$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 0mafIBYWMxB+WHEDe+ZQLt6n7OHc8H6RzFtS2vHw8tw= Subject key identifier: E7:D3:43:64:78:34:17:FC:59:CC:24:33:3D:9B:CB:D8:BC:E8:7B:00 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 6E3247A344CC16C84E93D65B160D36E23CE5E080 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04D0 Signing time: Thu 07 May 2026 15:11:51 +0000 Manifest this update: Thu 07 May 2026 15:06:51 +0000 Manifest next update: Fri 08 May 2026 18:33:51 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: xAC7KMprdDjLVn+fp26bXUH9S6h7MEUr0bP+2sedu+g=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 08 May 2026 14:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:32:47:a3:44:cc:16:c8:4e:93:d6:5b:16:0d:36:e2:3c:e5:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 7 15:06:51 2026 GMT Not After : May 8 18:33:51 2026 GMT Subject: CN=E7D34364783417FC59CC24333D9BCBD8BCE87B00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:84:d3:ce:3b:37:c5:8d:1f:8d:68:81:ba: 99:00:6a:cf:af:23:58:32:31:e2:e6:ad:9f:3c:28: a3:dd:5b:09:2a:68:63:b9:a6:ae:32:05:b3:66:fb: 7f:6a:e0:d3:83:f7:b4:81:43:f0:68:c3:4a:0a:fc: fd:5f:39:1d:1b:5b:c9:ec:84:83:98:ad:50:c5:70: da:f9:b3:23:2e:84:6a:95:2d:78:22:18:ce:6b:ad: c7:99:7f:4c:ac:a2:a8:1d:59:97:fd:45:c5:1d:a4: 14:b4:29:00:dd:48:1c:18:06:ad:ea:d5:d6:5c:96: f7:f8:4d:82:7e:87:6b:28:c6:09:04:51:6e:d8:f2: 63:96:48:c0:18:74:d1:df:6d:4b:a0:19:2c:de:08: 3c:49:8c:65:17:f0:15:b9:fc:f0:00:1b:8d:8b:ea: 51:7d:b4:9d:f2:63:b5:1c:84:72:72:7e:f9:80:14: 4b:a3:58:de:c9:8d:d3:30:12:76:56:12:da:77:0f: 66:82:04:9b:a2:58:a1:07:45:52:6a:bb:59:87:3a: 47:fd:c5:ed:02:c9:c3:81:36:d6:42:f1:e1:3f:4e: f3:79:49:c6:93:d6:1a:c8:45:0f:b1:00:4a:3d:fa: 0f:58:a6:85:b6:b1:77:d5:1e:69:46:28:f9:2b:c5: f0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D3:43:64:78:34:17:FC:59:CC:24:33:3D:9B:CB:D8:BC:E8:7B:00 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:8d:ae:bb:4b:ef:a6:d6:9c:0c:85:53:15:70:79:8e:9e:86: f0:71:64:78:dc:55:07:62:6a:7b:5f:88:fe:e0:29:bd:c7:fd: 66:2a:82:12:d4:0d:99:f7:5a:fc:1e:aa:24:a7:2f:00:38:32: a3:21:66:96:de:9a:78:6d:18:29:96:53:89:c4:b2:17:30:97: bb:1e:b3:b4:ac:23:f9:11:59:6b:9a:69:03:85:d7:fb:91:1b: 46:7a:9f:ea:8b:3d:30:ca:70:4a:02:5c:fe:41:33:e3:de:29: e9:b2:65:c5:54:53:ac:05:1f:22:7a:03:6e:b3:4e:69:14:1c: 47:c0:8e:d6:1f:c7:01:68:4d:a0:53:b8:4d:7f:75:dd:30:41: c0:1c:1c:7a:85:2d:1d:cf:93:9a:89:b1:82:52:3b:53:c1:4f: 92:bf:07:bc:0b:54:31:eb:55:05:ac:dd:74:73:01:9e:f9:74: db:3b:7a:87:43:a8:5e:d6:2a:cd:c7:9e:af:00:c6:13:22:cc: 01:c2:f1:6c:5c:a2:0c:45:68:a1:9f:e3:3b:23:84:66:ec:88: f0:d3:9c:76:30:01:a5:48:4d:3b:e3:8b:68:19:d2:6e:01:42: bc:97:08:05:80:26:1e:07:36:0b:c6:5d:9d:ae:0d:6c:30:5a: 5d:33:24:a4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbjJHo0TMFshOk9ZbFg024jzl4IAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MDcxNTA2NTFaFw0yNjA1MDgxODMzNTFaMDMxMTAvBgNV BAMTKEU3RDM0MzY0NzgzNDE3RkM1OUNDMjQzMzNEOUJDQkQ4QkNFODdCMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAT4TTzjs3xY0fjWiBupkAas+v I1gyMeLmrZ88KKPdWwkqaGO5pq4yBbNm+39q4NOD97SBQ/Bow0oK/P1fOR0bW8ns hIOYrVDFcNr5syMuhGqVLXgiGM5rrceZf0ysoqgdWZf9RcUdpBS0KQDdSBwYBq3q 1dZclvf4TYJ+h2soxgkEUW7Y8mOWSMAYdNHfbUugGSzeCDxJjGUX8BW5/PAAG42L 6lF9tJ3yY7UchHJyfvmAFEujWN7JjdMwEnZWEtp3D2aCBJuiWKEHRVJqu1mHOkf9 xe0CycOBNtZC8eE/TvN5ScaT1hrIRQ+xAEo9+g9YpoW2sXfVHmlGKPkrxfC9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU59NDZHg0F/xZzCQzPZvL2LzoewAwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUY2uu0vvptacDIVTFXB5 jp6G8HFkeNxVB2Jqe1+I/uApvcf9ZiqCEtQNmfda/B6qJKcvADgyoyFmlt6aeG0Y KZZTicSyFzCXux6ztKwj+RFZa5ppA4XX+5EbRnqf6os9MMpwSgJc/kEz494p6bJl xVRTrAUfInoDbrNOaRQcR8CO1h/HAWhNoFO4TX913TBBwBwceoUtHc+TmomxglI7 U8FPkr8HvAtUMetVBazddHMBnvl02zt6h0OoXtYqzceerwDGEyLMAcLxbFyiDEVo oZ/jOyOEZuyI8NOcdjABpUhNO+OLaBnSbgFCvJcIBYAmHgc2C8Zdna4NbDBaXTMk pA== -----END CERTIFICATE-----Generated at Thu May 7 22:07:34 2026 by rpki-client