$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: f8z+Mk9v9hnbsyKGzHUrEWQFi3n0rCfW45GzRGGnIqc= Subject key identifier: C4:1B:B1:C8:1A:68:83:3A:E4:6B:FC:C3:68:FE:8F:2C:7F:7C:F1:C0 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 1D64B1A70A51E58A10BC5EE885AF625C7EE81CA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04AE Signing time: Sun 12 Apr 2026 04:54:56 +0000 Manifest this update: Sun 12 Apr 2026 04:49:56 +0000 Manifest next update: Mon 13 Apr 2026 07:54:56 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: /aeYS/+PW3AQvNe+XSiwY1H55ijLvCJY8H7A5unLpIo=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 Apr 2026 05:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:64:b1:a7:0a:51:e5:8a:10:bc:5e:e8:85:af:62:5c:7e:e8:1c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 12 04:49:56 2026 GMT Not After : Apr 13 07:54:56 2026 GMT Subject: CN=C41BB1C81A68833AE46BFCC368FE8F2C7F7CF1C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:63:98:d8:55:74:47:2d:c1:b6:9c:76:b7:e9: 21:75:bb:33:90:1b:f7:31:d8:f0:c5:0e:7d:0f:9b: c6:c4:75:79:ca:31:19:93:4e:30:83:9d:c9:7c:de: 90:b2:90:b5:f1:4f:03:23:de:68:e8:17:18:6f:80: ad:07:ec:3c:fe:30:27:0b:fa:58:98:34:cf:7f:44: f3:57:bc:4d:e2:18:e9:a7:e7:81:12:ff:fd:f9:52: 05:9f:55:74:79:53:79:00:b3:ee:1c:92:8f:64:f5: b0:0b:85:cc:97:c9:60:d2:a1:39:6b:e0:b4:c6:9f: a6:25:cf:d7:9f:9b:c3:8a:43:1d:bd:a7:69:97:5a: f3:94:ca:a5:c3:d5:1a:04:62:4e:8c:80:4c:fb:93: c9:63:a9:f8:80:d3:08:0d:4c:c9:62:84:30:00:ed: 71:ee:db:f1:91:c4:69:e3:13:b6:94:08:08:5c:b9: 14:21:e3:ca:dd:e4:71:57:6a:dd:63:90:5b:cb:77: 96:54:94:62:20:8e:61:92:91:9d:20:1b:63:97:fc: 0e:35:7f:2c:c2:31:3f:fc:04:39:2f:29:8f:3e:59: e1:19:fe:ff:3c:f9:f9:99:b6:08:3c:9f:c1:37:79: 57:4d:c1:b2:93:2d:b3:6e:78:6d:a2:99:9c:c4:8f: 4c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1B:B1:C8:1A:68:83:3A:E4:6B:FC:C3:68:FE:8F:2C:7F:7C:F1:C0 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:37:b3:19:98:cf:41:d5:1a:fd:d6:51:e0:74:39:74:71:fd: 7c:fd:a6:e8:e4:b8:44:28:be:f2:1b:41:4b:af:f9:d2:58:66: 0f:45:9d:56:9d:1f:8a:c7:47:bb:42:f9:d7:82:e3:be:55:b5: b8:3e:e2:ad:2b:f2:ad:c3:50:ba:f4:79:7b:6e:e3:b8:3b:9b: cd:f4:c4:a3:82:1b:82:bb:0a:a9:58:ce:d7:e3:ec:eb:3f:8d: b3:76:62:e2:b4:d5:cd:92:78:59:7e:8b:3e:2b:20:1c:60:e4: 48:fa:eb:a3:b4:03:82:79:e1:e0:6e:3e:d9:f1:8f:09:58:ed: 4c:8c:78:ec:cc:68:e0:da:fa:ca:7f:80:fe:2b:c3:52:22:0e: b6:ec:08:78:c0:da:e2:f6:4b:8c:ae:05:72:1e:f0:2c:19:fe: 61:44:fe:97:be:0e:78:d4:40:ef:76:df:ea:b9:48:7c:7a:48: d3:1b:a4:95:8d:2f:fe:15:82:50:ef:2c:4a:ff:dd:92:20:2d: ff:e8:49:f1:49:4c:6a:e9:50:43:c1:21:7c:31:3c:c5:fb:cf: bb:56:cf:1e:48:b1:f0:e1:c7:9e:87:de:8c:b5:91:5a:57:38: 34:c3:ee:13:61:21:b9:1e:75:6e:1e:06:85:ab:d1:9a:35:d9: 04:45:2b:ab -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHWSxpwpR5YoQvF7oha9iXH7oHKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA0MTIwNDQ5NTZaFw0yNjA0MTMwNzU0NTZaMDMxMTAvBgNV BAMTKEM0MUJCMUM4MUE2ODgzM0FFNDZCRkNDMzY4RkU4RjJDN0Y3Q0YxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Y5jYVXRHLcG2nHa36SF1uzOQ G/cx2PDFDn0Pm8bEdXnKMRmTTjCDncl83pCykLXxTwMj3mjoFxhvgK0H7Dz+MCcL +liYNM9/RPNXvE3iGOmn54ES//35UgWfVXR5U3kAs+4cko9k9bALhcyXyWDSoTlr 4LTGn6Ylz9efm8OKQx29p2mXWvOUyqXD1RoEYk6MgEz7k8ljqfiA0wgNTMlihDAA 7XHu2/GRxGnjE7aUCAhcuRQh48rd5HFXat1jkFvLd5ZUlGIgjmGSkZ0gG2OX/A41 fyzCMT/8BDkvKY8+WeEZ/v88+fmZtgg8n8E3eVdNwbKTLbNueG2imZzEj0z3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUxBuxyBpogzrka/zDaP6PLH988cAwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjezGZjPQdUa/dZR4HQ5 dHH9fP2m6OS4RCi+8htBS6/50lhmD0WdVp0fisdHu0L514LjvlW1uD7irSvyrcNQ uvR5e27juDubzfTEo4IbgrsKqVjO1+Ps6z+Ns3Zi4rTVzZJ4WX6LPisgHGDkSPrr o7QDgnnh4G4+2fGPCVjtTIx47Mxo4Nr6yn+A/ivDUiIOtuwIeMDa4vZLjK4Fch7w LBn+YUT+l74OeNRA73bf6rlIfHpI0xuklY0v/hWCUO8sSv/dkiAt/+hJ8UlMaulQ Q8EhfDE8xfvPu1bPHkix8OHHnofejLWRWlc4NMPuE2EhuR51bh4GhavRmjXZBEUr qw== -----END CERTIFICATE-----Generated at Sun Apr 12 13:22:26 2026 by rpki-client