$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: sLSBx30fiHxzVqPkb6ElZ71CvqMm6AFNtY1Z+VcYR/A= Subject key identifier: E8:68:A0:94:FF:99:D6:1C:96:A0:62:72:FD:72:4A:FF:53:BD:A4:20 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 2C930FF6E3C5A77B55C8943463E8461BE2B71C46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04E6 Signing time: Sun 24 May 2026 02:35:43 +0000 Manifest this update: Sun 24 May 2026 02:30:43 +0000 Manifest next update: Mon 25 May 2026 05:50:43 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: cWdpf6b5rwNyakQ3hhzsDn4rQqqPxt11kVttFY0qtIg=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 25 May 2026 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:93:0f:f6:e3:c5:a7:7b:55:c8:94:34:63:e8:46:1b:e2:b7:1c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 24 02:30:43 2026 GMT Not After : May 25 05:50:43 2026 GMT Subject: CN=E868A094FF99D61C96A06272FD724AFF53BDA420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:db:f8:91:a9:a4:82:68:d8:a1:30:2e:34: d5:d2:43:78:2d:2a:fd:83:1e:ca:8b:57:35:bc:0b: 5b:96:ef:44:0f:4d:01:4f:ed:a0:e5:81:08:e6:0f: 03:6f:2a:15:61:ce:29:c6:31:a5:7c:7a:b3:57:4e: 43:22:9d:c4:b9:ac:a8:4a:d0:9f:9e:81:dc:8d:50: 9e:d0:8f:f3:c5:8d:f9:8e:12:e2:50:9f:b4:63:85: 0d:9f:84:c1:b2:37:44:ce:d1:ff:6f:b4:4b:2b:db: a3:db:cc:5f:75:5a:14:11:14:6a:16:19:86:e9:5e: 6e:91:b9:df:a4:97:58:3b:36:b2:ae:54:e3:c4:f7: 7b:c8:a5:df:a3:cc:f0:c4:b4:2d:85:ba:a7:b7:16: 95:25:4e:a6:01:f4:9c:c1:fd:a6:a5:c1:b8:e8:4d: 36:dc:7f:d8:1d:e3:8f:79:1a:be:58:72:0f:74:43: 56:a8:da:1c:55:7f:dd:48:bd:af:4e:5f:56:7e:80: ff:26:24:f1:e3:b6:86:ca:70:c7:ee:58:52:84:fc: 66:23:9d:71:26:43:f1:88:3e:63:fc:46:6a:b1:8a: de:b2:a7:14:d8:6b:40:80:b8:03:44:32:f8:7c:aa: f5:e1:f1:00:0e:82:87:4b:5a:7b:56:99:be:b0:89: 15:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:68:A0:94:FF:99:D6:1C:96:A0:62:72:FD:72:4A:FF:53:BD:A4:20 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:5f:c2:6b:39:6b:2b:bd:1e:fc:23:51:07:39:67:23:d5:a9: fb:b0:b6:29:c2:eb:07:5d:96:8b:48:e5:a5:0c:fd:d3:4a:cd: 78:77:7c:42:56:8e:50:69:26:dd:da:ac:b0:d7:17:79:7c:16: c8:1d:68:f8:3b:00:08:2f:f6:c3:5f:fb:8d:b6:cf:dd:52:6e: f7:62:55:c5:9f:51:8f:e8:6a:ac:81:ae:c9:85:78:0c:f2:d3: 67:fe:7f:3f:50:49:7d:1b:25:57:c9:e1:48:ac:53:62:dc:fc: a2:c1:8e:97:6b:84:cd:3a:6e:1c:02:0a:75:23:6a:b1:83:1a: 62:96:6f:9e:36:73:0a:f1:3c:dc:5e:1d:0a:d9:72:6b:79:9e: 0f:fb:51:3f:56:0a:20:62:0d:21:08:d0:02:11:df:c0:73:8a: 37:f4:8a:34:ae:f1:8a:63:30:81:47:4f:f6:62:ff:5d:1f:be: dd:55:ea:1e:a1:15:93:f3:59:c0:1c:80:07:8f:9d:23:a5:83: 92:b6:82:9c:7a:36:53:e0:39:69:90:54:10:06:94:ff:65:f5: de:7f:1a:57:c9:de:a4:d5:e2:37:87:9b:6c:a3:f1:00:b0:c8: 13:27:e5:d1:d2:3c:0c:9c:33:90:be:ea:bd:b5:36:84:1c:96: 8d:07:10:f8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULJMP9uPFp3tVyJQ0Y+hGG+K3HEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MjQwMjMwNDNaFw0yNjA1MjUwNTUwNDNaMDMxMTAvBgNV BAMTKEU4NjhBMDk0RkY5OUQ2MUM5NkEwNjI3MkZENzI0QUZGNTNCREE0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ztv4kamkgmjYoTAuNNXSQ3gt Kv2DHsqLVzW8C1uW70QPTQFP7aDlgQjmDwNvKhVhzinGMaV8erNXTkMincS5rKhK 0J+egdyNUJ7Qj/PFjfmOEuJQn7RjhQ2fhMGyN0TO0f9vtEsr26PbzF91WhQRFGoW GYbpXm6Rud+kl1g7NrKuVOPE93vIpd+jzPDEtC2Fuqe3FpUlTqYB9JzB/aalwbjo TTbcf9gd4495Gr5Ycg90Q1ao2hxVf91Iva9OX1Z+gP8mJPHjtobKcMfuWFKE/GYj nXEmQ/GIPmP8Rmqxit6ypxTYa0CAuANEMvh8qvXh8QAOgodLWntWmb6wiRWTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6GiglP+Z1hyWoGJy/XJK/1O9pCAwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEF/CazlrK70e/CNRBzln I9Wp+7C2KcLrB12Wi0jlpQz900rNeHd8QlaOUGkm3dqssNcXeXwWyB1o+DsACC/2 w1/7jbbP3VJu92JVxZ9Rj+hqrIGuyYV4DPLTZ/5/P1BJfRslV8nhSKxTYtz8osGO l2uEzTpuHAIKdSNqsYMaYpZvnjZzCvE83F4dCtlya3meD/tRP1YKIGINIQjQAhHf wHOKN/SKNK7ximMwgUdP9mL/XR++3VXqHqEVk/NZwByAB4+dI6WDkraCnHo2U+A5 aZBUEAaU/2X13n8aV8nepNXiN4ebbKPxALDIEyfl0dI8DJwzkL7qvbU2hByWjQcQ +A== -----END CERTIFICATE-----Generated at Sun May 24 11:38:04 2026 by rpki-client