$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: kIiPweovi1MfuCFDYp9qQ20qnz5p0hXLSwtZME6A9k0= Subject key identifier: 59:A7:85:07:CA:DD:92:52:DB:B3:A4:EC:73:28:05:6B:8A:5C:0B:EF Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 2523E25C119E81DFEA257106A532FA2AF0E337EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0570 Signing time: Sat 05 Sep 2026 16:09:44 +0000 Manifest this update: Sat 05 Sep 2026 16:04:44 +0000 Manifest next update: Sun 06 Sep 2026 17:33:44 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: mc/9iuBdDMqSRII3qv1foDozE2DQceE46Ub089SmgkI=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Sep 2026 17:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:23:e2:5c:11:9e:81:df:ea:25:71:06:a5:32:fa:2a:f0:e3:37:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Sep 5 16:04:44 2026 GMT Not After : Sep 6 17:33:44 2026 GMT Subject: CN=59A78507CADD9252DBB3A4EC7328056B8A5C0BEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:2f:70:89:11:37:f8:6c:1f:c8:45:ab:72: 06:37:a6:5c:0e:34:53:90:b9:4a:6e:2c:c4:fb:cb: 53:7b:23:80:1d:b2:35:80:6e:d2:75:29:92:5c:c1: 20:f8:fb:67:d6:45:1e:94:d9:2c:86:23:e9:c6:79: 01:36:fe:8c:56:44:8f:1f:d4:fa:0d:56:e7:98:3c: 97:b3:0d:b1:c5:e5:d3:87:fc:a2:d8:c3:3f:04:ee: cf:f6:8b:02:35:b2:fc:b1:de:2a:a3:a5:cb:8e:da: fe:7d:c5:9f:38:77:e3:70:92:15:21:94:a7:20:3c: d2:8f:e8:bf:4a:55:b0:91:e3:62:81:bc:d2:63:66: 9d:49:72:7c:4f:81:b1:c4:a6:af:f6:04:5a:59:bd: 42:d3:47:d5:fb:a4:0f:62:3b:cb:93:d7:02:a9:f1: 59:9a:bd:87:08:29:57:b3:55:7c:87:1c:13:bb:62: 5a:3d:ea:ce:16:f4:5b:5a:7f:a3:7b:1d:96:4d:48: 15:e7:a1:c2:c0:ac:87:f4:48:a2:7e:32:a2:61:57: 08:9f:f0:32:3f:fb:31:4a:69:cc:b5:77:7b:57:e1: 50:ed:4f:02:45:78:f2:04:4b:47:8a:22:e1:3f:68: fc:86:15:f9:44:45:a3:2a:9f:79:22:55:02:2a:cd: fa:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A7:85:07:CA:DD:92:52:DB:B3:A4:EC:73:28:05:6B:8A:5C:0B:EF X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:df:40:6e:1e:8d:b4:66:73:6e:49:86:bd:d2:79:16:2a:0d: ce:86:66:73:6a:c0:b0:44:90:30:e4:69:84:9a:66:96:81:5e: ee:a8:95:99:0a:f9:4d:2f:92:03:6c:d1:52:ad:8b:9c:32:ba: 04:20:3b:c3:c7:49:42:e3:63:b0:02:3b:6e:46:06:d4:de:e8: 10:bc:44:d8:9b:93:bb:97:23:b1:18:c5:7f:d0:7e:90:94:ca: 57:c0:d9:ae:69:ec:91:8f:94:81:08:9e:9b:9a:86:d1:29:5a: 5a:95:33:6b:88:f6:3d:d3:24:7d:df:ca:74:fc:a4:92:60:ee: b3:53:00:f1:66:54:3a:8d:53:6a:92:e2:21:07:d7:05:65:ca: 7a:e1:9d:c1:7f:d1:55:a1:c4:1e:cd:9d:df:04:89:36:98:cd: 63:6c:f7:be:89:2b:f8:e3:3c:58:e7:f0:5f:f2:5a:e6:ca:c6: 1c:38:0a:46:94:f2:c4:5c:20:1b:6b:f1:a0:14:c6:e1:51:0d: 39:16:96:ce:a6:0b:79:9c:17:14:d5:8f:c8:bb:3a:ef:6d:ec: a8:dc:71:e3:91:b7:0e:60:4e:4b:3f:f4:c8:99:0f:e9:f5:cc: c9:8f:6e:31:88:14:a4:bf:b9:97:1b:52:9a:fa:8e:14:95:f2: ce:88:d6:23 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJSPiXBGegd/qJXEGpTL6KvDjN+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA5MDUxNjA0NDRaFw0yNjA5MDYxNzMzNDRaMDMxMTAvBgNV BAMTKDU5QTc4NTA3Q0FERDkyNTJEQkIzQTRFQzczMjgwNTZCOEE1QzBCRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuky9wiRE3+GwfyEWrcgY3plwO NFOQuUpuLMT7y1N7I4AdsjWAbtJ1KZJcwSD4+2fWRR6U2SyGI+nGeQE2/oxWRI8f 1PoNVueYPJezDbHF5dOH/KLYwz8E7s/2iwI1svyx3iqjpcuO2v59xZ84d+NwkhUh lKcgPNKP6L9KVbCR42KBvNJjZp1JcnxPgbHEpq/2BFpZvULTR9X7pA9iO8uT1wKp 8VmavYcIKVezVXyHHBO7Ylo96s4W9Ftaf6N7HZZNSBXnocLArIf0SKJ+MqJhVwif 8DI/+zFKacy1d3tX4VDtTwJFePIES0eKIuE/aPyGFflERaMqn3kiVQIqzfqzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUWaeFB8rdklLbs6TscygFa4pcC+8wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALN9Abh6NtGZzbkmGvdJ5 FioNzoZmc2rAsESQMORphJpmloFe7qiVmQr5TS+SA2zRUq2LnDK6BCA7w8dJQuNj sAI7bkYG1N7oELxE2JuTu5cjsRjFf9B+kJTKV8DZrmnskY+UgQiem5qG0SlaWpUz a4j2PdMkfd/KdPykkmDus1MA8WZUOo1TapLiIQfXBWXKeuGdwX/RVaHEHs2d3wSJ NpjNY2z3vokr+OM8WOfwX/Ja5srGHDgKRpTyxFwgG2vxoBTG4VENORaWzqYLeZwX FNWPyLs6723sqNxx45G3DmBOSz/0yJkP6fXMyY9uMYgUpL+5lxtSmvqOFJXyzojW Iw== -----END CERTIFICATE-----Generated at Sun Sep 6 08:57:46 2026 by rpki-client