$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: iA0i0drxMqv4xSz+xMc3Tqg/16dsYkTaHRzb8wyQm8A= Subject key identifier: 19:BA:7B:57:4B:96:16:2D:0B:94:B6:61:5B:04:06:72:38:21:A5:8C Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 1CA5BBADEDE73A766BF5BBB99E255208EEA8E765 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0554 Signing time: Sat 15 Aug 2026 09:42:52 +0000 Manifest this update: Sat 15 Aug 2026 09:37:52 +0000 Manifest next update: Sun 16 Aug 2026 13:17:52 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 3RoBGx1y4BX8PotFN4diT+F6EH3TsY13sXIgibgP1pM=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 16 Aug 2026 12:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:a5:bb:ad:ed:e7:3a:76:6b:f5:bb:b9:9e:25:52:08:ee:a8:e7:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 15 09:37:52 2026 GMT Not After : Aug 16 13:17:52 2026 GMT Subject: CN=19BA7B574B96162D0B94B6615B0406723821A58C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:de:b7:32:46:da:89:ff:fa:61:8b:c3:09:70: 67:f5:66:89:86:93:f7:89:ac:40:40:49:56:cc:fb: b7:bf:67:c1:10:5e:6f:1b:ce:b2:d3:f2:35:4d:70: c4:35:6f:1e:a3:ef:fd:9d:95:5c:91:c8:31:f2:3b: 15:93:64:48:79:fc:d1:74:d8:05:ed:29:4f:00:86: 92:20:70:52:7f:45:0d:1d:5e:84:b7:33:c6:5d:2e: 3b:02:fd:62:7c:3c:06:2f:76:c9:70:c1:79:cd:35: 10:47:db:dd:60:8e:7b:57:1f:f9:8a:b3:46:65:8b: 64:d4:c9:90:4e:61:c0:27:7d:8c:10:13:d8:75:e9: 15:b8:6e:18:7c:a9:df:e4:ff:2c:4e:5c:5f:5f:5a: f6:e6:d0:60:8a:0d:be:59:ae:88:aa:a5:cc:ef:df: bd:2e:4b:f7:20:9c:a7:b2:00:8b:bb:f3:dc:74:12: 22:31:c1:04:5c:f3:6e:ad:23:15:f0:66:01:36:46: 7f:51:38:b9:50:3a:93:18:76:52:55:e2:42:3e:f3: 59:9f:9d:00:77:c3:7c:c3:ee:be:8a:91:b6:25:eb: f6:2e:54:55:d5:a8:41:d0:b2:36:61:a1:47:11:fd: 93:42:c6:59:64:c8:ee:50:2b:a9:35:81:c8:23:d2: ef:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BA:7B:57:4B:96:16:2D:0B:94:B6:61:5B:04:06:72:38:21:A5:8C X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a6:c0:cd:47:8c:35:46:cf:81:4e:b0:9b:b7:f9:27:fc:4a: b6:7c:16:98:02:6e:8b:0d:8f:14:5f:90:07:45:a3:0b:8f:4a: 0a:59:b6:48:f2:70:9d:d0:35:b2:95:1a:5f:5a:b3:47:2c:d1: ae:4b:c9:96:59:33:ea:cb:ab:25:5a:1d:75:7d:35:f8:fc:f0: 14:22:b2:fb:84:0c:82:8b:a9:c0:ab:46:79:cc:2e:19:39:32: 32:a8:b7:cf:6b:a5:f2:12:4c:1f:bf:99:59:0f:b4:17:5e:f7: 07:dd:d1:3d:1f:34:85:9a:9f:dd:d2:23:2a:a5:f0:9a:52:93: a3:78:a9:2c:93:c8:f9:e2:33:4c:85:e3:af:7b:84:19:20:24: a9:9d:7e:e4:8b:a9:fb:15:3e:10:d3:7d:30:26:7c:d4:1a:bb: 96:11:9b:f5:0f:e8:c5:c5:48:05:d9:36:71:06:84:ae:ac:97: 4a:86:e5:43:4e:00:33:8b:c4:39:c9:37:79:56:4a:a3:f4:3d: d0:da:5a:fc:35:57:29:d4:b3:28:36:ee:69:66:76:e8:34:bc: 56:c1:e0:65:b0:db:65:be:99:53:b6:65:92:c8:05:35:88:67: 39:cc:be:4c:3b:52:df:18:4d:b3:69:a2:43:ae:fb:4f:5c:15: 03:72:89:4e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHKW7re3nOnZr9bu5niVSCO6o52UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MTUwOTM3NTJaFw0yNjA4MTYxMzE3NTJaMDMxMTAvBgNV BAMTKDE5QkE3QjU3NEI5NjE2MkQwQjk0QjY2MTVCMDQwNjcyMzgyMUE1OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp3rcyRtqJ//phi8MJcGf1ZomG k/eJrEBASVbM+7e/Z8EQXm8bzrLT8jVNcMQ1bx6j7/2dlVyRyDHyOxWTZEh5/NF0 2AXtKU8AhpIgcFJ/RQ0dXoS3M8ZdLjsC/WJ8PAYvdslwwXnNNRBH291gjntXH/mK s0Zli2TUyZBOYcAnfYwQE9h16RW4bhh8qd/k/yxOXF9fWvbm0GCKDb5Zroiqpczv 370uS/cgnKeyAIu789x0EiIxwQRc826tIxXwZgE2Rn9ROLlQOpMYdlJV4kI+81mf nQB3w3zD7r6KkbYl6/YuVFXVqEHQsjZhoUcR/ZNCxllkyO5QK6k1gcgj0u+VAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGbp7V0uWFi0LlLZhWwQGcjghpYwwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjabAzUeMNUbPgU6wm7f5 J/xKtnwWmAJuiw2PFF+QB0WjC49KClm2SPJwndA1spUaX1qzRyzRrkvJllkz6sur JVoddX01+PzwFCKy+4QMgoupwKtGecwuGTkyMqi3z2ul8hJMH7+ZWQ+0F173B93R PR80hZqf3dIjKqXwmlKTo3ipLJPI+eIzTIXjr3uEGSAkqZ1+5Iup+xU+ENN9MCZ8 1Bq7lhGb9Q/oxcVIBdk2cQaErqyXSoblQ04AM4vEOck3eVZKo/Q90Npa/DVXKdSz KDbuaWZ26DS8VsHgZbDbZb6ZU7ZlksgFNYhnOcy+TDtS3xhNs2miQ677T1wVA3KJ Tg== -----END CERTIFICATE-----Generated at Sat Aug 15 17:14:04 2026 by rpki-client