$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 0uzo0dq5o9N5NVTjGY501I43cfNBWKeMl18L5lPnols= Subject key identifier: 70:29:4D:80:AF:45:4C:0D:84:62:1A:F4:9D:ED:02:22:A7:42:4C:B8 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 0BE80786846608C3B1781C497750A1BA035F8A5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 054A Signing time: Sat 08 Aug 2026 08:39:08 +0000 Manifest this update: Sat 08 Aug 2026 08:34:08 +0000 Manifest next update: Sun 09 Aug 2026 08:44:08 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: qkWoUVGbnM2LO+2i7MpZbvI3Uau9TugmfXl1FZ2R3pc=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 09 Aug 2026 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e8:07:86:84:66:08:c3:b1:78:1c:49:77:50:a1:ba:03:5f:8a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 8 08:34:08 2026 GMT Not After : Aug 9 08:44:08 2026 GMT Subject: CN=70294D80AF454C0D84621AF49DED0222A7424CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e5:03:fa:11:da:ca:7f:69:b3:41:33:48:73: 66:c6:fe:58:b9:99:c6:f5:5c:20:c6:ef:9b:db:69: 6c:25:0b:b3:54:10:11:db:88:ac:c8:e5:59:ed:56: bb:d8:b8:67:e0:6b:0f:62:96:cd:c2:93:f4:ef:19: e6:18:b0:70:13:fd:a4:f1:f0:88:15:f3:ed:58:09: 1e:59:a3:af:90:e5:d5:c0:61:47:68:86:d5:b4:89: 8a:19:21:bf:07:6d:dc:1c:cf:83:40:df:fc:b2:df: 9c:d7:c4:20:d2:1a:db:95:d5:37:80:ef:3a:d5:0a: ca:19:b4:d0:d8:40:d1:09:fc:83:0f:80:b4:13:fa: e0:8d:e5:ca:d2:51:45:66:9e:0f:46:25:1b:2d:64: 46:26:a2:cf:57:cf:55:09:3a:e6:46:6c:10:28:2b: 80:1a:42:e3:e4:b7:df:58:1b:d8:3e:e8:2c:35:ce: 4f:68:f1:c9:f8:b8:ae:37:9f:ce:9d:d5:a4:cf:c0: 4a:1d:36:79:92:99:73:64:81:3a:dd:92:0d:78:0d: c6:39:bd:09:24:2b:67:10:ad:34:ac:5c:db:44:5d: 95:80:df:fb:ca:d6:fa:9d:5e:e9:5f:5d:0d:dd:be: d0:42:35:fa:a6:89:b3:00:c0:3b:23:0d:c0:a9:eb: 2e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:29:4D:80:AF:45:4C:0D:84:62:1A:F4:9D:ED:02:22:A7:42:4C:B8 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e2:0c:51:f2:76:b6:60:55:c7:95:cf:1b:a9:97:67:f4:a8: 7d:92:af:b9:8c:cd:b2:b9:c4:82:bc:57:00:8f:8a:eb:b1:ac: f3:9e:9d:3a:7b:70:f8:ad:54:6e:5e:65:20:41:2a:51:75:f6: be:c1:f1:f8:83:cb:67:19:87:39:9e:af:9f:ac:72:60:63:b8: 9c:d9:cc:30:de:a4:a4:87:7c:d4:fc:e1:f8:7c:ac:69:b2:13: e6:f0:2d:a9:ef:d2:16:89:5e:6b:9c:17:85:ad:c3:22:7f:52: 18:00:f1:a6:98:1c:13:67:35:4c:1f:00:ad:7a:ad:10:24:75: df:12:d7:14:b4:87:31:f2:f2:79:3d:2f:52:4d:94:6f:54:43: b0:2c:af:84:a4:c6:0f:4d:a7:0f:3e:e9:30:f8:95:02:df:6e: 4c:ac:f2:66:ac:a5:fb:a6:2b:8f:30:54:f9:45:bc:41:e0:84: cb:d3:46:d7:a0:8a:a1:3a:94:65:13:dc:28:f3:1d:3e:80:1a: 82:07:23:80:e4:b2:99:8d:f4:93:7e:c5:d4:60:97:08:81:94: 0d:9f:f1:7c:93:c8:2f:dc:c1:e2:32:a8:06:b5:43:1a:b3:f0: 2e:d4:71:b8:c1:b5:ce:8c:cc:71:fd:f6:88:70:b9:6c:be:08: d8:46:75:89 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUC+gHhoRmCMOxeBxJd1ChugNfil0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MDgwODM0MDhaFw0yNjA4MDkwODQ0MDhaMDMxMTAvBgNV BAMTKDcwMjk0RDgwQUY0NTRDMEQ4NDYyMUFGNDlERUQwMjIyQTc0MjRDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi5QP6EdrKf2mzQTNIc2bG/li5 mcb1XCDG75vbaWwlC7NUEBHbiKzI5VntVrvYuGfgaw9ils3Ck/TvGeYYsHAT/aTx 8IgV8+1YCR5Zo6+Q5dXAYUdohtW0iYoZIb8Hbdwcz4NA3/yy35zXxCDSGtuV1TeA 7zrVCsoZtNDYQNEJ/IMPgLQT+uCN5crSUUVmng9GJRstZEYmos9Xz1UJOuZGbBAo K4AaQuPkt99YG9g+6Cw1zk9o8cn4uK43n86d1aTPwEodNnmSmXNkgTrdkg14DcY5 vQkkK2cQrTSsXNtEXZWA3/vK1vqdXulfXQ3dvtBCNfqmibMAwDsjDcCp6y6XAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUcClNgK9FTA2EYhr0ne0CIqdCTLgwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOIMUfJ2tmBVx5XPG6mX Z/SofZKvuYzNsrnEgrxXAI+K67Gs856dOntw+K1Ubl5lIEEqUXX2vsHx+IPLZxmH OZ6vn6xyYGO4nNnMMN6kpId81Pzh+HysabIT5vAtqe/SFolea5wXha3DIn9SGADx ppgcE2c1TB8ArXqtECR13xLXFLSHMfLyeT0vUk2Ub1RDsCyvhKTGD02nDz7pMPiV At9uTKzyZqyl+6YrjzBU+UW8QeCEy9NG16CKoTqUZRPcKPMdPoAaggcjgOSymY30 k37F1GCXCIGUDZ/xfJPIL9zB4jKoBrVDGrPwLtRxuMG1zozMcf32iHC5bL4I2EZ1 iQ== -----END CERTIFICATE-----Generated at Sat Aug 8 10:05:24 2026 by rpki-client