$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: sl4zr8ibaYLkuR5m2IBQ2mMszh4U2iGc9D11TX57r50= Subject key identifier: 2F:F4:8E:B1:D1:34:F0:2E:E0:C4:94:8C:70:96:03:06:2C:76:E7:88 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 28DC8D8BD5EB0AA48643C04DBDEACDFC660B49E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 051C Signing time: Sat 04 Jul 2026 09:31:39 +0000 Manifest this update: Sat 04 Jul 2026 09:26:39 +0000 Manifest next update: Sun 05 Jul 2026 10:04:39 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: WF9FfSVmgDZ90mpXrDx3b6oHNjdQ/2aPuBqHeQarVzc=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 05 Jul 2026 10:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:dc:8d:8b:d5:eb:0a:a4:86:43:c0:4d:bd:ea:cd:fc:66:0b:49:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 4 09:26:39 2026 GMT Not After : Jul 5 10:04:39 2026 GMT Subject: CN=2FF48EB1D134F02EE0C4948C709603062C76E788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:63:20:a6:37:0c:83:91:a7:46:f6:76:1b: 41:cc:60:5b:44:32:72:cb:6b:38:ae:1e:0e:3c:77: b7:dc:a5:d6:9b:97:d6:47:3f:51:7b:8a:88:e3:72: 71:27:c6:13:b8:41:87:f5:30:3a:86:30:04:27:e3: b7:57:e0:6e:35:d9:12:6e:fb:71:d3:fa:08:c2:51: 24:e2:a9:14:9f:fb:19:09:82:68:0a:7a:28:63:ce: 09:ae:a6:ff:fa:46:35:27:6c:27:77:e8:f4:09:a0: 78:f8:bd:9c:a9:a2:a5:e5:25:fc:f0:33:f8:9d:3f: 4c:c1:9d:09:d3:ec:f2:68:d5:3c:70:54:9d:29:e6: 46:15:f2:66:31:18:b4:57:1a:7f:7c:e7:54:eb:b9: 72:64:94:f6:ea:bc:a1:12:4a:e7:b4:4a:9e:a0:8e: f2:da:f4:70:d1:ff:1e:e5:11:1c:64:a0:be:d6:8a: a9:d4:95:1e:63:a3:da:20:29:a2:70:89:9e:37:8f: 16:d0:4c:be:39:c8:d8:3d:2b:c3:ec:4c:ad:aa:96: b5:b2:7f:82:31:67:fb:75:a8:14:c3:cb:28:88:6b: e7:42:18:d1:0b:45:cb:ea:54:6b:93:08:d6:01:9c: 35:5d:11:e9:a2:77:a4:4e:29:67:ca:4b:cf:45:54: 05:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F4:8E:B1:D1:34:F0:2E:E0:C4:94:8C:70:96:03:06:2C:76:E7:88 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:81:01:f1:e6:7e:ff:cf:d1:58:8b:85:a7:c8:91:d3:a5:06: 2d:ee:0a:6b:7f:2f:3a:fb:01:49:26:23:8b:50:8d:37:f4:6a: e9:fa:43:66:01:a3:6c:2c:57:7d:09:ed:eb:6a:dd:35:58:3c: 6f:c4:23:76:28:7a:fc:a9:ba:b3:7a:7b:67:28:b1:de:b5:b6: 21:11:cb:8a:28:b4:29:62:ca:7a:74:d2:38:f5:ce:04:14:2d: dd:9c:09:1e:58:39:ed:f4:74:cd:f5:cc:41:f6:a8:33:13:74: da:32:ef:94:27:e6:c2:00:2f:09:e8:66:33:0a:cf:d6:91:1c: d7:1c:a0:ac:a6:fe:ed:a9:6d:3f:48:8b:ed:2e:7f:ce:8c:8c: 2d:4d:59:38:85:94:0e:f4:3d:29:f3:42:8e:20:b7:14:a8:9e: 29:48:08:75:01:cf:cd:af:7f:8f:c5:ff:10:3c:88:1d:b8:87: 8f:ed:14:ef:6c:1b:75:a6:c2:40:e9:71:c6:41:61:ec:c2:8d: c0:aa:1e:9e:4d:88:ec:88:a6:d6:67:31:87:56:de:78:3d:17: 02:41:82:5a:9d:06:19:46:21:11:dd:48:58:81:74:fb:e1:89: ae:b9:1b:3a:5c:e9:18:73:6a:ad:53:6c:9b:77:af:ce:60:a3: 67:d0:28:80 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKNyNi9XrCqSGQ8BNverN/GYLSeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MDQwOTI2MzlaFw0yNjA3MDUxMDA0MzlaMDMxMTAvBgNV BAMTKDJGRjQ4RUIxRDEzNEYwMkVFMEM0OTQ4QzcwOTYwMzA2MkM3NkU3ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprWMgpjcMg5GnRvZ2G0HMYFtE MnLLaziuHg48d7fcpdabl9ZHP1F7iojjcnEnxhO4QYf1MDqGMAQn47dX4G412RJu +3HT+gjCUSTiqRSf+xkJgmgKeihjzgmupv/6RjUnbCd36PQJoHj4vZypoqXlJfzw M/idP0zBnQnT7PJo1TxwVJ0p5kYV8mYxGLRXGn9851TruXJklPbqvKESSue0Sp6g jvLa9HDR/x7lERxkoL7WiqnUlR5jo9ogKaJwiZ43jxbQTL45yNg9K8PsTK2qlrWy f4IxZ/t1qBTDyyiIa+dCGNELRcvqVGuTCNYBnDVdEemid6ROKWfKS89FVAXXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUL/SOsdE08C7gxJSMcJYDBix254gwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4EB8eZ+/8/RWIuFp8iR 06UGLe4Ka38vOvsBSSYji1CNN/Rq6fpDZgGjbCxXfQnt62rdNVg8b8Qjdih6/Km6 s3p7Zyix3rW2IRHLiii0KWLKenTSOPXOBBQt3ZwJHlg57fR0zfXMQfaoMxN02jLv lCfmwgAvCehmMwrP1pEc1xygrKb+7altP0iL7S5/zoyMLU1ZOIWUDvQ9KfNCjiC3 FKieKUgIdQHPza9/j8X/EDyIHbiHj+0U72wbdabCQOlxxkFh7MKNwKoenk2I7Iim 1mcxh1beeD0XAkGCWp0GGUYhEd1IWIF0++GJrrkbOlzpGHNqrVNsm3evzmCjZ9Ao gA== -----END CERTIFICATE-----Generated at Sun Jul 5 00:38:03 2026 by rpki-client