$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: JPjrc6aYOg6/Lh1JhKJw9Ki1haSrkbB66s06t4HRMeo= Subject key identifier: 57:EF:D8:B0:9E:66:97:BF:57:57:64:8C:C8:C6:AA:3A:48:2E:E9:52 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 6AD1F27E97D810124488F864072770846FB952F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0553 Signing time: Fri 14 Aug 2026 14:19:00 +0000 Manifest this update: Fri 14 Aug 2026 14:14:00 +0000 Manifest next update: Sat 15 Aug 2026 17:40:00 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: nGMwQ8h0+ufY8CQoRlCqJV94iukj8ErmLr6WNAudyuc=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d1:f2:7e:97:d8:10:12:44:88:f8:64:07:27:70:84:6f:b9:52:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 14 14:14:00 2026 GMT Not After : Aug 15 17:40:00 2026 GMT Subject: CN=57EFD8B09E6697BF5757648CC8C6AA3A482EE952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:e4:6c:29:ad:e3:14:35:26:0c:47:87:36: c7:85:80:1f:76:bf:0b:4c:82:12:68:75:c5:72:53: 46:c7:a0:67:fe:5b:57:14:31:87:6a:6e:43:ab:5a: fc:45:72:42:e0:34:d1:c9:2a:77:6a:16:c0:a4:be: 1c:00:15:9e:9c:5a:5a:88:64:bf:56:80:3f:4a:57: 65:f1:aa:83:53:93:cf:e6:0a:57:b9:99:1e:f1:fc: eb:40:29:bf:f9:41:17:f6:cd:d4:cf:85:e0:f4:60: 0d:6f:1e:9e:2d:00:71:61:f6:52:40:85:4d:41:6a: 96:8d:d1:39:60:bf:03:ca:2c:c9:d7:7c:6c:43:50: 3f:ca:ae:7d:1c:39:64:36:d8:82:41:3a:c3:88:43: 01:2d:e7:18:b7:91:00:bd:61:e7:87:c3:cc:99:14: c7:82:30:ab:50:83:44:52:00:27:f0:fa:0d:6b:dc: 47:4f:ca:26:08:43:38:6f:91:fc:88:af:31:75:62: af:c1:3b:c9:8c:94:45:60:31:0b:2b:f0:29:48:1a: 05:aa:01:87:5a:c7:6e:38:0c:1e:61:5f:9c:cf:e1: c4:a0:f7:30:b8:2c:22:83:8e:a9:a1:91:1c:ca:7a: 73:2a:90:59:20:50:db:7d:85:38:f7:a1:82:99:05: 2c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EF:D8:B0:9E:66:97:BF:57:57:64:8C:C8:C6:AA:3A:48:2E:E9:52 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:c8:d3:cc:df:2f:00:7e:df:ba:69:42:0d:9d:e9:a5:0e:a2: 22:90:51:bd:b0:1d:72:b3:48:40:8a:5f:ce:25:ad:f5:19:27: fa:e4:e0:e9:99:02:f6:26:b2:38:40:78:d9:ec:64:db:fc:8a: 6c:2f:f9:61:ce:13:e8:6b:1e:a3:25:25:d8:d9:95:0d:b1:5f: d2:0c:4f:bd:e0:34:82:e3:2e:c4:98:3d:8a:44:03:a5:ea:6e: 6b:7c:8d:54:95:25:0a:3d:a1:06:f9:24:57:a7:8d:95:f1:7c: 43:19:17:d8:46:a7:9f:20:1f:8b:07:b8:f3:4e:f3:14:ee:0c: 35:a8:a9:92:e5:94:c2:79:ba:d6:03:bd:91:08:94:1c:8f:7b: 6a:db:83:7c:ba:10:1e:1c:ac:92:ea:a4:26:c4:f6:de:36:0a: ec:8a:eb:48:8d:02:da:2f:34:9d:7f:89:eb:92:0c:80:49:89: de:4d:47:19:b9:24:26:c9:34:0f:f0:1c:84:33:90:9d:8a:08: 5e:bb:f4:98:56:d7:70:54:1c:4a:78:7c:4c:04:49:2b:1a:ae: 09:f1:32:a6:b7:8b:97:b5:c4:f8:4a:3c:ab:09:5c:1e:91:36: 1d:66:a0:32:22:bf:6a:04:61:18:c4:20:60:49:e5:bb:d8:04: e3:1d:c1:35 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUatHyfpfYEBJEiPhkBydwhG+5UvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MTQxNDE0MDBaFw0yNjA4MTUxNzQwMDBaMDMxMTAvBgNV BAMTKDU3RUZEOEIwOUU2Njk3QkY1NzU3NjQ4Q0M4QzZBQTNBNDgyRUU5NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFFORsKa3jFDUmDEeHNseFgB92 vwtMghJodcVyU0bHoGf+W1cUMYdqbkOrWvxFckLgNNHJKndqFsCkvhwAFZ6cWlqI ZL9WgD9KV2XxqoNTk8/mCle5mR7x/OtAKb/5QRf2zdTPheD0YA1vHp4tAHFh9lJA hU1BapaN0TlgvwPKLMnXfGxDUD/Krn0cOWQ22IJBOsOIQwEt5xi3kQC9YeeHw8yZ FMeCMKtQg0RSACfw+g1r3EdPyiYIQzhvkfyIrzF1Yq/BO8mMlEVgMQsr8ClIGgWq AYdax244DB5hX5zP4cSg9zC4LCKDjqmhkRzKenMqkFkgUNt9hTj3oYKZBSzZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUV+/YsJ5ml79XV2SMyMaqOkgu6VIwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcjTzN8vAH7fumlCDZ3p pQ6iIpBRvbAdcrNIQIpfziWt9Rkn+uTg6ZkC9iayOEB42exk2/yKbC/5Yc4T6Gse oyUl2NmVDbFf0gxPveA0guMuxJg9ikQDpepua3yNVJUlCj2hBvkkV6eNlfF8QxkX 2EannyAfiwe4807zFO4MNaipkuWUwnm61gO9kQiUHI97atuDfLoQHhyskuqkJsT2 3jYK7IrrSI0C2i80nX+J65IMgEmJ3k1HGbkkJsk0D/AchDOQnYoIXrv0mFbXcFQc Snh8TARJKxquCfEypreLl7XE+Eo8qwlcHpE2HWagMiK/agRhGMQgYEnlu9gE4x3B NQ== -----END CERTIFICATE-----Generated at Fri Aug 14 17:28:31 2026 by rpki-client