0wZ3l+5dfYUEtFvGAg9QJPthX2dZPfBbtfqzsBYIlT6tCWEnJhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUC4vZxE8aziKMqmINazzrX0SSbMcwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1WQcZs5BSj4Q1RC/KU+ Rr0XUhCJL/GcgQxHf2G2LTQ14rxj4T97xqfaj1jaiB3sKDXhQ5pHPEr/qpRGJdAS c6OfaPO77pD0O3cyLxLbfe41aCE1AJCIjCYi8Trn3/jlmxHFSxvv6REvG2Ymr0ds QRRhTE36VQDHaQri/r9M8TIfrrfG3CUe9H5UQHp3SJAYumrdmC3DeJKBJMU/FV5F 4fisuY+6S5Ew+wOHqfnLxF3smtgDE/000F6YLUKSnWtw/9r9tEsHhyM8tNV3HpQC THb+aSQAbxd+/CrYU9PKrm6uWEHVqsx7P/f5MY+VEx9h1GiyQYnfA9KH9gxBEUda AQ== -----END CERTIFICATE-----Generated at Sat Aug 29 15:57:24 2026 by rpki-client