$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: b1chqqYZh+55lVVg6i0MYlNaYUJlwM1GQcS6GqGrca4= Subject key identifier: 67:2F:01:B2:02:11:87:73:5E:51:0E:74:80:B9:0F:8F:AB:40:D3:70 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 371CC53D8B236A670BC3C65E12B1B365399FFE2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0510 Signing time: Thu 25 Jun 2026 08:43:24 +0000 Manifest this update: Thu 25 Jun 2026 08:38:24 +0000 Manifest next update: Fri 26 Jun 2026 11:29:24 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 1B4Wby1ZRq/Kq5xSxFUf0c05PpRrqNK8QNhF+aGBDzw=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Jun 2026 08:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:1c:c5:3d:8b:23:6a:67:0b:c3:c6:5e:12:b1:b3:65:39:9f:fe:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 25 08:38:24 2026 GMT Not After : Jun 26 11:29:24 2026 GMT Subject: CN=672F01B2021187735E510E7480B90F8FAB40D370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f1:19:69:a4:de:75:76:24:57:2e:3b:d4:66: e9:e7:87:c1:8d:f0:4b:ff:84:f8:5d:61:fe:6b:77: 73:05:31:55:74:09:a5:8c:ff:96:eb:f9:c8:57:09: 15:96:7b:ef:32:86:6e:eb:b0:85:fc:f5:2f:29:bc: 7e:b4:0f:5d:ef:6b:ec:b6:9f:d3:31:ec:ca:83:67: 9c:df:de:a7:b8:29:1b:14:6a:8b:66:7d:fb:d9:21: 71:0c:32:17:ed:41:c5:65:e6:72:bb:47:da:76:f4: 50:ce:56:ba:fa:c3:43:d2:91:af:41:40:84:b9:02: 33:5f:4b:9e:7f:29:c9:a9:cb:82:6a:98:91:e6:1f: b9:95:9e:1e:1e:5b:33:25:ad:d1:2f:32:01:5b:cf: 08:92:1c:e0:ae:04:7d:26:e0:5a:bc:c5:2c:d5:6b: de:22:80:54:d3:29:ab:38:44:0e:e0:1e:60:49:77: 94:b6:f2:a5:9b:71:b2:74:4a:88:fd:82:45:5f:d1: 4b:88:30:b3:8c:ff:0c:83:31:7e:e3:d1:39:4f:b5: c4:75:2f:d8:28:fb:3a:48:8d:82:a6:82:b8:50:49: c6:c3:3c:5d:fc:20:25:d6:df:22:57:a7:29:67:56: f6:3a:7a:ca:3a:02:9e:f4:ca:7c:71:21:3a:61:03: 13:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2F:01:B2:02:11:87:73:5E:51:0E:74:80:B9:0F:8F:AB:40:D3:70 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:bf:e1:2c:e2:91:05:a1:1f:ae:a6:be:09:e1:99:fa:9b:dd: d4:ae:b4:d0:01:3c:a9:7d:af:0f:7c:91:1b:e3:58:86:82:63: 8c:48:0c:43:d5:98:0a:fb:c0:0d:45:70:44:91:87:24:67:33: 71:08:18:e0:c4:00:90:e3:29:ed:94:62:78:9b:25:8e:94:ef: 99:bc:cd:f3:38:74:20:3f:b3:df:87:48:9b:8f:85:b9:50:66: 2a:a0:87:a9:f9:e0:4c:4f:1f:88:74:ee:4a:b1:c3:2a:59:2a: 57:e1:b3:66:d7:98:52:d9:3e:6f:0f:e3:33:c5:a7:9c:b9:b0: 11:98:cf:62:77:6a:68:ac:99:57:0d:16:45:d7:13:26:2d:3e: b8:f4:c7:20:db:a8:0e:e9:98:4c:2e:04:35:cd:36:a5:1c:03: 2b:c4:86:2e:b8:6f:31:2e:bb:08:47:27:96:f6:ab:b4:4b:d4: bd:9c:6e:9c:8d:a0:2c:ac:f7:79:c8:d8:07:04:31:47:db:74: 40:55:cc:2e:7d:ee:11:27:3c:1c:ce:fc:14:d9:bd:33:83:31: 6c:69:62:d4:eb:f7:f0:3b:61:f3:c2:1f:08:b1:49:3c:21:07: 11:e9:3d:3b:e4:ba:22:f0:cc:0e:89:3e:aa:47:df:12:b6:02: ba:8b:eb:6f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNxzFPYsjamcLw8ZeErGzZTmf/iswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MjUwODM4MjRaFw0yNjA2MjYxMTI5MjRaMDMxMTAvBgNV BAMTKDY3MkYwMUIyMDIxMTg3NzM1RTUxMEU3NDgwQjkwRjhGQUI0MEQzNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy8RlppN51diRXLjvUZunnh8GN 8Ev/hPhdYf5rd3MFMVV0CaWM/5br+chXCRWWe+8yhm7rsIX89S8pvH60D13va+y2 n9Mx7MqDZ5zf3qe4KRsUaotmffvZIXEMMhftQcVl5nK7R9p29FDOVrr6w0PSka9B QIS5AjNfS55/Kcmpy4JqmJHmH7mVnh4eWzMlrdEvMgFbzwiSHOCuBH0m4Fq8xSzV a94igFTTKas4RA7gHmBJd5S28qWbcbJ0Soj9gkVf0UuIMLOM/wyDMX7j0TlPtcR1 L9go+zpIjYKmgrhQScbDPF38ICXW3yJXpylnVvY6eso6Ap70ynxxITphAxMXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUZy8BsgIRh3NeUQ50gLkPj6tA03AwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7/hLOKRBaEfrqa+CeGZ +pvd1K600AE8qX2vD3yRG+NYhoJjjEgMQ9WYCvvADUVwRJGHJGczcQgY4MQAkOMp 7ZRieJsljpTvmbzN8zh0ID+z34dIm4+FuVBmKqCHqfngTE8fiHTuSrHDKlkqV+Gz ZteYUtk+bw/jM8WnnLmwEZjPYndqaKyZVw0WRdcTJi0+uPTHINuoDumYTC4ENc02 pRwDK8SGLrhvMS67CEcnlvartEvUvZxunI2gLKz3ecjYBwQxR9t0QFXMLn3uESc8 HM78FNm9M4MxbGli1Ov38Dth88IfCLFJPCEHEek9O+S6IvDMDok+qkffErYCuovr bw== -----END CERTIFICATE-----Generated at Thu Jun 25 14:17:37 2026 by rpki-client