$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: h44nOKyjTn/VHyB2lQQ5S+dSi5albWIhp0Q595KH78c= Subject key identifier: 6D:B3:63:27:EC:46:F1:C6:0D:97:DE:B4:AD:78:AF:26:43:2F:68:C7 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 7B928A68BF47B009E58CD0798D30FCAC806A3293 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04B1 Signing time: Tue 14 Apr 2026 11:30:52 +0000 Manifest this update: Tue 14 Apr 2026 11:25:52 +0000 Manifest next update: Wed 15 Apr 2026 13:25:52 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Ggcdgmsg+nz8q/ByKvajfiy7lnqGNIbwDKKJsmJ3FcE=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 15 Apr 2026 13:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:92:8a:68:bf:47:b0:09:e5:8c:d0:79:8d:30:fc:ac:80:6a:32:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 14 11:25:52 2026 GMT Not After : Apr 15 13:25:52 2026 GMT Subject: CN=6DB36327EC46F1C60D97DEB4AD78AF26432F68C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7f:f5:de:f4:e5:1a:37:91:5a:1b:bf:50:52: 9a:ab:f1:72:81:f3:40:a3:e6:02:f3:10:0a:c4:05: c3:0f:a9:73:b6:92:c6:52:f8:72:1d:31:49:f3:c8: c5:cd:43:38:cf:24:12:ff:38:c1:e8:ce:9b:83:33: cb:3a:0e:83:4e:3e:fe:07:aa:65:64:ac:1b:0a:95: c7:c9:72:f5:3d:40:26:c2:dd:f7:a2:0f:11:b7:51: 33:da:2f:cb:84:ca:06:5e:4c:2b:1b:4e:ba:e2:6c: 56:b3:15:b4:7b:a1:82:d9:7b:1b:b5:51:c1:93:1f: 08:80:13:69:f5:44:29:7a:23:9b:fe:da:65:dd:8e: 61:22:99:58:0e:80:3d:99:28:bb:85:cd:d7:a6:f7: f0:1d:98:2d:41:63:06:02:6b:23:2c:7e:c3:1f:2f: 2b:bb:84:d6:7a:7b:95:fe:72:c2:db:1e:22:c6:1b: d1:c0:84:ee:d4:74:99:02:34:88:41:62:33:54:70: 09:5c:76:ec:66:2a:e6:2e:eb:84:0e:c1:ee:3a:fc: 65:49:1d:56:0f:cd:cc:af:4b:7d:0b:e3:19:ec:e5: 84:71:e1:4a:01:ab:b7:05:59:1c:d3:76:d7:a4:b3: 9e:ab:4c:30:c4:e8:4c:51:15:f6:d8:10:87:69:7b: a6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B3:63:27:EC:46:F1:C6:0D:97:DE:B4:AD:78:AF:26:43:2F:68:C7 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:db:63:4b:6c:f7:51:8b:5a:23:75:a5:28:7b:a0:c5:35:be: f9:59:c0:fc:40:12:be:61:5d:10:cf:0b:80:95:69:c7:58:b5: 64:d1:9a:44:df:e0:e8:46:c6:55:93:16:bf:42:2f:3f:b5:d3: 67:ba:36:e9:8f:61:c6:37:10:4b:b0:b6:52:57:39:41:7b:79: ae:2c:f9:c9:a8:17:27:e9:06:7a:d2:31:06:e4:20:39:49:3f: ec:0c:24:d3:f5:43:b8:71:40:24:d8:ef:e0:b4:9f:55:4c:f9: 72:8b:b0:aa:36:8d:be:b7:29:32:c3:02:ce:1d:d3:23:bc:b2: 83:15:02:b6:cc:4a:60:bf:24:53:f9:90:8d:76:4d:e7:25:ed: 9c:d5:47:fa:69:04:95:2b:b2:6d:b7:0d:59:0f:94:81:43:84: 13:8e:95:eb:90:77:16:d8:15:e3:1b:64:70:87:e1:d6:5f:df: bd:17:77:b0:39:c5:a5:43:cf:ed:c0:a9:86:e7:9b:ab:4d:93: cf:cf:56:24:2a:26:0c:cc:02:7b:41:f5:9c:c2:47:0e:99:be: dd:19:c9:74:ff:e6:4e:c1:23:4c:1e:5f:eb:9f:63:4d:1c:06: 1f:7a:dc:30:e5:69:9a:e3:1d:da:c9:7d:49:15:b6:94:ac:fc: bc:ce:90:e5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUe5KKaL9HsAnljNB5jTD8rIBqMpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA0MTQxMTI1NTJaFw0yNjA0MTUxMzI1NTJaMDMxMTAvBgNV BAMTKDZEQjM2MzI3RUM0NkYxQzYwRDk3REVCNEFENzhBRjI2NDMyRjY4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpf/Xe9OUaN5FaG79QUpqr8XKB 80Cj5gLzEArEBcMPqXO2ksZS+HIdMUnzyMXNQzjPJBL/OMHozpuDM8s6DoNOPv4H qmVkrBsKlcfJcvU9QCbC3feiDxG3UTPaL8uEygZeTCsbTrribFazFbR7oYLZexu1 UcGTHwiAE2n1RCl6I5v+2mXdjmEimVgOgD2ZKLuFzdem9/AdmC1BYwYCayMsfsMf Lyu7hNZ6e5X+csLbHiLGG9HAhO7UdJkCNIhBYjNUcAlcduxmKuYu64QOwe46/GVJ HVYPzcyvS30L4xns5YRx4UoBq7cFWRzTdteks56rTDDE6ExRFfbYEIdpe6YhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUbbNjJ+xG8cYNl960rXivJkMvaMcwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdtjS2z3UYtaI3WlKHug xTW++VnA/EASvmFdEM8LgJVpx1i1ZNGaRN/g6EbGVZMWv0IvP7XTZ7o26Y9hxjcQ S7C2Ulc5QXt5riz5yagXJ+kGetIxBuQgOUk/7Awk0/VDuHFAJNjv4LSfVUz5couw qjaNvrcpMsMCzh3TI7yygxUCtsxKYL8kU/mQjXZN5yXtnNVH+mkElSuybbcNWQ+U gUOEE46V65B3FtgV4xtkcIfh1l/fvRd3sDnFpUPP7cCphuebq02Tz89WJComDMwC e0H1nMJHDpm+3RnJdP/mTsEjTB5f659jTRwGH3rcMOVpmuMd2sl9SRW2lKz8vM6Q 5Q== -----END CERTIFICATE-----Generated at Tue Apr 14 20:17:58 2026 by rpki-client