$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: T3eopk1Sn0KYURnNAoutDIXZfF46tUr68pxt2JVXtVw= Subject key identifier: 93:B3:BD:66:D2:F3:7A:D1:CC:F2:20:72:1B:B5:55:8E:AF:69:9A:EF Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 359D21FF9629332C884F5C6CB7E121AD2B070627 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0567 Signing time: Sat 29 Aug 2026 19:46:56 +0000 Manifest this update: Sat 29 Aug 2026 19:41:56 +0000 Manifest next update: Sun 30 Aug 2026 23:35:56 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Z7TbZvmoEUWdTrWXeT8ZKTFn1cBEGW2H1WFfIuGfQRM=) 4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 30 Aug 2026 20:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:9d:21:ff:96:29:33:2c:88:4f:5c:6c:b7:e1:21:ad:2b:07:06:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 29 19:41:56 2026 GMT Not After : Aug 30 23:35:56 2026 GMT Subject: CN=93B3BD66D2F37AD1CCF220721BB5558EAF699AEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cf:42:86:12:81:d4:3a:b7:e9:d4:a8:24:7a: da:9a:12:7f:88:ad:f4:97:6f:ab:53:7f:71:65:d7: cf:4a:c9:33:45:e3:dd:30:29:e7:ff:ab:e8:00:5a: f5:3f:2f:15:3b:0f:f9:ee:2c:fd:d9:54:51:f7:06: fb:81:c1:1e:96:a8:f5:3c:97:e8:79:52:b4:f3:b5: 4f:46:df:8a:5b:41:ce:97:78:a4:69:7c:97:64:7e: 7c:03:7b:72:92:5d:68:f1:93:db:eb:b3:21:c6:5c: 2a:0c:33:d8:19:a6:35:bc:30:19:6f:b3:4b:a8:82: 34:46:2b:f8:15:b9:cb:1c:d4:e8:4f:a1:c5:3c:71: 10:00:fc:99:0e:20:99:33:c8:b5:d0:bc:8a:66:74: 31:09:57:df:b4:2d:83:05:80:83:cd:1e:c0:88:b6: e0:0d:9c:a5:d0:59:8c:6c:de:3e:27:24:d8:db:44: 42:76:3a:e6:48:50:15:05:40:8f:4d:89:89:c9:32: 24:35:c3:43:36:0a:e7:b1:4e:6c:40:ef:01:11:15: c3:fd:d3:d5:8d:97:da:1e:8b:a6:22:d1:9c:c0:55: 04:b1:86:90:ac:15:83:99:79:8b:cc:41:8a:22:b1: 9b:84:ea:5f:79:f2:43:4f:61:56:ee:7a:ab:f3:11: 80:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B3:BD:66:D2:F3:7A:D1:CC:F2:20:72:1B:B5:55:8E:AF:69:9A:EF X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5c:6c:98:35:f4:18:0d:e9:86:07:f2:57:82:77:a2:45:75: 9c:06:a0:1d:15:71:a2:b0:a0:63:0d:94:c5:32:ad:2a:f9:73: 1e:70:c9:77:24:96:6b:e3:6b:70:6b:a9:60:ed:78:ea:88:93: 0f:2c:1e:00:97:78:06:02:13:49:6e:76:ca:a5:8a:78:05:30: 7c:5c:9b:76:52:c3:a9:58:fa:c0:5b:4e:ef:8a:f2:36:38:ea: 92:8f:7e:eb:8b:75:41:2e:b3:ed:b1:62:17:c5:11:5c:09:53: e2:c5:45:c7:2d:19:0d:66:cc:72:20:b1:c3:9e:f5:27:ea:3a: 05:e8:40:72:e9:f2:25:d0:44:ab:bd:65:e8:87:21:b5:c0:7d: 6f:f8:e8:20:e3:13:11:c7:dd:24:a7:05:4e:c1:a1:fe:ad:64: 5c:8a:a4:60:25:24:a2:1b:03:99:f1:f3:84:52:c6:c8:5a:bc: 7f:db:33:60:53:94:0e:d0:43:99:47:a5:08:d2:95:dc:23:04: 12:f2:75:a9:e9:74:1a:c9:8c:33:39:98:bf:aa:a9:74:df:72: 6b:7f:0d:22:d8:24:71:17:2e:78:aa:d5:d4:43:99:66:d6:9e: a7:43:e0:59:81:a0:11:09:00:72:af:73:a0:62:7f:82:79:55: 12:f8:eb:29 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNZ0h/5YpMyyIT1xst+EhrSsHBicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MjkxOTQxNTZaFw0yNjA4MzAyMzM1NTZaMDMxMTAvBgNV BAMTKDkzQjNCRDY2RDJGMzdBRDFDQ0YyMjA3MjFCQjU1NThFQUY2OTlBRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgz0KGEoHUOrfp1KgketqaEn+I rfSXb6tTf3Fl189KyTNF490wKef/q+gAWvU/LxU7D/nuLP3ZVFH3BvuBwR6WqPU8 l+h5UrTztU9G34pbQc6XeKRpfJdkfnwDe3KSXWjxk9vrsyHGXCoMM9gZpjW8MBlv s0uogjRGK/gVucsc1OhPocU8cRAA/JkOIJkzyLXQvIpmdDEJV9+0LYMFgIPNHsCI tuANnKXQWYxs3j4nJNjbREJ2OuZIUBUFQI9NiYnJMiQ1w0M2CuexTmxA7wERFcP9 09WNl9oei6Yi0ZzAVQSxhpCsFYOZeYvMQYoisZuE6l958kNPYVbueqvzEYBzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUk7O9ZtLzetHM8iByG7VVjq9pmu8wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflxsmDX0GA3phgfyV4J3 okV1nAagHRVxorCgYw2UxTKtKvlzHnDJdySWa+NrcGupYO146oiTDyweAJd4BgIT SW52yqWKeAUwfFybdlLDqVj6wFtO74ryNjjqko9+64t1QS6z7bFiF8URXAlT4sVF xy0ZDWbMciCxw571J+o6BehAcunyJdBEq71l6IchtcB9b/joIOMTEcfdJKcFTsGh /q1kXIqkYCUkohsDmfHzhFLGyFq8f9szYFOUDtBDmUelCNKV3CMEEvJ1qel0GsmM MzmYv6qpdN9ya38NItgkcRcueKrV1EOZZtaep0PgWYGgEQkAcq9zoGJ/gnlVEvjr KQ== -----END CERTIFICATE-----Generated at Sun Aug 30 02:56:08 2026 by rpki-client