$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: eYQBgkE+4nW4/g7NTZV/FY2cj5S48x8uG1hD/zAUBm4= Subject key identifier: F2:0B:9D:40:22:85:7F:88:34:57:85:7F:8D:05:09:AA:69:1A:F9:AE Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 5AFB97E2DB03445AB2595E7EB42BD2B7C0BAA480 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 048E Signing time: Thu 19 Mar 2026 04:09:52 +0000 Manifest this update: Thu 19 Mar 2026 04:04:52 +0000 Manifest next update: Fri 20 Mar 2026 07:38:52 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: kPmhR6eoV+8RO7h5d20YMo3/ySC3XUSOr406oKzouMA=) 7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Mar 2026 07:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:fb:97:e2:db:03:44:5a:b2:59:5e:7e:b4:2b:d2:b7:c0:ba:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Mar 19 04:04:52 2026 GMT Not After : Mar 20 07:38:52 2026 GMT Subject: CN=F20B9D4022857F883457857F8D0509AA691AF9AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4b:27:c8:4c:95:80:96:45:4b:62:fb:75:4a: 2e:d7:32:30:9e:2f:ff:f7:c6:41:8a:87:ef:4a:a7: fe:37:0b:81:69:90:f1:d2:25:52:4f:3f:52:15:df: 28:c2:74:f2:42:c7:a8:88:21:ef:f6:fb:6b:d5:2e: 93:f8:a8:19:e8:0d:c9:e4:3d:da:e8:83:76:05:93: 0f:a3:ee:ad:fb:22:01:b7:16:c2:66:93:f9:35:6c: 72:2f:fc:e8:c6:54:d9:1b:1f:53:ad:fd:79:48:09: 74:ed:fa:95:40:97:f5:eb:05:53:8e:15:a8:41:01: 59:0e:c1:65:17:06:df:fc:b4:99:e2:e8:be:fb:bf: 85:69:99:ef:2f:14:30:43:6d:ca:38:d0:15:6e:9b: 2f:bb:a1:5a:ab:ef:8e:ef:1e:a1:20:ba:fb:7d:d2: b8:da:91:62:ca:db:f3:f5:97:98:15:fe:81:1e:17: 1d:0d:12:f6:67:de:1a:7d:86:d9:bf:94:bf:1f:20: c9:88:c8:95:a9:3a:9c:cf:d2:e9:c7:08:eb:7b:9f: 99:7d:bb:c0:07:5e:5d:4f:fc:38:d9:40:77:80:9f: 51:07:88:02:56:02:30:be:9a:1c:a1:8c:6d:4d:d4: b8:4e:e9:6d:94:ec:93:3e:8b:52:8b:1a:63:02:5f: cf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0B:9D:40:22:85:7F:88:34:57:85:7F:8D:05:09:AA:69:1A:F9:AE X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a4:af:53:e5:ee:87:4f:04:bc:d5:4e:eb:da:f3:d4:da:95: 55:80:b1:a0:40:53:2f:dd:56:dd:1c:ad:79:2e:44:a6:19:da: ba:5d:27:27:b9:fe:c1:07:3b:1b:de:f2:68:bd:47:94:59:8f: f9:61:aa:06:1e:34:7e:8c:12:c3:0d:d8:88:14:67:db:43:ba: fd:49:5b:91:3b:65:ba:0f:f4:b6:17:29:36:e4:52:42:93:70: a6:5e:95:38:8e:eb:64:2c:63:4a:20:97:d2:b3:e8:99:4b:8e: b5:85:1e:23:d5:9c:78:e7:cd:41:7e:31:c3:f6:b9:0a:07:f9: e2:5d:51:ef:6d:2c:23:6b:ca:8d:11:bb:17:c7:86:58:dd:c3: 14:61:9c:ff:9c:ad:7a:f6:0a:1a:d7:49:6d:38:6e:33:1e:e0: 6f:60:59:2f:aa:0e:48:4b:96:0b:bb:d9:6d:0d:47:75:67:fb: a1:1b:d0:c1:33:a4:29:44:35:c7:46:41:88:3d:9c:01:84:e9: bb:0a:f2:f1:5a:7e:95:03:67:ab:9c:81:aa:2f:cf:0f:8e:f0: 15:be:f0:bb:ec:1d:ff:62:33:e6:78:80:af:7c:d0:35:47:8b: ba:4c:18:5d:c2:50:5c:ea:d3:0d:19:0a:d4:25:46:c9:fa:b2: 8d:9c:18:1d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWvuX4tsDRFqyWV5+tCvSt8C6pIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAzMTkwNDA0NTJaFw0yNjAzMjAwNzM4NTJaMDMxMTAvBgNV BAMTKEYyMEI5RDQwMjI4NTdGODgzNDU3ODU3RjhEMDUwOUFBNjkxQUY5QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqSyfITJWAlkVLYvt1Si7XMjCe L//3xkGKh+9Kp/43C4FpkPHSJVJPP1IV3yjCdPJCx6iIIe/2+2vVLpP4qBnoDcnk Pdrog3YFkw+j7q37IgG3FsJmk/k1bHIv/OjGVNkbH1Ot/XlICXTt+pVAl/XrBVOO FahBAVkOwWUXBt/8tJni6L77v4Vpme8vFDBDbco40BVumy+7oVqr747vHqEguvt9 0rjakWLK2/P1l5gV/oEeFx0NEvZn3hp9htm/lL8fIMmIyJWpOpzP0unHCOt7n5l9 u8AHXl1P/DjZQHeAn1EHiAJWAjC+mhyhjG1N1LhO6W2U7JM+i1KLGmMCX8+xAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU8gudQCKFf4g0V4V/jQUJqmka+a4wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqSvU+Xuh08EvNVO69rz 1NqVVYCxoEBTL91W3RyteS5Ephnaul0nJ7n+wQc7G97yaL1HlFmP+WGqBh40fowS ww3YiBRn20O6/UlbkTtlug/0thcpNuRSQpNwpl6VOI7rZCxjSiCX0rPomUuOtYUe I9WceOfNQX4xw/a5Cgf54l1R720sI2vKjRG7F8eGWN3DFGGc/5ytevYKGtdJbThu Mx7gb2BZL6oOSEuWC7vZbQ1HdWf7oRvQwTOkKUQ1x0ZBiD2cAYTpuwry8Vp+lQNn q5yBqi/PD47wFb7wu+wd/2Iz5niAr3zQNUeLukwYXcJQXOrTDRkK1CVGyfqyjZwY HQ== -----END CERTIFICATE-----Generated at Thu Mar 19 18:35:32 2026 by rpki-client