$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: M78+NqnnzXMtHG6qDTIjmKJ9OvfWQQFk7aeQcYMdBrM= Subject key identifier: FE:D4:10:61:76:C4:B6:1D:37:BC:0B:0D:44:4A:6E:CC:E9:BB:E5:CA Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 3C04A3D97949E236F7C57D9FCDC83B9022BB31C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0539 Signing time: Sun 26 Jul 2026 05:26:12 +0000 Manifest this update: Sun 26 Jul 2026 05:21:12 +0000 Manifest next update: Mon 27 Jul 2026 07:00:12 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: B/FMgOsU7C1hmdNrVYksgnEtu7BM3GRI/XWW1QL5nf0=) 6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 07:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:04:a3:d9:79:49:e2:36:f7:c5:7d:9f:cd:c8:3b:90:22:bb:31:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 26 05:21:12 2026 GMT Not After : Jul 27 07:00:12 2026 GMT Subject: CN=FED4106176C4B61D37BC0B0D444A6ECCE9BBE5CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:61:91:2b:45:4c:3f:18:0f:b2:b1:4c:de:3f: 7d:d7:5d:df:11:b8:0d:37:c7:0d:78:77:c5:57:5a: c5:c9:2c:ef:f6:90:ac:97:63:a2:a9:d9:bf:1e:08: a4:ac:d0:82:f4:5a:4b:5f:b7:d7:ac:63:d8:b6:37: e0:b9:7b:96:0f:fe:75:48:d9:33:96:87:cb:73:04: c8:ec:d2:4e:56:aa:73:b9:82:3b:32:53:5b:08:60: 6c:9a:50:21:09:69:ba:ca:11:f8:06:0a:7a:59:84: 85:b6:08:ca:e9:45:a2:c9:3c:82:51:c7:84:f3:a2: cf:aa:cd:af:2c:f3:e5:f0:cd:5e:74:0d:b1:53:c5: de:3c:8d:1c:b2:ab:40:4e:47:b1:9b:34:b3:c8:cb: 3b:53:c3:74:02:f7:ad:7d:c7:e4:0f:6f:2d:1c:5c: 7e:3e:11:ad:3a:4a:97:dd:94:99:c5:3a:4e:4a:22: 96:94:0e:b5:65:34:b0:ca:ac:1d:10:05:66:1c:cd: 7c:23:66:56:f9:f7:34:d4:cc:2b:89:1c:de:f6:ed: ec:83:6f:76:de:07:ca:6d:ec:1c:8d:7c:a1:e7:29: 29:5a:6f:df:6f:6b:a8:9c:26:38:52:97:cd:3c:f6: 44:3e:cb:6b:64:87:ae:38:26:92:81:c5:cf:38:66: cf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D4:10:61:76:C4:B6:1D:37:BC:0B:0D:44:4A:6E:CC:E9:BB:E5:CA X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:cd:50:8b:76:79:0b:37:26:ae:0f:39:11:16:a9:e7:dc:26: e4:be:16:83:cc:a5:cb:be:c4:c2:8e:27:d8:a8:86:2c:81:8f: 12:99:43:36:cd:2a:41:31:f3:fa:d8:cb:41:b0:37:4a:d2:00: 45:46:ce:5e:c4:b0:95:b1:ca:bf:f2:7b:a8:1e:f1:44:9c:d2: d7:4f:f2:8b:00:c1:84:70:b9:66:bc:9c:4d:a4:66:bd:d9:08: 65:1c:b0:f0:31:a6:89:75:67:7a:e0:82:29:1f:bd:e2:b2:31: 8e:c3:be:89:9b:36:b4:14:be:d3:7b:78:de:ee:45:41:de:bd: 11:0f:65:0d:59:d8:de:4b:dd:e8:c1:78:ec:e4:8f:40:5e:93: 07:c3:4a:bf:04:9e:46:23:6e:64:fa:c7:51:7c:9d:8c:16:bd: 5e:68:be:87:e1:05:48:72:2c:de:35:97:fd:90:66:94:7b:45: 3e:a1:a8:fc:07:a6:da:7c:9f:0e:e0:29:12:75:82:82:6c:73: a5:64:7d:a5:fd:47:6a:5f:76:a2:4a:32:32:ac:73:1c:ac:d6: f3:74:84:fc:3e:62:25:b8:b6:ec:b4:26:a1:74:37:26:ba:fd: 5b:fb:d3:24:a8:cc:3e:67:59:24:ba:ae:94:a6:d2:47:cf:e4: f3:31:c3:c0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPASj2XlJ4jb3xX2fzcg7kCK7McMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MjYwNTIxMTJaFw0yNjA3MjcwNzAwMTJaMDMxMTAvBgNV BAMTKEZFRDQxMDYxNzZDNEI2MUQzN0JDMEIwRDQ0NEE2RUNDRTlCQkU1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfYZErRUw/GA+ysUzeP33XXd8R uA03xw14d8VXWsXJLO/2kKyXY6Kp2b8eCKSs0IL0Wktft9esY9i2N+C5e5YP/nVI 2TOWh8tzBMjs0k5WqnO5gjsyU1sIYGyaUCEJabrKEfgGCnpZhIW2CMrpRaLJPIJR x4Tzos+qza8s8+XwzV50DbFTxd48jRyyq0BOR7GbNLPIyztTw3QC9619x+QPby0c XH4+Ea06SpfdlJnFOk5KIpaUDrVlNLDKrB0QBWYczXwjZlb59zTUzCuJHN727eyD b3beB8pt7ByNfKHnKSlab99va6icJjhSl8089kQ+y2tkh644JpKBxc84Zs+dAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/tQQYXbEth03vAsNREpuzOm75cowHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW81Qi3Z5Czcmrg85ERap 59wm5L4Wg8yly77Ewo4n2KiGLIGPEplDNs0qQTHz+tjLQbA3StIARUbOXsSwlbHK v/J7qB7xRJzS10/yiwDBhHC5ZrycTaRmvdkIZRyw8DGmiXVneuCCKR+94rIxjsO+ iZs2tBS+03t43u5FQd69EQ9lDVnY3kvd6MF47OSPQF6TB8NKvwSeRiNuZPrHUXyd jBa9Xmi+h+EFSHIs3jWX/ZBmlHtFPqGo/Aem2nyfDuApEnWCgmxzpWR9pf1Hal92 okoyMqxzHKzW83SE/D5iJbi27LQmoXQ3Jrr9W/vTJKjMPmdZJLqulKbSR8/k8zHD wA== -----END CERTIFICATE-----Generated at Sun Jul 26 19:28:17 2026 by rpki-client