$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: O70vzwSJzRFaPC7N3/5UjLHC2oH1fDtxIJ6SHtca5C4= Subject key identifier: 64:20:B5:6E:3A:46:6D:52:87:CF:74:65:DF:72:D4:7F:F4:67:52:97 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 2C652AF54ED03218AD9E49F7AA2B81F91F2D8C9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04B4 Signing time: Thu 16 Apr 2026 15:41:16 +0000 Manifest this update: Thu 16 Apr 2026 15:36:16 +0000 Manifest next update: Fri 17 Apr 2026 17:46:16 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: z5BPSrefwwNAFw/TRS/pHFUxgJ6Wo0Jeq/kJbKJeUYs=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:65:2a:f5:4e:d0:32:18:ad:9e:49:f7:aa:2b:81:f9:1f:2d:8c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 16 15:36:16 2026 GMT Not After : Apr 17 17:46:16 2026 GMT Subject: CN=6420B56E3A466D5287CF7465DF72D47FF4675297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:72:da:22:81:10:2a:08:e6:62:b2:78:72:8a: 5a:c5:f5:fc:fd:2a:03:51:77:04:df:5f:a9:8b:fd: cb:33:f6:b8:cd:84:28:4a:2e:0d:00:1a:d8:9d:09: c1:a3:af:ff:1f:8d:62:5b:3d:63:8f:96:f5:99:f9: 5f:bd:10:9a:db:31:02:e8:03:34:d8:40:5d:aa:f3: 13:0f:9f:9c:bb:04:9a:55:6d:6a:79:79:46:99:d4: 35:6e:f8:56:a7:32:9a:a0:0a:04:8c:49:f4:9b:87: b3:25:74:9a:59:ca:4b:4e:3d:56:74:82:a8:d7:c9: f7:88:42:4c:22:16:3d:5e:30:0d:73:52:0d:01:fd: 24:8e:e0:bc:03:23:f5:e2:b2:f8:7d:68:33:77:23: b5:05:d9:61:94:7b:57:cf:c4:73:44:60:ef:1e:cd: 04:10:1b:72:07:05:f8:7d:58:bd:76:41:dc:a7:3e: fb:cb:08:f3:95:82:e5:c7:0b:81:ab:29:7c:da:2f: 59:16:1d:ab:e7:94:de:90:0e:cb:23:ea:31:ff:02: 45:c2:97:31:d7:c6:40:fa:a5:52:68:f8:bd:9c:59: 04:db:d1:6f:38:3a:15:dc:5c:c1:8b:bb:2c:b8:27: ba:60:19:76:74:d5:dd:1f:c2:6d:08:37:3f:d9:3b: f2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:20:B5:6E:3A:46:6D:52:87:CF:74:65:DF:72:D4:7F:F4:67:52:97 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:bb:90:2a:26:6e:6e:7f:1f:07:ed:1d:47:11:f4:5a:56:67: 80:f1:a7:63:68:15:77:63:9f:bf:ee:e1:de:34:91:47:72:af: 71:cf:22:87:85:f8:6b:7d:80:4e:d2:aa:dc:ba:76:d1:60:42: 01:7b:63:9b:80:7e:99:88:53:69:27:57:b3:f6:8b:32:db:37: df:e4:d0:2a:06:d3:3f:72:d8:a5:d2:ce:25:31:d0:72:50:6b: 79:95:c1:c4:a0:cd:ea:17:40:3f:d0:ce:c7:b1:1a:33:e4:84: 7f:10:80:64:4c:cd:18:80:26:be:9a:84:3d:7a:dc:a3:db:cb: 95:79:24:63:4f:be:e0:d2:6d:62:46:85:2c:97:15:1c:26:9c: 27:52:d7:cf:8c:c9:08:93:45:5b:cd:7b:21:6c:fd:b1:50:04: 29:f9:ee:ab:9f:c6:aa:24:35:df:1e:42:c0:dd:10:ac:d9:2e: 5e:8f:f2:26:b5:e7:37:fc:0e:93:e7:4d:2a:1a:3f:30:6b:fc: d4:22:73:32:26:96:c2:96:f7:0f:0a:73:1a:63:af:6a:2b:99: e9:ec:4e:b3:d6:9c:91:0e:ba:c9:35:a0:95:68:61:6e:cb:5f: cc:9a:c0:34:6a:e6:55:6b:be:be:63:c9:05:4a:f1:91:5a:97: 63:1f:d7:11 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULGUq9U7QMhitnkn3qiuB+R8tjJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA0MTYxNTM2MTZaFw0yNjA0MTcxNzQ2MTZaMDMxMTAvBgNV BAMTKDY0MjBCNTZFM0E0NjZENTI4N0NGNzQ2NURGNzJENDdGRjQ2NzUyOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQctoigRAqCOZisnhyilrF9fz9 KgNRdwTfX6mL/csz9rjNhChKLg0AGtidCcGjr/8fjWJbPWOPlvWZ+V+9EJrbMQLo AzTYQF2q8xMPn5y7BJpVbWp5eUaZ1DVu+FanMpqgCgSMSfSbh7MldJpZyktOPVZ0 gqjXyfeIQkwiFj1eMA1zUg0B/SSO4LwDI/Xisvh9aDN3I7UF2WGUe1fPxHNEYO8e zQQQG3IHBfh9WL12QdynPvvLCPOVguXHC4GrKXzaL1kWHavnlN6QDssj6jH/AkXC lzHXxkD6pVJo+L2cWQTb0W84OhXcXMGLuyy4J7pgGXZ01d0fwm0INz/ZO/IZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUZCC1bjpGbVKHz3Rl33LUf/RnUpcwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7uQKiZubn8fB+0dRxH0 WlZngPGnY2gVd2Ofv+7h3jSRR3Kvcc8ih4X4a32ATtKq3Lp20WBCAXtjm4B+mYhT aSdXs/aLMts33+TQKgbTP3LYpdLOJTHQclBreZXBxKDN6hdAP9DOx7EaM+SEfxCA ZEzNGIAmvpqEPXrco9vLlXkkY0++4NJtYkaFLJcVHCacJ1LXz4zJCJNFW817IWz9 sVAEKfnuq5/GqiQ13x5CwN0QrNkuXo/yJrXnN/wOk+dNKho/MGv81CJzMiaWwpb3 DwpzGmOvaiuZ6exOs9ackQ66yTWglWhhbstfzJrANGrmVWu+vmPJBUrxkVqXYx/X EQ== -----END CERTIFICATE-----Generated at Thu Apr 16 21:16:54 2026 by rpki-client