$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: ULNp3eSn/gKludV8hMfxPXRTUDH5mV7C15cZQ8m9kRQ= Subject key identifier: 8A:1D:2C:F4:FA:54:7F:D8:AD:71:E1:DD:E0:C9:75:8C:DA:89:81:DD Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 0D2D243F7DE2F6CC70203EA88D1F725A1143969B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04E9 Signing time: Tue 26 May 2026 07:51:20 +0000 Manifest this update: Tue 26 May 2026 07:46:20 +0000 Manifest next update: Wed 27 May 2026 10:58:20 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: XQYUG+hXqK3dvKbBRtZnoyBIO1PtWaxaeZCMQz1nRFE=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 27 May 2026 10:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:2d:24:3f:7d:e2:f6:cc:70:20:3e:a8:8d:1f:72:5a:11:43:96:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 26 07:46:20 2026 GMT Not After : May 27 10:58:20 2026 GMT Subject: CN=8A1D2CF4FA547FD8AD71E1DDE0C9758CDA8981DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:e8:40:1a:14:00:b2:6d:5f:3d:d7:a3:d8: c2:e7:6c:f9:00:f1:bf:99:1f:5e:7a:ff:56:71:85: fe:3d:95:20:35:17:2a:a0:e4:91:9f:83:62:41:a0: c0:ca:95:20:c2:23:24:f4:86:72:00:6b:6c:c8:1c: d7:29:a9:ea:e4:db:bd:2a:2f:10:67:f3:e4:ee:38: 13:eb:9a:24:74:32:65:44:9a:9b:ce:43:6f:c4:59: 1a:98:97:17:e1:ff:7b:88:52:15:f0:c4:27:41:47: 33:0e:ec:b4:a0:97:a2:5a:4b:99:7e:ad:16:aa:d0: ce:c0:bb:c4:dd:e7:83:55:a4:c0:db:29:28:ff:d4: 9f:be:e0:4b:b6:b7:28:35:72:94:52:7c:c5:d8:22: 44:88:21:dc:c6:1c:c5:b3:af:c8:dc:06:46:4b:0b: 8c:a9:90:21:60:9c:d3:db:ae:a6:0c:ec:42:f0:94: 2a:56:a3:4c:d8:f6:d4:8a:93:73:c5:ae:64:14:77: 0c:e5:90:37:70:31:81:10:c7:a9:ce:80:cd:f9:0f: 19:c9:c6:57:a0:a2:13:4a:77:ce:0f:0f:11:0d:58: 5b:6d:a0:69:b6:1c:5c:03:a5:70:6b:c0:df:7e:28: 00:13:53:2a:98:36:a0:ac:7b:b4:a1:08:16:ee:8a: 49:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1D:2C:F4:FA:54:7F:D8:AD:71:E1:DD:E0:C9:75:8C:DA:89:81:DD X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:de:cf:c2:ff:41:ea:63:ef:90:a8:bc:db:8a:78:73:5d:bc: da:da:41:72:39:db:aa:61:09:6f:51:e9:6a:66:1c:98:03:78: 17:09:bb:99:59:77:aa:af:ff:55:0f:0e:e1:e0:40:b2:54:fa: 70:2c:c4:ed:69:7c:67:ca:ba:e2:a1:5f:2c:88:2d:41:ba:79: 3b:04:3b:77:68:79:7e:70:73:0a:71:2e:13:2c:a3:e9:1f:f4: d6:43:b6:12:9e:9f:c0:54:b7:fe:a6:98:ed:b4:c3:96:c8:eb: 37:b3:06:46:cb:78:ea:df:82:12:d5:f6:47:d9:cc:03:a6:a0: d6:df:2f:2e:55:e1:c0:d1:e1:ca:2c:85:e5:b2:3b:ba:8b:d3: bd:07:09:9c:5f:78:04:97:49:71:70:e2:fc:4e:bc:56:36:e1: 66:0c:9e:7e:29:df:a3:ed:48:01:0e:45:dc:d8:f8:b4:1d:f2: b3:32:00:c6:65:86:ff:a6:84:5d:eb:c5:ce:a2:c1:68:ca:39: 4c:cd:00:5a:6a:82:d6:5e:57:d2:f6:81:2f:05:9a:87:b3:32: ee:e0:8e:2a:23:61:f0:f9:29:1c:26:b1:c3:2a:92:57:31:0d: ee:f9:0e:e0:43:73:0e:49:75:92:e6:d5:e7:9b:64:2d:29:e4: 80:d2:dc:bd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDS0kP33i9sxwID6ojR9yWhFDlpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MjYwNzQ2MjBaFw0yNjA1MjcxMDU4MjBaMDMxMTAvBgNV BAMTKDhBMUQyQ0Y0RkE1NDdGRDhBRDcxRTFEREUwQzk3NThDREE4OTgxREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBuehAGhQAsm1fPdej2MLnbPkA 8b+ZH156/1Zxhf49lSA1Fyqg5JGfg2JBoMDKlSDCIyT0hnIAa2zIHNcpqerk270q LxBn8+TuOBPrmiR0MmVEmpvOQ2/EWRqYlxfh/3uIUhXwxCdBRzMO7LSgl6JaS5l+ rRaq0M7Au8Td54NVpMDbKSj/1J++4Eu2tyg1cpRSfMXYIkSIIdzGHMWzr8jcBkZL C4ypkCFgnNPbrqYM7ELwlCpWo0zY9tSKk3PFrmQUdwzlkDdwMYEQx6nOgM35DxnJ xlegohNKd84PDxENWFttoGm2HFwDpXBrwN9+KAATUyqYNqCse7ShCBbuiknRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUih0s9PpUf9itceHd4Ml1jNqJgd0wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb97Pwv9B6mPvkKi824p4 c1282tpBcjnbqmEJb1HpamYcmAN4Fwm7mVl3qq//VQ8O4eBAslT6cCzE7Wl8Z8q6 4qFfLIgtQbp5OwQ7d2h5fnBzCnEuEyyj6R/01kO2Ep6fwFS3/qaY7bTDlsjrN7MG Rst46t+CEtX2R9nMA6ag1t8vLlXhwNHhyiyF5bI7uovTvQcJnF94BJdJcXDi/E68 VjbhZgyefinfo+1IAQ5F3Nj4tB3yszIAxmWG/6aEXevFzqLBaMo5TM0AWmqC1l5X 0vaBLwWah7My7uCOKiNh8PkpHCaxwyqSVzEN7vkO4ENzDkl1kubV55tkLSnkgNLc vQ== -----END CERTIFICATE-----Generated at Tue May 26 15:49:55 2026 by rpki-client