$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: WQBm0Hs8m/n6adZmPQRaHSRse1TlLCZQjDefNtWEqm0= Subject key identifier: 9D:3A:0E:DF:24:C7:CC:EE:68:1E:8D:74:2D:83:57:1F:28:7B:73:ED Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 024C8C904DA9EDB206BA6F1357515EE4EDEFCF89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0505 Signing time: Tue 16 Jun 2026 18:49:05 +0000 Manifest this update: Tue 16 Jun 2026 18:44:05 +0000 Manifest next update: Wed 17 Jun 2026 19:24:05 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 3YfaPAZLRh4HmDp8Ji8g7bgGJag7UPoaQhOrwpS3ewg=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 19:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:4c:8c:90:4d:a9:ed:b2:06:ba:6f:13:57:51:5e:e4:ed:ef:cf:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 16 18:44:05 2026 GMT Not After : Jun 17 19:24:05 2026 GMT Subject: CN=9D3A0EDF24C7CCEE681E8D742D83571F287B73ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:52:29:0c:3f:b6:66:33:20:48:3b:5d:43:21: aa:2e:de:50:1a:0f:41:5c:5b:3d:73:44:93:f1:56: 1d:92:c1:f9:1c:6f:64:9f:ef:79:39:d8:a5:1e:f1: ce:34:ba:c6:21:14:ca:fd:3f:56:26:19:37:7a:2a: f7:98:4d:d2:3a:c6:72:57:c2:55:e5:26:63:d3:e5: c5:d4:8c:5e:4c:6c:ec:01:d7:af:9b:24:bd:f4:e4: b7:30:69:ea:3f:60:40:31:a3:87:76:53:6a:c2:15: ff:33:58:d8:95:3e:5e:29:89:21:fe:88:18:0c:df: ce:d6:ab:de:0d:d0:cf:fa:2c:8f:8a:23:92:2b:1b: fc:e2:2b:b8:a9:74:d0:6f:74:19:64:0c:6f:24:dc: be:1f:27:c3:2f:66:aa:ec:c5:57:74:e3:fa:12:b3: 82:91:3b:b0:b0:20:0e:8e:e0:e1:a0:36:57:5f:3a: 53:77:60:26:2e:81:23:13:be:2a:2f:a8:cc:4a:66: 6c:cd:ac:21:94:29:53:ce:5f:a4:c2:a3:0a:32:a1: a0:d5:29:6e:6d:bc:a3:2c:f8:a6:31:48:cc:04:c4: e2:2d:a5:72:93:4e:7a:a3:dd:8c:6b:cd:b7:2e:f2: 50:70:e2:2e:41:b2:b1:1b:23:aa:f7:ed:4f:c4:73: a1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3A:0E:DF:24:C7:CC:EE:68:1E:8D:74:2D:83:57:1F:28:7B:73:ED X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:58:86:cc:2e:8e:88:02:77:a8:26:7e:67:74:dd:81:d9:e7: e1:12:29:3e:61:39:73:61:61:84:78:0b:ba:ef:58:e9:bd:df: e2:01:ce:c8:35:3b:5c:3d:fb:3f:87:7a:7e:15:45:6b:0b:5b: 27:a0:2c:24:60:61:2e:d8:6f:d6:92:13:15:34:13:28:fc:b8: 35:58:ab:7d:13:9f:5c:12:f3:17:6f:29:9e:94:d8:cb:38:96: a7:92:fd:dc:41:90:41:e1:8f:79:ce:eb:46:16:88:89:4e:dd: f9:70:01:2d:1b:ba:16:56:9e:ca:af:8a:4c:4b:cb:66:33:78: d6:d3:36:d7:e1:e4:4f:17:9e:c9:02:d7:d2:2f:88:b8:ee:95: a2:df:34:bf:99:e4:a7:4b:46:df:a3:44:6b:56:19:e7:7b:c7: 52:56:b7:7d:bf:6e:9a:9d:10:7b:b4:21:1c:08:51:35:9e:1f: e7:c2:c9:d1:ee:19:07:3a:a1:53:2d:51:e4:42:a5:dc:62:72: a7:04:0b:90:17:aa:1a:6b:ed:a8:ab:42:9e:be:74:97:fa:fb: e9:f6:30:72:82:c6:10:d5:95:17:80:89:f5:80:bd:06:b8:1f: 26:39:93:b6:7a:06:19:14:e7:9a:42:17:76:10:34:b9:e0:4d: 17:40:7c:39 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAkyMkE2p7bIGum8TV1Fe5O3vz4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MTYxODQ0MDVaFw0yNjA2MTcxOTI0MDVaMDMxMTAvBgNV BAMTKDlEM0EwRURGMjRDN0NDRUU2ODFFOEQ3NDJEODM1NzFGMjg3QjczRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQUikMP7ZmMyBIO11DIaou3lAa D0FcWz1zRJPxVh2Swfkcb2Sf73k52KUe8c40usYhFMr9P1YmGTd6KveYTdI6xnJX wlXlJmPT5cXUjF5MbOwB16+bJL305Lcwaeo/YEAxo4d2U2rCFf8zWNiVPl4piSH+ iBgM387Wq94N0M/6LI+KI5IrG/ziK7ipdNBvdBlkDG8k3L4fJ8MvZqrsxVd04/oS s4KRO7CwIA6O4OGgNldfOlN3YCYugSMTviovqMxKZmzNrCGUKVPOX6TCowoyoaDV KW5tvKMs+KYxSMwExOItpXKTTnqj3Yxrzbcu8lBw4i5BsrEbI6r37U/Ec6HHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnToO3yTHzO5oHo10LYNXHyh7c+0wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATliGzC6OiAJ3qCZ+Z3Td gdnn4RIpPmE5c2FhhHgLuu9Y6b3f4gHOyDU7XD37P4d6fhVFawtbJ6AsJGBhLthv 1pITFTQTKPy4NVirfROfXBLzF28pnpTYyziWp5L93EGQQeGPec7rRhaIiU7d+XAB LRu6Flaeyq+KTEvLZjN41tM21+HkTxeeyQLX0i+IuO6Vot80v5nkp0tG36NEa1YZ 53vHUla3fb9ump0Qe7QhHAhRNZ4f58LJ0e4ZBzqhUy1R5EKl3GJypwQLkBeqGmvt qKtCnr50l/r76fYwcoLGENWVF4CJ9YC9BrgfJjmTtnoGGRTnmkIXdhA0ueBNF0B8 OQ== -----END CERTIFICATE-----Generated at Wed Jun 17 12:47:15 2026 by rpki-client