$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: eY71gQnFWZJK4nxuLLdT7EvzKSnuo8XK4dEPmxPnaXM= Subject key identifier: 38:94:32:38:F9:53:25:C0:76:C9:C5:C9:41:49:37:4B:94:94:1F:88 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 0E881DACE56D51423D996687272DB6DC140722F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0474 Signing time: Fri 27 Feb 2026 18:31:58 +0000 Manifest this update: Fri 27 Feb 2026 18:26:58 +0000 Manifest next update: Sat 28 Feb 2026 18:46:58 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: JIUakUsOlbIgJG2IMWcusGhDBgT324P5UgEzSahkVLk=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Feb 2026 18:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:88:1d:ac:e5:6d:51:42:3d:99:66:87:27:2d:b6:dc:14:07:22:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Feb 27 18:26:58 2026 GMT Not After : Feb 28 18:46:58 2026 GMT Subject: CN=38943238F95325C076C9C5C94149374B94941F88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:62:8d:9e:82:eb:1d:5f:cb:e5:9c:23:18:1a: 2b:e3:54:fb:01:1e:ac:45:1d:0b:c1:be:3f:d9:9c: 6e:15:65:fc:a4:cc:e1:64:9c:7f:fa:9a:10:bd:dc: 98:6a:6b:77:68:b0:b9:a5:91:46:ee:12:b5:5e:db: e2:5d:fa:51:dd:c8:95:8d:36:80:f9:6f:b1:99:a7: 00:18:2c:b2:6e:30:2c:89:74:db:06:36:27:6e:3e: be:a8:c3:7f:51:be:aa:b3:62:58:c4:92:c8:21:66: 8a:fc:af:2b:a8:b5:e6:ad:d9:26:96:00:ea:6f:08: ac:49:6e:87:cb:85:36:af:3f:a9:f2:05:58:ee:d2: 40:25:cd:07:94:92:44:dd:e5:17:9e:4c:b4:62:c0: 13:39:12:39:b1:23:8d:9e:11:b8:ad:9b:b8:9b:eb: c0:10:72:fe:ba:25:d3:e7:6f:7d:d8:c7:a2:4c:da: fd:82:91:31:75:49:93:cb:70:fe:76:39:9a:76:0c: 91:71:7d:af:69:ef:50:e6:3b:37:38:ab:17:03:5b: 12:5a:9a:e2:c2:51:55:1d:26:92:b7:37:b4:84:80: f2:f9:7d:7c:17:2f:18:c7:65:8d:f1:77:4f:d9:84: 7b:e4:8f:7e:a6:cd:79:f9:05:ee:2b:d4:88:28:45: ee:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:94:32:38:F9:53:25:C0:76:C9:C5:C9:41:49:37:4B:94:94:1F:88 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:36:f6:97:3b:71:e6:59:3c:f4:8c:8b:5d:8a:74:24:8d:cc: 15:86:54:69:39:1d:8d:e7:7d:20:4c:8d:8b:2e:c7:1f:67:19: 12:cf:40:d7:fe:01:e2:90:f3:a1:d4:4f:3b:8e:bf:f3:09:5e: 61:13:d0:30:97:b2:83:8f:20:29:55:52:6c:79:5a:ab:61:6b: d7:43:40:32:08:01:b6:82:78:2f:fe:16:94:a7:63:ed:eb:5c: f8:05:2b:15:b0:a6:87:42:ac:aa:47:38:c9:23:ea:4e:ae:50: d1:4d:21:a1:29:68:d7:b8:a0:db:e9:6d:17:a8:f4:b5:f4:87: d5:85:0b:ca:8f:9e:8b:e6:4b:56:91:fa:ed:0b:00:cc:cf:93: 64:53:a3:98:31:bf:08:81:6f:5e:f6:54:fd:4b:1b:d4:96:94: a6:9a:fc:91:a7:21:b1:b9:78:52:cd:de:07:aa:23:f5:8b:09: 4e:55:3d:fa:74:8c:ac:44:0b:03:05:b1:45:38:57:22:26:0f: 04:ce:c2:58:8b:c7:70:83:60:51:6c:15:02:f9:9b:2b:e3:d4: 7d:4e:8f:f0:29:30:3d:61:34:ff:fb:56:58:bd:f5:8e:fe:73: 12:ab:c0:1e:d7:3f:88:34:50:4b:e0:55:68:90:4f:b2:5f:7d: 88:6c:68:a0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDogdrOVtUUI9mWaHJy223BQHIvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAyMjcxODI2NThaFw0yNjAyMjgxODQ2NThaMDMxMTAvBgNV BAMTKDM4OTQzMjM4Rjk1MzI1QzA3NkM5QzVDOTQxNDkzNzRCOTQ5NDFGODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLYo2egusdX8vlnCMYGivjVPsB HqxFHQvBvj/ZnG4VZfykzOFknH/6mhC93Jhqa3dosLmlkUbuErVe2+Jd+lHdyJWN NoD5b7GZpwAYLLJuMCyJdNsGNiduPr6ow39RvqqzYljEksghZor8ryuoteat2SaW AOpvCKxJbofLhTavP6nyBVju0kAlzQeUkkTd5ReeTLRiwBM5EjmxI42eEbitm7ib 68AQcv66JdPnb33Yx6JM2v2CkTF1SZPLcP52OZp2DJFxfa9p71DmOzc4qxcDWxJa muLCUVUdJpK3N7SEgPL5fXwXLxjHZY3xd0/ZhHvkj36mzXn5Be4r1IgoRe4NAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOJQyOPlTJcB2ycXJQUk3S5SUH4gwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTb2lztx5lk89IyLXYp0 JI3MFYZUaTkdjed9IEyNiy7HH2cZEs9A1/4B4pDzodRPO46/8wleYRPQMJeyg48g KVVSbHlaq2Fr10NAMggBtoJ4L/4WlKdj7etc+AUrFbCmh0Ksqkc4ySPqTq5Q0U0h oSlo17ig2+ltF6j0tfSH1YULyo+ei+ZLVpH67QsAzM+TZFOjmDG/CIFvXvZU/Usb 1JaUppr8kachsbl4Us3eB6oj9YsJTlU9+nSMrEQLAwWxRThXIiYPBM7CWIvHcINg UWwVAvmbK+PUfU6P8CkwPWE0//tWWL31jv5zEqvAHtc/iDRQS+BVaJBPsl99iGxo oA== -----END CERTIFICATE-----Generated at Sat Feb 28 11:44:06 2026 by rpki-client