$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: Dy9iFm8+L/rNichEGIPOQFb32WxDyqQ1DXWyGfylfpQ= Subject key identifier: BA:9F:38:83:4F:E9:D1:FD:02:F3:2B:18:0E:9B:54:3E:C1:A0:BB:F0 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 2C9C595A16490E65EB7C9678648770D5CDAB3CC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04AD Signing time: Sat 11 Apr 2026 10:16:13 +0000 Manifest this update: Sat 11 Apr 2026 10:11:13 +0000 Manifest next update: Sun 12 Apr 2026 12:51:13 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: PwxKTkkRcpezv4ogfMTLyH2edyd126lddeOOZXFK52w=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 12 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:9c:59:5a:16:49:0e:65:eb:7c:96:78:64:87:70:d5:cd:ab:3c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 11 10:11:13 2026 GMT Not After : Apr 12 12:51:13 2026 GMT Subject: CN=BA9F38834FE9D1FD02F32B180E9B543EC1A0BBF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:de:b4:48:95:cf:ab:ad:d4:89:b3:03:7d:7b: e3:d5:46:92:9d:9a:dc:f4:f4:56:6b:e6:0d:c2:df: c6:24:34:b9:0e:96:04:d1:f9:1d:b8:02:39:a2:7f: d3:89:b8:a8:3e:d6:0f:f7:e1:88:5e:53:de:dc:2f: 7c:c2:65:84:da:5b:dc:46:94:de:db:91:8e:2f:84: 89:93:47:32:41:18:d0:d5:f5:7a:f8:fb:8a:95:ef: f6:2b:e3:20:8c:62:9d:e7:4f:be:9b:64:27:9a:31: fd:59:e5:82:8a:e4:db:d3:33:cf:f1:4d:06:de:e7: 15:53:8e:be:5e:fb:dc:31:21:0f:b9:e4:79:e9:64: 8e:9f:ea:1d:c6:cd:d1:c9:14:0a:b7:a2:d4:6a:da: cd:21:50:8b:63:ee:43:c4:3e:39:f4:2a:74:8c:57: f0:24:a7:34:ad:9c:65:f4:7b:f3:f7:13:01:6c:2c: 36:49:a4:53:b9:c7:df:9d:90:8e:3b:4e:44:f8:9b: a7:c0:3b:6c:c2:b1:c7:e6:fc:b1:aa:1e:57:9e:8f: 2c:ee:13:b8:f4:55:ba:14:be:a6:ce:1c:9f:7a:fb: 62:3a:c3:5c:c3:ac:e1:d7:ee:fe:15:35:05:a4:b3: 21:59:6b:13:cb:24:17:bb:b6:77:ba:7b:ce:8e:97: b8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9F:38:83:4F:E9:D1:FD:02:F3:2B:18:0E:9B:54:3E:C1:A0:BB:F0 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f1:91:23:4f:97:25:7c:a8:2f:ee:a0:f7:3c:ed:cd:45:f9: d7:c2:02:f0:c9:ae:b7:fb:29:c2:fe:e2:bb:95:82:94:82:37: a8:3f:b2:0b:e2:82:29:ed:0c:74:cd:32:64:e9:a5:88:96:27: 08:c9:29:c2:e7:2f:7f:15:f8:2f:4a:28:6d:b9:f8:5a:d8:fd: 89:d2:31:e7:00:0c:ae:46:eb:28:5f:0f:ad:dd:9e:9a:cd:4c: f4:58:bc:f1:d5:9f:a4:3d:f7:53:1c:33:41:47:ed:8a:8d:e6: 89:fd:33:4b:3c:f7:c7:d8:c9:4f:ea:77:7b:43:04:39:93:b1: ae:20:35:65:91:f4:05:56:f2:ba:4f:16:77:a5:1e:68:5b:5b: ec:96:f1:38:2f:cb:24:61:49:58:f3:9b:dc:65:e7:ac:85:c0: e5:d1:33:86:66:ac:8f:6f:bc:ee:06:b7:4e:b3:01:78:c1:a8: 2c:0f:34:9f:90:dd:ba:da:ba:b8:9d:9d:96:b4:14:66:fb:7e: 5f:9b:98:ed:4e:43:70:9b:c4:0c:eb:77:ae:52:11:46:23:4b: 6e:ef:cc:18:af:d0:95:d5:1c:80:29:17:2b:4d:77:0d:ab:5c: b4:46:d5:8a:96:6d:2f:fb:7b:2b:6b:99:ee:e6:55:c9:63:91: 45:f1:fe:ea -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULJxZWhZJDmXrfJZ4ZIdw1c2rPMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA0MTExMDExMTNaFw0yNjA0MTIxMjUxMTNaMDMxMTAvBgNV BAMTKEJBOUYzODgzNEZFOUQxRkQwMkYzMkIxODBFOUI1NDNFQzFBMEJCRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV3rRIlc+rrdSJswN9e+PVRpKd mtz09FZr5g3C38YkNLkOlgTR+R24Ajmif9OJuKg+1g/34YheU97cL3zCZYTaW9xG lN7bkY4vhImTRzJBGNDV9Xr4+4qV7/Yr4yCMYp3nT76bZCeaMf1Z5YKK5NvTM8/x TQbe5xVTjr5e+9wxIQ+55HnpZI6f6h3GzdHJFAq3otRq2s0hUItj7kPEPjn0KnSM V/AkpzStnGX0e/P3EwFsLDZJpFO5x9+dkI47TkT4m6fAO2zCscfm/LGqHleejyzu E7j0VboUvqbOHJ96+2I6w1zDrOHX7v4VNQWksyFZaxPLJBe7tne6e86Ol7ipAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUup84g0/p0f0C8ysYDptUPsGgu/AwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPGRI0+XJXyoL+6g9zzt zUX518IC8Mmut/spwv7iu5WClII3qD+yC+KCKe0MdM0yZOmliJYnCMkpwucvfxX4 L0oobbn4Wtj9idIx5wAMrkbrKF8Prd2ems1M9Fi88dWfpD33UxwzQUftio3mif0z Szz3x9jJT+p3e0MEOZOxriA1ZZH0BVbyuk8Wd6UeaFtb7JbxOC/LJGFJWPOb3GXn rIXA5dEzhmasj2+87ga3TrMBeMGoLA80n5Ddutq6uJ2dlrQUZvt+X5uY7U5DcJvE DOt3rlIRRiNLbu/MGK/QldUcgCkXK013DatctEbVipZtL/t7K2uZ7uZVyWORRfH+ 6g== -----END CERTIFICATE-----Generated at Sat Apr 11 12:03:50 2026 by rpki-client