$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: m0UD6G936l5vrnu56JrY7I56nMbH8DMPGMxc5SxzXX8= Subject key identifier: F5:D5:C0:35:23:4E:7A:7A:96:62:2C:2C:87:31:E1:46:03:64:76:09 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 31AEE98EABE6460DC998D395E9477D3E7F966D3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04FD Signing time: Wed 10 Jun 2026 14:39:32 +0000 Manifest this update: Wed 10 Jun 2026 14:34:32 +0000 Manifest next update: Thu 11 Jun 2026 17:12:32 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: soZrp4mpG4encihYFTifcwPq8fgDaivYcorvWzaQSRc=) 6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Jun 2026 17:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ae:e9:8e:ab:e6:46:0d:c9:98:d3:95:e9:47:7d:3e:7f:96:6d:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 10 14:34:32 2026 GMT Not After : Jun 11 17:12:32 2026 GMT Subject: CN=F5D5C035234E7A7A96622C2C8731E14603647609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:bf:71:48:64:ff:31:7a:1e:15:5d:a4:60: ea:40:c3:35:fe:a8:6a:8b:ee:aa:27:a6:23:5c:1c: 4e:79:db:d0:2f:bc:76:1e:4d:5e:67:d6:c5:ee:7d: 60:d5:f5:27:0b:e1:e8:c1:0b:42:c9:64:f2:b9:43: 3f:d0:d8:f7:57:57:9c:43:56:0b:cf:32:30:ed:cb: aa:47:f3:8b:d4:ee:a3:22:21:0e:84:2c:3d:40:5f: b6:b6:46:0f:1e:9d:1a:1c:a1:81:23:f4:54:e2:5d: a0:f1:4b:e6:89:dd:6c:59:85:c2:eb:b8:9a:d6:44: db:37:05:28:59:23:15:6e:2a:4b:3f:2a:66:0a:e1: b7:db:4d:e2:ce:89:56:77:05:9f:9b:a3:55:a8:17: bf:42:be:42:48:99:1f:90:52:4d:c0:65:91:aa:5c: 13:67:2e:cc:b8:9e:b8:12:a3:4c:40:f0:87:6f:f1: 45:62:5e:e7:95:de:a3:5d:98:68:a9:c0:2d:d8:90: 99:c2:78:57:a4:a1:f6:f7:55:13:fd:82:14:7c:e3: da:c0:64:59:83:e4:39:2d:b4:d5:6b:04:eb:27:ea: 4f:05:68:5e:9a:8f:a4:da:6f:bc:47:c9:f0:d4:d2: 14:50:41:72:2d:b6:57:ae:d2:c8:0a:5c:72:c5:37: bf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D5:C0:35:23:4E:7A:7A:96:62:2C:2C:87:31:E1:46:03:64:76:09 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ed:7f:95:a3:55:5a:2f:5b:ad:c9:ff:ef:eb:ae:31:c3:c4: 6f:eb:fc:c6:bd:aa:f7:b5:b2:41:f3:11:2d:6d:de:c5:5b:26: 4a:86:92:d6:52:48:c0:67:25:39:33:bb:ea:1c:75:fa:08:ad: e6:6c:35:bf:a0:ac:6f:6d:f6:74:ea:5b:1d:23:de:30:b8:0f: d1:11:e5:f0:b8:06:f8:71:a4:e7:d1:cb:30:78:4f:45:08:5c: b3:ab:2f:ec:6f:4e:bd:d4:c0:28:cd:0a:88:70:c7:05:13:ec: c8:e4:61:bf:a1:21:94:9d:9c:99:d8:ee:ed:1a:fc:59:0e:3d: 9a:fc:1c:03:91:cc:4d:aa:73:21:68:a2:56:bf:f8:9b:af:2b: ca:d5:d2:12:c3:7f:4f:75:d1:6a:20:80:c9:18:41:81:d7:c9: 2b:fc:64:ac:b3:b3:62:3a:d2:64:92:ae:a3:48:ce:74:3c:70: 82:d3:d3:85:46:ef:b9:54:00:02:b9:af:0f:73:ba:92:14:a0: 6d:7b:b1:14:97:b5:03:57:5e:04:3c:3f:d0:27:46:f7:ea:8d: 46:16:2e:a8:4d:52:d8:2f:bb:c3:ec:0a:57:10:46:70:75:aa: ef:ad:0a:a1:3b:69:fa:de:15:fe:db:68:80:8a:ad:d7:16:62: b6:36:59:6f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMa7pjqvmRg3JmNOV6Ud9Pn+WbT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MTAxNDM0MzJaFw0yNjA2MTExNzEyMzJaMDMxMTAvBgNV BAMTKEY1RDVDMDM1MjM0RTdBN0E5NjYyMkMyQzg3MzFFMTQ2MDM2NDc2MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbpL9xSGT/MXoeFV2kYOpAwzX+ qGqL7qonpiNcHE5529AvvHYeTV5n1sXufWDV9ScL4ejBC0LJZPK5Qz/Q2PdXV5xD VgvPMjDty6pH84vU7qMiIQ6ELD1AX7a2Rg8enRocoYEj9FTiXaDxS+aJ3WxZhcLr uJrWRNs3BShZIxVuKks/KmYK4bfbTeLOiVZ3BZ+bo1WoF79CvkJImR+QUk3AZZGq XBNnLsy4nrgSo0xA8Idv8UViXueV3qNdmGipwC3YkJnCeFekofb3VRP9ghR849rA ZFmD5DkttNVrBOsn6k8FaF6aj6Tab7xHyfDU0hRQQXIttleu0sgKXHLFN7+ZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU9dXANSNOenqWYiwshzHhRgNkdgkwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+1/laNVWi9brcn/7+uu McPEb+v8xr2q97WyQfMRLW3exVsmSoaS1lJIwGclOTO76hx1+git5mw1v6Csb232 dOpbHSPeMLgP0RHl8LgG+HGk59HLMHhPRQhcs6sv7G9OvdTAKM0KiHDHBRPsyORh v6EhlJ2cmdju7Rr8WQ49mvwcA5HMTapzIWiiVr/4m68rytXSEsN/T3XRaiCAyRhB gdfJK/xkrLOzYjrSZJKuo0jOdDxwgtPThUbvuVQAArmvD3O6khSgbXuxFJe1A1de BDw/0CdG9+qNRhYuqE1S2C+7w+wKVxBGcHWq760KoTtp+t4V/ttogIqt1xZitjZZ bw== -----END CERTIFICATE-----Generated at Thu Jun 11 03:37:34 2026 by rpki-client