$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: /f9gmXvlN6Pf7oR71mfXPHKaO8TQV+Oh1gYJtqUa+yM= Subject key identifier: 3C:68:BF:D4:C6:5F:79:AE:C4:3C:99:DC:68:84:DE:4C:D2:3C:1F:1E Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 67FBC565DD3D45881F2105205FFE6EECC285FF09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0508 Signing time: Fri 19 Jun 2026 01:29:59 +0000 Manifest this update: Fri 19 Jun 2026 01:24:59 +0000 Manifest next update: Sat 20 Jun 2026 02:47:59 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: bdiwNaA9hl9+8Dv/bV1cgUjLYqch/nVbZCvju4+zhUg=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Jun 2026 02:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fb:c5:65:dd:3d:45:88:1f:21:05:20:5f:fe:6e:ec:c2:85:ff:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 19 01:24:59 2026 GMT Not After : Jun 20 02:47:59 2026 GMT Subject: CN=3C68BFD4C65F79AEC43C99DC6884DE4CD23C1F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:de:e2:6b:7d:1d:a3:e5:ba:47:99:8e:b0:36: f0:06:b2:3c:03:1a:cc:1b:78:4f:6a:b0:32:5e:3e: 9e:5e:f2:62:a8:13:4e:59:d9:73:31:5d:9d:17:0d: 46:63:ff:97:1d:fc:b2:cf:92:3e:4c:3c:1d:68:63: 5f:ee:4d:eb:ba:b9:99:2c:be:7c:a3:71:f5:c5:f6: 49:17:4d:12:7e:44:e3:03:81:21:27:07:ae:57:a2: 87:30:df:59:db:ca:74:d1:6b:c6:9a:36:1a:9f:22: 1b:ab:d4:2e:78:60:b3:93:c6:22:c7:5a:29:9c:55: 36:2e:2a:e9:5e:8c:aa:cb:c2:f5:c6:d1:ef:c1:03: 7e:1f:48:80:0b:c1:4f:13:a2:fc:61:71:08:40:11: 5e:56:f1:03:6e:17:f3:c3:77:0d:86:a6:96:7a:35: da:a5:7e:e2:c4:7d:a1:15:f8:9f:fd:53:e7:fc:49: e8:fc:97:2e:ed:3a:8c:6b:60:b1:a1:2d:e9:4b:df: 5b:6e:d1:fe:0c:3d:8c:24:52:95:ce:7b:2e:bd:fc: 7d:01:6c:be:c1:25:83:19:2e:89:a1:b2:b6:72:33: 87:5e:9e:7e:17:2b:c7:c1:6a:f1:ed:53:ab:5e:6b: eb:75:76:11:45:3f:d6:ef:5a:57:50:9f:b8:18:92: 0b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:68:BF:D4:C6:5F:79:AE:C4:3C:99:DC:68:84:DE:4C:D2:3C:1F:1E X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:1d:f2:d9:73:6d:94:4a:9e:d0:bd:18:b4:a7:f5:62:ef:9f: fc:43:5b:4d:ea:da:4d:90:b1:03:5e:c6:f1:f9:3e:28:a1:d0: 05:fe:e9:22:40:e6:a0:e8:cc:e1:66:a7:11:0d:1e:93:f0:8d: 83:dd:23:79:44:41:fa:74:0f:77:f6:8f:64:60:ee:38:45:88: ad:c9:e1:8c:fa:ad:45:8a:15:27:0a:c3:1d:59:59:e7:f6:9b: b7:a9:11:cf:f5:d5:bd:ea:f1:c7:e9:9d:f1:1b:08:42:78:21: 04:c6:9d:42:33:f4:97:c9:53:92:1b:dc:e0:0f:2f:1b:a5:9f: f5:27:45:18:47:9a:3e:2f:50:61:ee:0b:e1:26:7d:58:b1:a6: fe:6c:65:62:96:5f:a6:7e:31:94:36:25:0b:49:61:f9:2b:1a: 6f:da:04:d7:24:d5:ab:8a:44:69:29:2d:ba:b7:0b:52:87:d5: 27:39:f0:75:3e:fd:b1:44:9b:41:10:8e:8e:95:80:18:bd:a7: da:be:68:0c:b3:94:80:bd:0e:0d:23:76:b4:77:69:1b:65:d9: 55:35:6b:80:8a:46:f8:35:b3:2d:d0:13:23:78:e8:74:09:9a: a3:3f:c3:2f:aa:2f:01:e4:80:3e:11:14:e4:07:c1:e7:ea:0f: 26:2c:15:f7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZ/vFZd09RYgfIQUgX/5u7MKF/wkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MTkwMTI0NTlaFw0yNjA2MjAwMjQ3NTlaMDMxMTAvBgNV BAMTKDNDNjhCRkQ0QzY1Rjc5QUVDNDNDOTlEQzY4ODRERTRDRDIzQzFGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ3uJrfR2j5bpHmY6wNvAGsjwD GswbeE9qsDJePp5e8mKoE05Z2XMxXZ0XDUZj/5cd/LLPkj5MPB1oY1/uTeu6uZks vnyjcfXF9kkXTRJ+ROMDgSEnB65Xoocw31nbynTRa8aaNhqfIhur1C54YLOTxiLH WimcVTYuKulejKrLwvXG0e/BA34fSIALwU8TovxhcQhAEV5W8QNuF/PDdw2GppZ6 NdqlfuLEfaEV+J/9U+f8Sej8ly7tOoxrYLGhLelL31tu0f4MPYwkUpXOey69/H0B bL7BJYMZLomhsrZyM4denn4XK8fBavHtU6tea+t1dhFFP9bvWldQn7gYkgsHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPGi/1MZfea7EPJncaITeTNI8Hx4wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANB3y2XNtlEqe0L0YtKf1 Yu+f/ENbTeraTZCxA17G8fk+KKHQBf7pIkDmoOjM4WanEQ0ek/CNg90jeURB+nQP d/aPZGDuOEWIrcnhjPqtRYoVJwrDHVlZ5/abt6kRz/XVverxx+md8RsIQnghBMad QjP0l8lTkhvc4A8vG6Wf9SdFGEeaPi9QYe4L4SZ9WLGm/mxlYpZfpn4xlDYlC0lh +Ssab9oE1yTVq4pEaSkturcLUofVJznwdT79sUSbQRCOjpWAGL2n2r5oDLOUgL0O DSN2tHdpG2XZVTVrgIpG+DWzLdATI3jodAmaoz/DL6ovAeSAPhEU5AfB5+oPJiwV 9w== -----END CERTIFICATE-----Generated at Fri Jun 19 12:14:53 2026 by rpki-client