$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: a7PUhUxPchiF6fAyxS2CCdYsF30+Q5SohRfXjmPcotM= Subject key identifier: F6:AB:39:FB:29:97:72:24:6F:A7:EA:B0:E1:4A:D6:85:88:6F:D9:7C Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 495099324D1344CD9ED71D5B543093A1985CCD11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04ED Signing time: Fri 29 May 2026 10:06:08 +0000 Manifest this update: Fri 29 May 2026 10:01:08 +0000 Manifest next update: Sat 30 May 2026 11:21:08 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Rz/xeRRux2rYMY2RzfYRjxCVwT/rPqbcO5fs8WnjdCc=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 30 May 2026 11:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:50:99:32:4d:13:44:cd:9e:d7:1d:5b:54:30:93:a1:98:5c:cd:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 29 10:01:08 2026 GMT Not After : May 30 11:21:08 2026 GMT Subject: CN=F6AB39FB299772246FA7EAB0E14AD685886FD97C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:db:09:0d:78:b5:00:09:9f:da:93:0d:f8:91: 8b:0a:bf:63:0f:ed:12:94:d9:15:ef:1a:4e:12:cf: ba:32:40:5a:1e:20:12:c7:af:97:d4:b3:40:e6:41: 79:a1:be:dc:eb:69:2c:3a:49:b6:e8:97:d5:36:32: 32:7b:53:5b:63:e2:85:b9:cd:b6:f6:f2:47:c6:11: 48:ce:34:b9:92:a5:ab:0a:0c:66:a2:fb:ad:8f:f1: 97:ae:c4:7d:8c:d0:52:b7:76:56:46:3f:80:5f:12: fc:2f:87:43:8a:4a:f9:5f:21:38:d4:ca:83:52:61: 03:f2:b8:4a:76:97:47:87:96:36:86:3a:61:b6:ca: ac:05:fa:e2:84:55:2b:18:b5:c2:81:34:a9:a4:14: a8:42:58:2a:9d:d0:af:72:e4:bb:d5:07:84:78:3b: 24:43:4f:ee:d6:a1:e0:b4:7d:5a:ca:99:cb:69:5e: 13:f6:52:67:65:bb:41:0e:99:13:8b:76:6f:b5:da: 03:45:35:7c:24:e5:c2:7a:93:f6:6d:9f:31:c1:13: 29:9e:99:89:f2:4f:77:81:3b:4d:c8:ae:9a:7b:b7: 65:08:a9:a9:7a:e3:81:7d:b5:64:c2:b0:14:6b:fb: 69:b7:12:2b:49:d1:d1:dc:59:a8:07:47:99:e2:d7: 35:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AB:39:FB:29:97:72:24:6F:A7:EA:B0:E1:4A:D6:85:88:6F:D9:7C X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:2a:d8:a6:db:7c:a4:8f:e1:44:23:9e:29:b5:00:7f:0e:eb: d2:a5:ea:de:4c:56:70:d4:a4:48:95:e2:f8:3d:83:83:9f:a0: a1:28:a6:29:69:ad:0b:79:5d:f1:c5:d5:e8:6c:34:5f:d5:e9: 23:c3:5d:80:7d:10:31:ef:2f:b0:67:07:e9:88:ae:d9:f1:82: 7b:b7:19:10:c6:f5:78:92:3a:d5:81:9f:42:8f:65:fb:85:23: f7:5c:19:5d:cb:c3:c1:86:b1:5b:30:15:e8:99:76:ae:08:05: 52:ff:d2:8b:24:f7:6b:fe:6a:be:a6:25:e0:e5:e1:59:3d:c1: 52:2b:d2:aa:56:8a:a5:9b:5e:3b:40:c6:15:a1:fc:15:ab:eb: 0d:fc:8e:7c:b3:77:bd:ca:0f:e5:c3:0f:70:57:d5:e6:8c:2c: 6a:ca:dd:17:31:17:21:b5:c8:7b:12:52:55:cc:3e:af:03:67: 53:f6:07:69:66:f4:61:d4:c7:aa:a4:75:02:cf:9f:9a:96:d3: 24:16:7c:d5:f2:19:9a:7a:67:94:a3:bb:a5:7f:98:cb:e6:1d: fc:2e:86:50:81:73:4d:d7:38:6a:29:02:6b:a8:a7:12:c8:7f: a6:01:a7:dd:8d:77:ea:47:c4:76:7a:30:c6:34:23:c8:d0:89: 76:22:6f:4b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSVCZMk0TRM2e1x1bVDCToZhczREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MjkxMDAxMDhaFw0yNjA1MzAxMTIxMDhaMDMxMTAvBgNV BAMTKEY2QUIzOUZCMjk5NzcyMjQ2RkE3RUFCMEUxNEFENjg1ODg2RkQ5N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82wkNeLUACZ/akw34kYsKv2MP 7RKU2RXvGk4Sz7oyQFoeIBLHr5fUs0DmQXmhvtzraSw6Sbbol9U2MjJ7U1tj4oW5 zbb28kfGEUjONLmSpasKDGai+62P8ZeuxH2M0FK3dlZGP4BfEvwvh0OKSvlfITjU yoNSYQPyuEp2l0eHljaGOmG2yqwF+uKEVSsYtcKBNKmkFKhCWCqd0K9y5LvVB4R4 OyRDT+7WoeC0fVrKmctpXhP2Umdlu0EOmROLdm+12gNFNXwk5cJ6k/ZtnzHBEyme mYnyT3eBO03Irpp7t2UIqal644F9tWTCsBRr+2m3EitJ0dHcWagHR5ni1zVbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU9qs5+ymXciRvp+qw4UrWhYhv2XwwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSrYptt8pI/hRCOeKbUA fw7r0qXq3kxWcNSkSJXi+D2Dg5+goSimKWmtC3ld8cXV6Gw0X9XpI8NdgH0QMe8v sGcH6Yiu2fGCe7cZEMb1eJI61YGfQo9l+4Uj91wZXcvDwYaxWzAV6Jl2rggFUv/S iyT3a/5qvqYl4OXhWT3BUivSqlaKpZteO0DGFaH8FavrDfyOfLN3vcoP5cMPcFfV 5owsasrdFzEXIbXIexJSVcw+rwNnU/YHaWb0YdTHqqR1As+fmpbTJBZ81fIZmnpn lKO7pX+Yy+Yd/C6GUIFzTdc4aikCa6inEsh/pgGn3Y136kfEdnowxjQjyNCJdiJv Sw== -----END CERTIFICATE-----Generated at Fri May 29 17:37:14 2026 by rpki-client