$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 4050taXcLtkzO6LSWTr4zJBBWHk8oLpIoowCYiJoCOc= Subject key identifier: E5:56:3B:DD:56:2A:E0:3B:AF:5B:3D:FF:42:C3:41:32:3E:09:03:7C Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 59268DDCDC3371775FE6E2845BF8115688F81E32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0542 Signing time: Sun 02 Aug 2026 03:04:17 +0000 Manifest this update: Sun 02 Aug 2026 02:59:17 +0000 Manifest next update: Mon 03 Aug 2026 05:26:17 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: qrzeypUTa+1bDwHAOtkBClAhpOUYbCiHfTpZbE129J4=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 02 Aug 2026 20:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:26:8d:dc:dc:33:71:77:5f:e6:e2:84:5b:f8:11:56:88:f8:1e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 2 02:59:17 2026 GMT Not After : Aug 3 05:26:17 2026 GMT Subject: CN=E5563BDD562AE03BAF5B3DFF42C341323E09037C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:eb:72:2a:45:41:ee:7c:5a:c8:b6:32:1c: 24:c2:46:29:53:f6:16:b3:4a:05:0a:7e:cf:8a:49: cc:09:f6:9b:b5:74:98:f3:b2:8a:c0:27:94:09:ef: 26:1f:59:d3:ff:cf:8f:34:5c:59:9d:7f:b2:55:be: 9c:3f:94:61:85:f2:91:ba:8f:80:6b:5b:9f:37:d4: 85:a8:89:97:50:e4:c9:b3:0f:b5:8e:e8:8c:73:93: 92:7d:dc:a1:55:1c:5e:62:08:34:d5:59:fe:a5:92: 8a:2f:55:01:32:50:3f:41:9d:33:0e:f2:b1:ad:06: 3d:08:2e:70:59:39:df:da:ed:37:1e:7b:a3:36:5c: 11:a4:1b:1b:39:46:ea:94:64:44:2e:89:3d:55:5b: a6:d2:69:36:1d:9e:0e:d9:c1:66:d5:d3:34:f0:3e: 87:4c:8a:59:3c:1b:0f:76:e0:11:f1:1a:58:1e:7b: 60:81:a3:7d:3d:3c:81:87:92:2e:6f:86:ca:22:0c: ec:43:b9:bd:57:79:69:b6:8b:c8:e5:81:19:4d:28: 50:49:a7:01:0d:a5:b7:de:99:db:90:c7:2c:57:17: 27:d7:fb:d9:98:a2:f8:76:9e:fb:ff:8a:ae:3d:cd: 58:2c:67:88:06:ce:f4:10:19:0d:68:18:e0:fc:e0: ac:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:56:3B:DD:56:2A:E0:3B:AF:5B:3D:FF:42:C3:41:32:3E:09:03:7C X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e7:8b:e8:55:01:69:b8:50:be:6f:cd:33:74:17:29:62:12: 96:e6:70:2d:c6:7b:cc:43:41:b1:2b:de:8d:3b:13:41:3d:bc: c1:e4:f5:e0:37:70:ac:43:8a:79:71:81:9a:cd:3d:e3:d2:be: 61:75:85:7d:75:65:42:27:b6:ac:49:d1:81:ea:f2:5e:9d:48: af:e3:58:d0:37:bf:83:99:4a:1a:0e:37:3f:95:b7:ec:20:25: d2:00:da:dd:38:9c:05:b3:a5:5b:8e:37:1f:fb:53:51:1a:ac: 41:67:9d:42:55:4c:9b:2a:e8:aa:4a:72:5b:f4:20:90:7f:ec: 6c:96:fb:5c:f2:29:b2:d5:67:1c:9d:1c:e2:a5:bc:7a:7c:43: 38:e9:b6:1b:9b:16:34:42:d8:34:05:f6:d2:e1:92:f7:22:39: 61:60:59:15:4d:b1:37:c5:ea:88:e9:8a:15:a5:9b:0a:9e:37: be:eb:7e:45:c9:88:8b:93:c0:0d:3d:21:e5:bc:dc:d3:e2:58: c9:1e:49:19:5e:ae:b9:38:ec:5a:55:9e:84:fa:9e:d4:b0:d8: b2:49:10:d4:45:b8:9c:3e:fc:f4:48:af:fa:df:d3:41:95:3e: 8f:31:76:db:4e:38:9d:37:bf:29:98:3e:ad:37:ff:26:71:b3: 23:c2:1c:35 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWSaN3NwzcXdf5uKEW/gRVoj4HjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MDIwMjU5MTdaFw0yNjA4MDMwNTI2MTdaMDMxMTAvBgNV BAMTKEU1NTYzQkRENTYyQUUwM0JBRjVCM0RGRjQyQzM0MTMyM0UwOTAzN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGTOtyKkVB7nxayLYyHCTCRilT 9hazSgUKfs+KScwJ9pu1dJjzsorAJ5QJ7yYfWdP/z480XFmdf7JVvpw/lGGF8pG6 j4BrW5831IWoiZdQ5MmzD7WO6Ixzk5J93KFVHF5iCDTVWf6lkoovVQEyUD9BnTMO 8rGtBj0ILnBZOd/a7Tcee6M2XBGkGxs5RuqUZEQuiT1VW6bSaTYdng7ZwWbV0zTw PodMilk8Gw924BHxGlgee2CBo309PIGHki5vhsoiDOxDub1XeWm2i8jlgRlNKFBJ pwENpbfemduQxyxXFyfX+9mYovh2nvv/iq49zVgsZ4gGzvQQGQ1oGOD84KwnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5VY73VYq4DuvWz3/QsNBMj4JA3wwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOeL6FUBabhQvm/NM3QX KWISluZwLcZ7zENBsSvejTsTQT28weT14DdwrEOKeXGBms0949K+YXWFfXVlQie2 rEnRgeryXp1Ir+NY0De/g5lKGg43P5W37CAl0gDa3TicBbOlW443H/tTURqsQWed QlVMmyroqkpyW/QgkH/sbJb7XPIpstVnHJ0c4qW8enxDOOm2G5sWNELYNAX20uGS 9yI5YWBZFU2xN8XqiOmKFaWbCp43vut+RcmIi5PADT0h5bzc0+JYyR5JGV6uuTjs WlWehPqe1LDYskkQ1EW4nD789Eiv+t/TQZU+jzF22044nTe/KZg+rTf/JnGzI8Ic NQ== -----END CERTIFICATE-----Generated at Sun Aug 2 05:32:56 2026 by rpki-client