$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 95WgRrtKBXWusT9daZGZl5tXUiC/2QAifSKbf2AXkUo= Subject key identifier: CC:6F:DA:B6:9C:E8:CB:F5:C2:6A:DE:79:FB:0F:E5:0D:84:15:5A:E3 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 33B89CC374D87FFA49D0CF918BFF475A4C62F9A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 052C Signing time: Thu 16 Jul 2026 08:38:56 +0000 Manifest this update: Thu 16 Jul 2026 08:33:56 +0000 Manifest next update: Fri 17 Jul 2026 12:33:56 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 1VRbBKrLHz/wUC5C3UlkyLWfwLpI3b+095MJLmn6QUg=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Jul 2026 08:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b8:9c:c3:74:d8:7f:fa:49:d0:cf:91:8b:ff:47:5a:4c:62:f9:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 16 08:33:56 2026 GMT Not After : Jul 17 12:33:56 2026 GMT Subject: CN=CC6FDAB69CE8CBF5C26ADE79FB0FE50D84155AE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:46:fd:c2:6d:53:71:9c:ed:60:f1:26:70:97: 14:a8:50:c1:1e:0d:b2:ce:b3:e7:8a:2d:ba:02:aa: 06:51:e1:ce:37:bd:2d:0e:41:01:a5:24:8d:19:d5: b7:77:70:56:86:87:c2:85:bf:59:74:be:82:4c:c5: 99:c2:58:98:0b:73:ac:df:eb:62:49:a5:10:ce:a5: 51:6b:9a:b6:f3:0f:df:43:59:ff:f7:af:e7:71:a6: 7b:4b:6e:a9:fe:ac:48:d2:89:f4:25:a7:5a:91:30: 64:d9:f4:c2:05:02:40:6d:30:bd:92:5f:c9:5c:bd: ab:25:e7:1f:68:26:93:59:72:7a:65:3b:d4:8d:78: b6:2d:ea:ee:47:fa:e2:79:25:c6:6e:fd:9f:73:12: c1:1e:e6:f8:ba:f2:69:61:7d:88:d2:c6:63:a0:f5: 37:9b:e9:36:36:f5:9e:c4:7d:a7:6a:6b:e0:ba:30: d7:9a:59:29:7b:ae:02:67:2e:6b:14:fa:b5:b0:5f: ff:63:4f:f1:ae:67:d2:21:2a:da:de:9f:f4:1f:20: 4d:e8:db:f0:96:ee:71:e4:99:f1:99:5c:37:e8:72: 05:50:0f:71:d2:d9:80:1d:7b:98:0f:20:9a:09:05: 89:66:8a:45:99:05:64:44:f2:f9:46:3c:5b:be:cc: d7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6F:DA:B6:9C:E8:CB:F5:C2:6A:DE:79:FB:0F:E5:0D:84:15:5A:E3 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:41:b8:29:bd:77:65:27:20:73:f6:32:9e:a7:2c:dc:6b:20: 3f:95:a1:61:d2:63:b7:64:e8:86:2b:b8:c2:12:a4:70:f6:c8: 83:2a:3c:ce:7c:81:b0:83:a6:82:97:fa:40:87:9e:c6:8d:2c: cb:8f:7a:ed:7c:09:98:5e:60:0f:81:96:e2:ac:71:fc:05:4d: 8f:8b:15:ad:5e:93:78:65:32:4b:4b:1a:7e:6b:03:a5:bc:54: 38:e6:1a:8e:9d:85:3b:2c:41:80:ae:e0:c9:b6:ba:9a:27:22: 51:79:73:0f:58:f6:f7:59:d1:1f:6d:0c:92:9c:98:b3:70:1d: 01:e2:9f:de:5c:a2:8a:55:1a:59:55:cc:f4:54:7e:bb:63:d9: 99:c1:54:8b:0e:6b:63:6c:4e:54:c2:ad:08:32:66:a6:5c:30: e7:d9:4d:84:9d:90:c2:09:d2:ea:18:bf:35:f2:f1:01:51:6d: ea:9c:14:a3:60:09:96:5e:c1:0d:db:31:ef:b6:f4:2c:d5:13: ce:e6:1e:e8:08:ec:a1:11:b3:89:2d:e3:49:7b:9c:e6:d3:72: 0a:10:fe:53:4e:79:2b:b9:02:05:f4:c0:57:26:b8:26:87:84: 8c:da:b5:b0:f3:46:7b:8b:57:55:66:79:49:66:e6:80:8f:05: 8d:ac:ea:64 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUM7icw3TYf/pJ0M+Ri/9HWkxi+acwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MTYwODMzNTZaFw0yNjA3MTcxMjMzNTZaMDMxMTAvBgNV BAMTKENDNkZEQUI2OUNFOENCRjVDMjZBREU3OUZCMEZFNTBEODQxNTVBRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuRv3CbVNxnO1g8SZwlxSoUMEe DbLOs+eKLboCqgZR4c43vS0OQQGlJI0Z1bd3cFaGh8KFv1l0voJMxZnCWJgLc6zf 62JJpRDOpVFrmrbzD99DWf/3r+dxpntLbqn+rEjSifQlp1qRMGTZ9MIFAkBtML2S X8lcvasl5x9oJpNZcnplO9SNeLYt6u5H+uJ5JcZu/Z9zEsEe5vi68mlhfYjSxmOg 9Teb6TY29Z7Efadqa+C6MNeaWSl7rgJnLmsU+rWwX/9jT/GuZ9IhKtren/QfIE3o 2/CW7nHkmfGZXDfocgVQD3HS2YAde5gPIJoJBYlmikWZBWRE8vlGPFu+zNc9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzG/atpzoy/XCat55+w/lDYQVWuMwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUG4Kb13ZScgc/Yynqcs 3GsgP5WhYdJjt2Tohiu4whKkcPbIgyo8znyBsIOmgpf6QIeexo0sy4967XwJmF5g D4GW4qxx/AVNj4sVrV6TeGUyS0safmsDpbxUOOYajp2FOyxBgK7gyba6miciUXlz D1j291nRH20MkpyYs3AdAeKf3lyiilUaWVXM9FR+u2PZmcFUiw5rY2xOVMKtCDJm plww59lNhJ2QwgnS6hi/NfLxAVFt6pwUo2AJll7BDdsx77b0LNUTzuYe6AjsoRGz iS3jSXuc5tNyChD+U055K7kCBfTAVya4JoeEjNq1sPNGe4tXVWZ5SWbmgI8Fjazq ZA== -----END CERTIFICATE-----Generated at Thu Jul 16 10:37:45 2026 by rpki-client