$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: e5tJpEDvQAcyCqzDCml5+I0cCP3QsiMt1h3NzvkFDWo= Subject key identifier: BB:53:69:4A:79:DC:9C:85:0A:60:FD:62:BD:4A:78:70:AC:98:7A:BB Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 069997153372FBD788C33699ECCAA07832199FC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0555 Signing time: Sun 16 Aug 2026 05:21:47 +0000 Manifest this update: Sun 16 Aug 2026 05:16:47 +0000 Manifest next update: Mon 17 Aug 2026 07:26:47 +0000 Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: /F6T4J0EyOB4SmuYDJvfltTkSmacMMVAZ2xK+UMY9Yg=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Aug 2026 07:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:99:97:15:33:72:fb:d7:88:c3:36:99:ec:ca:a0:78:32:19:9f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 16 05:16:47 2026 GMT Not After : Aug 17 07:26:47 2026 GMT Subject: CN=BB53694A79DC9C850A60FD62BD4A7870AC987ABB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ce:44:e4:ae:49:f6:46:f2:e0:c4:ad:76:5c: 35:b3:b7:3a:e1:d3:d9:dc:c1:ae:22:8e:f9:fa:20: 6f:a3:0e:02:23:37:f7:6b:b9:9f:24:39:47:9f:b0: 56:03:85:e8:6e:8f:f2:82:f2:62:41:60:02:22:03: bf:fd:fe:79:fe:cd:2c:3f:c4:f3:9c:e3:c4:af:74: ea:10:96:88:96:45:ba:a7:55:ff:1e:66:b5:7f:87: 60:2b:32:af:25:8f:7f:c4:3e:b7:6e:8f:88:75:09: ef:c7:83:99:c3:2e:b5:f1:64:99:55:47:b9:3c:dd: c6:0e:30:a4:00:4d:ff:0d:89:5c:85:d2:43:80:87: c3:e9:a6:78:ff:d1:94:73:1b:4c:c3:07:8e:ec:98: 5e:4d:26:f6:09:a1:ec:83:e7:85:09:8a:5d:5d:78: 69:21:df:61:79:db:29:19:57:4a:74:07:a4:6b:1c: ad:a4:b6:a2:91:30:7a:27:9a:ec:11:66:27:c2:70: fd:00:fc:0e:6f:7f:1a:10:4e:b2:47:df:39:3e:8e: 50:de:3e:bb:c6:4d:16:19:f6:f4:07:07:6b:80:bc: 3e:88:0a:56:c4:76:ec:9a:6b:29:d1:00:f4:ba:2f: a6:a5:de:ba:01:21:60:d3:e8:fa:f3:05:68:3d:7e: 7f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:53:69:4A:79:DC:9C:85:0A:60:FD:62:BD:4A:78:70:AC:98:7A:BB X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:bb:db:2d:08:4e:1d:bf:89:d4:48:d2:12:d3:02:d3:47:a2: 98:a3:8c:58:d1:10:86:3d:5f:d9:2f:fb:ea:75:95:94:da:af: e1:37:42:d9:14:79:72:b5:c3:14:c4:56:0f:ec:64:6e:bd:9b: 54:b0:17:cc:ed:37:3c:63:0b:8a:f5:a7:08:1e:f6:27:36:5b: 48:e6:a9:01:0f:1a:98:fd:66:9c:a5:a7:aa:5b:a4:87:33:d0: 0d:8a:f4:dc:d6:85:9c:66:fc:c8:59:20:45:f7:a4:b2:35:5e: 17:4c:5a:29:3c:f8:bd:0a:e4:73:9a:ae:3b:e1:af:79:44:4f: 70:35:24:13:68:01:5b:66:6e:06:6a:42:7d:21:68:d8:04:10: 23:bf:61:36:6f:ca:34:fb:a7:58:b0:9f:75:8f:97:06:83:02: df:01:0b:d1:95:c8:c1:b9:20:a0:c5:f2:f6:1d:bd:21:c4:47: 93:f0:fd:0c:de:a2:0a:d5:0b:9f:7e:f3:f9:15:ea:c8:82:c6: dd:92:67:67:a5:46:72:0b:a1:ef:44:f0:66:9d:5c:ca:97:9e: 5f:6f:fe:40:81:c9:ce:2f:ec:cb:62:32:33:38:db:9d:cf:1b: f5:a9:03:88:35:50:0a:ae:8f:87:5f:2c:b0:13:1c:41:06:bb: ce:4a:71:06 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBpmXFTNy+9eIwzaZ7MqgeDIZn8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MTYwNTE2NDdaFw0yNjA4MTcwNzI2NDdaMDMxMTAvBgNV BAMTKEJCNTM2OTRBNzlEQzlDODUwQTYwRkQ2MkJENEE3ODcwQUM5ODdBQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQzkTkrkn2RvLgxK12XDWztzrh 09ncwa4ijvn6IG+jDgIjN/druZ8kOUefsFYDhehuj/KC8mJBYAIiA7/9/nn+zSw/ xPOc48SvdOoQloiWRbqnVf8eZrV/h2ArMq8lj3/EPrduj4h1Ce/Hg5nDLrXxZJlV R7k83cYOMKQATf8NiVyF0kOAh8Pppnj/0ZRzG0zDB47smF5NJvYJoeyD54UJil1d eGkh32F52ykZV0p0B6RrHK2ktqKRMHonmuwRZifCcP0A/A5vfxoQTrJH3zk+jlDe PrvGTRYZ9vQHB2uAvD6IClbEduyaaynRAPS6L6al3roBIWDT6PrzBWg9fn91AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUu1NpSnncnIUKYP1ivUp4cKyYerswHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbvbLQhOHb+J1EjSEtMC 00eimKOMWNEQhj1f2S/76nWVlNqv4TdC2RR5crXDFMRWD+xkbr2bVLAXzO03PGML ivWnCB72JzZbSOapAQ8amP1mnKWnqlukhzPQDYr03NaFnGb8yFkgRfeksjVeF0xa KTz4vQrkc5quO+GveURPcDUkE2gBW2ZuBmpCfSFo2AQQI79hNm/KNPunWLCfdY+X BoMC3wEL0ZXIwbkgoMXy9h29IcRHk/D9DN6iCtULn37z+RXqyILG3ZJnZ6VGcguh 70TwZp1cypeeX2/+QIHJzi/sy2IyMzjbnc8b9akDiDVQCq6Ph18ssBMcQQa7zkpx Bg== -----END CERTIFICATE-----Generated at Sun Aug 16 17:44:09 2026 by rpki-client