$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: vNzbtRKOzAVFEmRblidikrlSMP+6jsecHgvyYH/d4rQ= Subject key identifier: 42:0F:70:DD:0F:6E:02:A9:8B:9B:C8:C0:E8:CD:B7:2F:AE:B8:5A:BD Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 4FEA540F3FABF933F0FEC12C5A287D030A70412D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04F8 Signing time: Sat 06 Jun 2026 17:15:55 +0000 Manifest this update: Sat 06 Jun 2026 17:10:55 +0000 Manifest next update: Sun 07 Jun 2026 20:23:55 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: wbolnbHS6ku/S6+BnM7+99RVcIppYjV5Z9ZGYfp7JKo=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Jun 2026 20:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ea:54:0f:3f:ab:f9:33:f0:fe:c1:2c:5a:28:7d:03:0a:70:41:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 6 17:10:55 2026 GMT Not After : Jun 7 20:23:55 2026 GMT Subject: CN=420F70DD0F6E02A98B9BC8C0E8CDB72FAEB85ABD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:74:5f:ef:41:4c:d3:63:4f:4a:42:b0:2a:09: 48:3b:bc:77:22:50:da:c4:83:6a:5f:9e:8e:6c:e0: 0b:62:f9:88:b8:50:58:ba:57:00:6d:2f:a0:4d:4b: 55:5a:c6:e7:8b:41:8d:4c:05:c3:da:8d:17:4e:3d: 62:61:86:91:77:0e:9f:23:62:ee:01:da:d3:82:ec: 56:e6:db:c5:0b:05:4c:00:03:ad:90:ee:8c:7f:4f: cf:c5:33:55:1c:0c:34:ea:21:79:57:07:77:8e:1f: f2:04:f2:cf:af:fd:aa:77:67:e6:9b:ef:88:50:d6: 2c:af:e9:f1:3e:c4:c9:53:b7:5d:8b:3c:c5:41:aa: cf:d2:0e:f1:fd:b8:f9:8d:7a:2f:1e:23:90:25:1c: 2a:02:e3:87:5c:a0:b3:18:2c:59:9c:d2:b6:c8:91: e7:c8:82:47:1a:38:54:a3:57:bf:22:ad:c6:b0:94: 49:9f:9e:c9:72:39:e1:b6:0b:35:02:a2:52:7a:73: dc:28:3a:99:74:6f:bd:9e:d0:e9:b2:43:24:78:11: 68:a6:f5:df:df:9e:ab:e9:97:79:03:a4:21:1b:d5: 82:88:4d:da:c8:f0:de:ee:c3:8a:1e:f6:55:9f:e3: 3e:97:94:f2:b7:2f:3e:1b:9b:5a:9d:1a:07:5a:02: 6c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0F:70:DD:0F:6E:02:A9:8B:9B:C8:C0:E8:CD:B7:2F:AE:B8:5A:BD X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:92:3c:ad:55:61:9d:80:7e:86:66:a5:6c:2d:3a:5f:2d:aa: f1:f8:f1:4a:89:b4:8c:f7:64:55:e4:d4:29:1d:05:13:65:6a: da:aa:8b:3a:bd:5d:27:5c:3c:93:d5:12:ae:0a:e4:d3:65:2a: 3b:e2:bf:6d:da:7b:5f:09:98:6d:62:03:94:19:25:4c:88:d7: fc:d3:32:61:80:6e:36:9d:96:61:0a:ea:df:ee:e1:c2:47:ab: a3:fe:86:53:36:9d:8d:d3:55:20:8b:65:6d:1b:20:a6:ca:00: 1f:41:58:cc:3d:2c:53:2c:f7:cd:1c:83:33:7a:50:4b:8f:1b: ae:e0:71:ce:21:40:18:06:8c:79:69:d7:70:75:94:a2:25:29: 54:d0:3b:ee:a5:ee:f4:9b:57:50:00:36:9c:9a:44:42:c3:38: 94:f4:c4:13:7c:47:19:e9:40:96:31:91:36:56:16:7e:91:9b: e6:28:c5:c8:84:66:5b:10:0f:48:37:8b:b9:9a:fc:c3:42:8b: 50:70:a9:34:7d:24:d6:fc:00:d6:e4:9e:1f:f3:22:9f:2d:c1: f8:e8:03:ab:c3:3a:8f:73:ab:72:9b:0e:d2:ad:11:30:d9:bf: 6b:73:39:72:04:8d:05:8c:de:e6:f7:bd:d5:d8:0c:45:2c:6a: 5a:b1:b7:fb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUT+pUDz+r+TPw/sEsWih9AwpwQS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MDYxNzEwNTVaFw0yNjA2MDcyMDIzNTVaMDMxMTAvBgNV BAMTKDQyMEY3MEREMEY2RTAyQTk4QjlCQzhDMEU4Q0RCNzJGQUVCODVBQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRdF/vQUzTY09KQrAqCUg7vHci UNrEg2pfno5s4Ati+Yi4UFi6VwBtL6BNS1VaxueLQY1MBcPajRdOPWJhhpF3Dp8j Yu4B2tOC7Fbm28ULBUwAA62Q7ox/T8/FM1UcDDTqIXlXB3eOH/IE8s+v/ap3Z+ab 74hQ1iyv6fE+xMlTt12LPMVBqs/SDvH9uPmNei8eI5AlHCoC44dcoLMYLFmc0rbI kefIgkcaOFSjV78ircawlEmfnslyOeG2CzUColJ6c9woOpl0b72e0OmyQyR4EWim 9d/fnqvpl3kDpCEb1YKITdrI8N7uw4oe9lWf4z6XlPK3Lz4bm1qdGgdaAmxBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQg9w3Q9uAqmLm8jA6M23L664Wr0wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZI8rVVhnYB+hmalbC06 Xy2q8fjxSom0jPdkVeTUKR0FE2Vq2qqLOr1dJ1w8k9USrgrk02UqO+K/bdp7XwmY bWIDlBklTIjX/NMyYYBuNp2WYQrq3+7hwkero/6GUzadjdNVIItlbRsgpsoAH0FY zD0sUyz3zRyDM3pQS48bruBxziFAGAaMeWnXcHWUoiUpVNA77qXu9JtXUAA2nJpE QsM4lPTEE3xHGelAljGRNlYWfpGb5ijFyIRmWxAPSDeLuZr8w0KLUHCpNH0k1vwA 1uSeH/Miny3B+OgDq8M6j3OrcpsO0q0RMNm/a3M5cgSNBYze5ve91dgMRSxqWrG3 +w== -----END CERTIFICATE-----Generated at Sun Jun 7 02:57:48 2026 by rpki-client