$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: YfoectvfehPkV7qri7Tj4vCUgQgHNJ5Ht5+LP4zon3Q= Subject key identifier: 75:B8:5A:3E:FB:0E:D4:93:BC:67:AC:B0:F1:3B:BC:E3:71:4A:9C:1B Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 448BE1258414CF40ED0B9D875EFD7B55EA8EB60D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 052A Signing time: Tue 14 Jul 2026 17:11:04 +0000 Manifest this update: Tue 14 Jul 2026 17:06:04 +0000 Manifest next update: Wed 15 Jul 2026 20:40:04 +0000 Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: nbFEwJYvB/nleFepVQIrx08IuJvK7b6OPDaI3yoqTW4=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 15 Jul 2026 20:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8b:e1:25:84:14:cf:40:ed:0b:9d:87:5e:fd:7b:55:ea:8e:b6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 14 17:06:04 2026 GMT Not After : Jul 15 20:40:04 2026 GMT Subject: CN=75B85A3EFB0ED493BC67ACB0F13BBCE3714A9C1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5d:30:f1:8e:4d:e5:a3:56:ff:aa:c8:a4:ae: 57:7b:50:02:b4:01:db:25:de:f8:2d:1b:ad:23:34: c5:61:7f:b0:ae:81:ff:61:ac:4b:01:55:1a:5a:43: 30:84:bd:dc:ff:40:85:11:78:64:c3:78:ea:b3:a9: 74:ae:50:b4:56:ff:3d:9d:1f:af:df:20:09:44:ed: 74:e7:55:46:c6:e6:0b:76:ee:46:71:99:2a:56:41: cf:f2:69:c8:9a:bf:dd:48:5b:51:4b:a0:e8:93:4f: d9:12:2e:07:8c:67:de:84:d8:e5:a1:2a:e6:d6:95: b3:fc:d7:c7:54:11:3b:47:5b:4b:13:05:28:ca:83: 70:df:81:0b:74:48:c8:16:c1:99:32:78:91:91:4e: 0c:51:fd:3a:62:c3:87:9b:f3:25:5c:0a:83:95:23: 18:96:e3:c3:47:5d:2f:1e:5e:95:ad:04:29:f4:5d: 56:e6:e1:f5:a3:33:79:ba:32:f0:d0:02:68:5a:df: 8f:8e:0a:e9:af:bc:02:36:78:37:0c:4a:68:89:e2: e1:a9:ba:ba:62:1f:0b:15:93:a4:4c:57:52:1f:b8: 2a:b1:03:85:c7:e1:1d:c8:59:54:a1:1c:07:b5:e0: 73:ff:c5:c4:5d:04:03:4b:88:95:30:13:27:06:72: ca:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B8:5A:3E:FB:0E:D4:93:BC:67:AC:B0:F1:3B:BC:E3:71:4A:9C:1B X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:af:26:7d:42:77:c2:e0:05:52:21:65:ce:8b:74:42:cc:9b: 84:fd:88:b4:50:d7:42:b6:15:9d:f0:3b:92:e9:76:72:1d:60: 82:5c:e0:a5:43:54:d0:2b:bc:b3:0d:4c:ff:77:22:32:0f:b9: 91:4e:9e:40:91:c2:87:51:84:17:2c:fa:b7:e4:b5:12:68:cd: b5:b1:90:8f:95:c4:94:b8:40:0f:9f:9d:15:e0:34:f1:fb:96: 6f:dc:e6:1e:34:3a:a1:19:9b:d0:3a:d2:de:c0:f7:54:a9:e3: f7:53:62:f2:7b:21:f6:2b:9e:51:fd:28:16:8d:63:4e:04:97: e4:b5:62:a6:c3:8a:92:44:b7:b1:19:fc:62:b8:2e:1b:d5:a3: c3:ab:35:42:c7:aa:19:dd:ef:74:d8:81:89:f0:c3:f4:7d:fd: 4f:83:6b:b0:3d:2b:a5:94:92:6d:4c:30:24:cb:db:bd:31:2d: 70:0b:90:bd:15:6b:9b:35:b8:55:3f:48:d0:f4:d4:05:50:bf: a5:e5:57:a5:b3:a1:44:a3:bb:2e:16:6d:dd:4c:b3:81:f2:2a: 2f:cb:dc:9c:28:b5:7c:30:11:21:47:7d:c3:83:14:76:d0:61: c8:55:98:b7:86:73:48:d9:c5:45:38:32:7f:d6:43:90:f6:6a: b1:69:27:1c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURIvhJYQUz0DtC52HXv17VeqOtg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MTQxNzA2MDRaFw0yNjA3MTUyMDQwMDRaMDMxMTAvBgNV BAMTKDc1Qjg1QTNFRkIwRUQ0OTNCQzY3QUNCMEYxM0JCQ0UzNzE0QTlDMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaXTDxjk3lo1b/qsikrld7UAK0 Adsl3vgtG60jNMVhf7Cugf9hrEsBVRpaQzCEvdz/QIUReGTDeOqzqXSuULRW/z2d H6/fIAlE7XTnVUbG5gt27kZxmSpWQc/yaciav91IW1FLoOiTT9kSLgeMZ96E2OWh KubWlbP818dUETtHW0sTBSjKg3DfgQt0SMgWwZkyeJGRTgxR/Tpiw4eb8yVcCoOV IxiW48NHXS8eXpWtBCn0XVbm4fWjM3m6MvDQAmha34+OCumvvAI2eDcMSmiJ4uGp urpiHwsVk6RMV1IfuCqxA4XH4R3IWVShHAe14HP/xcRdBANLiJUwEycGcsrFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUdbhaPvsO1JO8Z6yw8Tu843FKnBswHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABq8mfUJ3wuAFUiFlzot0 QsybhP2ItFDXQrYVnfA7kul2ch1gglzgpUNU0Cu8sw1M/3ciMg+5kU6eQJHCh1GE Fyz6t+S1EmjNtbGQj5XElLhAD5+dFeA08fuWb9zmHjQ6oRmb0DrS3sD3VKnj91Ni 8nsh9iueUf0oFo1jTgSX5LVipsOKkkS3sRn8YrguG9Wjw6s1QseqGd3vdNiBifDD 9H39T4NrsD0rpZSSbUwwJMvbvTEtcAuQvRVrmzW4VT9I0PTUBVC/peVXpbOhRKO7 LhZt3UyzgfIqL8vcnCi1fDARIUd9w4MUdtBhyFWYt4ZzSNnFRTgyf9ZDkPZqsWkn HA== -----END CERTIFICATE-----Generated at Wed Jul 15 10:21:20 2026 by rpki-client