$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: goXb0PNX1uwv3kxbXdaSuL1QmPM+mn1JcR/hp5kz+9Q= Subject key identifier: 3C:D8:6D:6D:82:F3:19:9A:23:0D:7B:D7:38:DF:2B:4F:9B:85:CC:6C Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 57AF1E65B12AF06A5798ABB68FF68EF316A29FC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04D9 Signing time: Thu 14 May 2026 09:39:15 +0000 Manifest this update: Thu 14 May 2026 09:34:15 +0000 Manifest next update: Fri 15 May 2026 13:28:15 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: DhSgBmiLr9sdHF9hxnborEd+ZhQn4RLWCExhBdpamp8=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 15 May 2026 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:af:1e:65:b1:2a:f0:6a:57:98:ab:b6:8f:f6:8e:f3:16:a2:9f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 14 09:34:15 2026 GMT Not After : May 15 13:28:15 2026 GMT Subject: CN=3CD86D6D82F3199A230D7BD738DF2B4F9B85CC6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3a:33:bd:f8:da:97:34:01:74:21:98:f2:92: 40:3a:93:c6:58:f6:ae:d4:8f:fb:e8:a6:3d:84:17: 1b:0a:98:24:2c:38:a6:88:36:76:af:a4:2a:ed:3f: 27:4c:18:fd:74:c9:0f:8a:ad:00:6b:01:7c:a3:b7: ef:b1:db:6d:79:6d:b3:26:79:48:ea:57:f9:b4:e4: 9e:a2:a4:9a:97:5e:16:f7:27:d9:7b:ac:7d:21:e8: 5b:c0:5c:25:0f:dd:3c:5b:0e:41:f4:8f:e9:c8:30: 5e:34:01:85:3f:51:57:06:80:6b:82:34:c5:10:57: b0:aa:00:45:f9:e7:4c:76:f3:05:00:62:27:0c:73: 86:57:f4:57:b9:8a:db:1d:37:02:50:52:f4:f4:14: 9d:cd:ac:06:4a:22:e7:36:1a:93:92:7f:5b:31:77: 09:40:94:e8:ef:59:6b:c6:ef:3a:96:c4:b9:d2:62: db:fd:f3:74:26:b2:2d:39:eb:4a:9f:14:ea:07:cd: 84:61:4d:f9:e7:a6:80:3b:10:9f:88:56:03:83:78: 04:a3:a6:38:98:cd:a5:a3:28:dd:78:7d:06:aa:ff: cb:95:da:ea:b7:c4:54:55:eb:ad:cd:da:ae:b6:26: e5:51:eb:5d:12:df:32:74:b8:7f:8f:86:ca:fd:c9: 10:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D8:6D:6D:82:F3:19:9A:23:0D:7B:D7:38:DF:2B:4F:9B:85:CC:6C X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:90:00:58:a3:c9:41:6f:11:f0:e5:2c:bc:16:9f:01:e0:91: 00:62:8e:0f:2b:e6:39:88:9a:fe:db:8f:e4:b8:83:58:93:2f: ae:21:a3:56:66:4e:e9:8c:d8:a9:f3:59:ab:b2:69:fe:48:22: 9b:a1:66:4c:fe:25:2e:7c:dc:17:c9:10:e3:6d:71:7c:3d:3c: bc:7c:83:a2:25:90:d2:56:9a:2a:85:7d:5b:1f:ea:fe:8e:fd: 2b:20:41:1b:9d:6c:ce:7c:33:ec:06:1d:3d:c8:2a:4c:0c:71: c5:d1:53:97:b0:ae:f9:b9:43:be:45:d2:46:b4:07:f5:49:ab: 94:84:53:49:9a:b3:3b:e1:69:6b:57:80:1e:e2:77:0e:3e:21: 3f:6a:a2:1b:5d:76:7a:84:90:ca:8d:a6:52:42:7b:84:89:92: c4:c7:67:e6:fe:ff:18:11:4d:c9:49:a5:8d:2a:00:9f:bf:56: 1c:35:d1:29:7f:9e:7f:c0:bd:17:af:6c:2c:02:6f:fd:5d:41: 09:dd:59:8c:c3:68:c3:f3:64:8a:68:8b:5e:69:7d:53:2e:5e: f6:a8:e7:77:e3:05:55:e7:68:b0:79:0a:2c:5a:6d:89:ee:5b: 5a:e6:0d:40:fb:cc:33:48:0a:28:64:38:14:0e:ef:2c:db:6e: 16:8c:a8:d9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUV68eZbEq8GpXmKu2j/aO8xain8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MTQwOTM0MTVaFw0yNjA1MTUxMzI4MTVaMDMxMTAvBgNV BAMTKDNDRDg2RDZEODJGMzE5OUEyMzBEN0JENzM4REYyQjRGOUI4NUNDNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVOjO9+NqXNAF0IZjykkA6k8ZY 9q7Uj/vopj2EFxsKmCQsOKaINnavpCrtPydMGP10yQ+KrQBrAXyjt++x2215bbMm eUjqV/m05J6ipJqXXhb3J9l7rH0h6FvAXCUP3TxbDkH0j+nIMF40AYU/UVcGgGuC NMUQV7CqAEX550x28wUAYicMc4ZX9Fe5itsdNwJQUvT0FJ3NrAZKIuc2GpOSf1sx dwlAlOjvWWvG7zqWxLnSYtv983Qmsi0560qfFOoHzYRhTfnnpoA7EJ+IVgODeASj pjiYzaWjKN14fQaq/8uV2uq3xFRV663N2q62JuVR610S3zJ0uH+Phsr9yRCNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPNhtbYLzGZojDXvXON8rT5uFzGwwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJAAWKPJQW8R8OUsvBaf AeCRAGKODyvmOYia/tuP5LiDWJMvriGjVmZO6YzYqfNZq7Jp/kgim6FmTP4lLnzc F8kQ421xfD08vHyDoiWQ0laaKoV9Wx/q/o79KyBBG51sznwz7AYdPcgqTAxxxdFT l7Cu+blDvkXSRrQH9UmrlIRTSZqzO+Fpa1eAHuJ3Dj4hP2qiG112eoSQyo2mUkJ7 hImSxMdn5v7/GBFNyUmljSoAn79WHDXRKX+ef8C9F69sLAJv/V1BCd1ZjMNow/Nk imiLXml9Uy5e9qjnd+MFVedosHkKLFptie5bWuYNQPvMM0gKKGQ4FA7vLNtuFoyo 2Q== -----END CERTIFICATE-----Generated at Thu May 14 14:42:48 2026 by rpki-client