$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 9m32gfAnAtS0ZH+Fcrt59JyhMlw2bZkRfLz2DOE7Q24= Subject key identifier: C8:FF:81:FF:7A:47:F4:2C:97:21:E1:4D:9D:F1:A8:F9:0C:CF:D0:24 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 34ECCEB2D39C54CA30AA411B63CED5F936229CFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04C7 Signing time: Thu 30 Apr 2026 22:49:49 +0000 Manifest this update: Thu 30 Apr 2026 22:44:49 +0000 Manifest next update: Fri 01 May 2026 23:21:49 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: yWI9sh6pnHhbaNogwf/pYKAQGi7eICClw79Ez2Rp39E=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 18:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ec:ce:b2:d3:9c:54:ca:30:aa:41:1b:63:ce:d5:f9:36:22:9c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 30 22:44:49 2026 GMT Not After : May 1 23:21:49 2026 GMT Subject: CN=C8FF81FF7A47F42C9721E14D9DF1A8F90CCFD024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6e:5b:94:6f:46:94:11:0b:07:6f:12:5f:5d: 63:04:27:a3:9b:83:d8:3e:a9:33:11:9a:06:77:9c: c9:3c:f4:70:d0:80:c2:0a:4e:9f:9e:fd:92:ed:dd: 15:00:01:20:b0:af:c3:d0:26:dd:df:33:bf:43:68: 57:40:a6:e5:3e:ec:82:d0:c9:d8:6e:69:70:0c:e2: 52:29:5f:0c:76:c4:f6:f4:87:d2:fe:9c:d6:12:f7: 67:8b:4f:fc:41:7e:33:1e:8d:9a:6c:d5:5a:a3:23: bc:c1:dc:38:72:8b:9f:8d:e4:70:cb:8b:5f:64:77: 64:b0:47:54:2e:98:4b:45:e1:26:7d:f2:77:32:1a: f7:bc:fc:73:0c:bf:dd:c9:d1:26:dc:0e:a9:1d:63: 69:e5:c7:0d:7f:74:5c:02:90:f4:6e:4c:81:1a:76: 14:c3:b1:1a:1c:ee:98:60:e4:8c:93:67:a1:0e:7c: e8:90:32:ae:1c:b3:31:7a:06:ad:3c:79:b6:33:ff: 1f:10:2f:ed:35:12:eb:43:81:47:c8:2c:58:59:a4: 66:eb:67:f8:db:a3:73:88:d0:f3:d5:d9:6f:c0:07: a5:b2:07:ff:88:95:3d:0e:46:9b:bc:8a:68:19:a9: dd:5f:4a:09:8a:5d:d8:a0:38:2f:03:23:1e:e1:03: e7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FF:81:FF:7A:47:F4:2C:97:21:E1:4D:9D:F1:A8:F9:0C:CF:D0:24 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c0:c7:68:08:b6:ae:1c:b9:16:92:a7:b8:14:26:3b:0b:94: 22:70:54:9f:89:64:c1:32:79:76:a6:0a:17:2a:af:f4:bd:66: a9:20:bb:09:1a:90:9b:49:75:0a:17:4d:2c:24:36:a8:ee:3a: 84:67:b6:10:b8:f5:9e:1c:e0:47:96:c0:26:a5:2a:ea:44:67: 1b:0e:dc:1b:7b:ff:70:7b:c7:65:c6:ad:87:59:e2:2c:9c:d6: 93:a8:d6:e4:78:6f:f6:4d:66:ba:b8:0e:3f:03:59:00:02:eb: b6:bd:2f:76:c1:a7:9c:91:84:b6:df:49:8f:7c:f4:5c:8e:da: 64:77:4a:d3:ab:5a:6c:33:ba:a9:5e:4a:04:49:16:34:5e:7d: 91:ee:53:51:26:bd:3c:5f:87:54:4d:5f:67:c3:aa:2f:ae:aa: ed:19:f7:46:96:1f:5f:f2:f6:1f:ed:f1:31:10:3a:66:f0:3c: 3a:12:19:f9:77:d4:9e:53:2e:9b:b6:5d:ef:15:ab:48:bd:b8: a3:ae:c2:cb:a4:a9:1a:8f:c7:76:eb:4d:0a:b3:eb:b6:4e:1c: c8:35:86:1d:b5:d5:27:d6:b9:f0:c0:4b:e1:ff:31:78:23:20: de:1b:1a:18:46:34:cd:6c:9d:fa:89:d1:b4:42:2b:af:b8:c7: eb:c2:2f:ae -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNOzOstOcVMowqkEbY87V+TYinP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA0MzAyMjQ0NDlaFw0yNjA1MDEyMzIxNDlaMDMxMTAvBgNV BAMTKEM4RkY4MUZGN0E0N0Y0MkM5NzIxRTE0RDlERjFBOEY5MENDRkQwMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZbluUb0aUEQsHbxJfXWMEJ6Ob g9g+qTMRmgZ3nMk89HDQgMIKTp+e/ZLt3RUAASCwr8PQJt3fM79DaFdApuU+7ILQ ydhuaXAM4lIpXwx2xPb0h9L+nNYS92eLT/xBfjMejZps1VqjI7zB3Dhyi5+N5HDL i19kd2SwR1QumEtF4SZ98ncyGve8/HMMv93J0SbcDqkdY2nlxw1/dFwCkPRuTIEa dhTDsRoc7phg5IyTZ6EOfOiQMq4cszF6Bq08ebYz/x8QL+01EutDgUfILFhZpGbr Z/jbo3OI0PPV2W/AB6WyB/+IlT0ORpu8imgZqd1fSgmKXdigOC8DIx7hA+dPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUyP+B/3pH9CyXIeFNnfGo+QzP0CQwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8DHaAi2rhy5FpKnuBQm OwuUInBUn4lkwTJ5dqYKFyqv9L1mqSC7CRqQm0l1ChdNLCQ2qO46hGe2ELj1nhzg R5bAJqUq6kRnGw7cG3v/cHvHZcath1niLJzWk6jW5Hhv9k1murgOPwNZAALrtr0v dsGnnJGEtt9Jj3z0XI7aZHdK06tabDO6qV5KBEkWNF59ke5TUSa9PF+HVE1fZ8Oq L66q7Rn3RpYfX/L2H+3xMRA6ZvA8OhIZ+XfUnlMum7Zd7xWrSL24o67Cy6SpGo/H dutNCrPrtk4cyDWGHbXVJ9a58MBL4f8xeCMg3hsaGEY0zWyd+onRtEIrr7jH68Iv rg== -----END CERTIFICATE-----Generated at Fri May 1 03:15:24 2026 by rpki-client