$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: NQw/ugqQqmCuIMaVaRhr2IYa/ZLS/4sBjXENApr687Y= Subject key identifier: DF:8C:D5:FC:99:5F:5C:64:E7:1A:CD:F5:B8:EE:0C:02:A8:95:2B:57 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 51B91293A40E3DDC3B48C2F9DD3866E9E33092E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04C1 Signing time: Sun 26 Apr 2026 10:38:15 +0000 Manifest this update: Sun 26 Apr 2026 10:33:15 +0000 Manifest next update: Mon 27 Apr 2026 11:15:15 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: KrFnaHs+nbI2vZ6Dw33EcMBpMQBFHZCkLwGKJuytLnQ=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 05:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b9:12:93:a4:0e:3d:dc:3b:48:c2:f9:dd:38:66:e9:e3:30:92:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 26 10:33:15 2026 GMT Not After : Apr 27 11:15:15 2026 GMT Subject: CN=DF8CD5FC995F5C64E71ACDF5B8EE0C02A8952B57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a2:2b:b7:95:de:c3:20:8a:48:1b:2a:f8:58: 25:be:04:54:f0:d4:de:2e:0b:ec:5e:b0:18:fc:f4: 1c:da:c7:d8:68:b5:7a:80:ff:67:fa:35:1a:30:e5: 03:fd:1b:de:64:74:61:0f:2c:4b:c3:63:1a:f3:50: e5:60:85:d0:a8:44:f5:98:2b:4a:45:c4:58:8b:8f: 3a:3a:55:f8:27:85:08:c5:fb:46:d8:ed:c7:3f:72: 05:bc:7c:db:9b:fa:dd:90:0b:4f:5d:a3:8c:de:8d: 1b:84:b2:5b:48:84:fb:43:24:d0:23:c9:82:c8:8f: 3d:2c:45:46:c6:26:89:17:60:86:9d:90:ae:0b:6f: 9f:c0:83:ac:74:fc:b9:2d:8f:c0:31:85:98:39:65: 91:e3:9e:2c:68:00:87:bb:ce:d2:c7:82:54:1e:ec: 36:b5:3e:14:2f:c3:df:61:ae:69:f9:08:4d:f6:63: 53:01:36:18:2f:ae:a1:f3:5c:f9:98:36:4d:0e:61: 1a:c6:8a:e9:15:c1:ac:55:73:fb:bd:d4:dc:22:a1: b6:62:01:fb:e0:f2:f8:22:60:de:55:ae:b1:98:28: 18:f7:e2:a3:93:5d:2d:3d:60:45:19:04:7a:ae:91: 68:3d:a6:b1:b5:15:b0:4b:fa:ea:f7:b7:38:9f:04: b3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8C:D5:FC:99:5F:5C:64:E7:1A:CD:F5:B8:EE:0C:02:A8:95:2B:57 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:20:a2:01:4c:04:c6:c8:17:a3:90:fb:a3:ed:27:e5:2c:05: 7f:ac:ba:7c:99:00:0d:93:10:57:10:8f:61:72:c5:23:8a:2b: 62:3d:7c:e5:63:ea:dc:f7:7b:85:58:c1:1c:66:da:dd:6c:b0: 5c:fa:73:29:ae:3e:25:fc:db:89:71:34:e8:9f:c3:a5:68:96: 72:38:1a:62:44:34:24:9e:c5:4c:9f:61:6a:28:f9:30:40:26: 7e:c5:8a:41:ed:03:e7:be:4e:a2:a2:4d:fd:4f:50:9b:7f:44: 67:99:2a:88:89:28:18:cb:fb:e9:e7:e8:09:9e:2b:22:5c:c6: 6b:d8:08:3d:c2:d2:0c:a2:11:42:42:6e:c7:b1:44:e4:cf:e7: df:c8:e0:3d:c3:45:9b:80:a8:1d:4c:25:1b:b3:b3:e9:80:26: 4c:92:b6:a4:1b:9d:40:65:59:50:8f:a2:d9:31:f2:2a:92:36: 81:02:3a:63:2f:62:f8:e0:22:5c:fb:91:76:12:41:3c:48:03: bd:34:d0:bc:5e:0d:13:ff:58:0f:3a:49:bd:b1:40:39:b7:bc: bb:a3:cd:df:d7:84:8a:7c:e6:3d:db:0c:5b:39:b7:b7:10:80: 48:6b:f9:78:10:99:aa:7b:00:80:3f:d8:49:40:b8:04:0c:48: 3e:43:aa:b7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUbkSk6QOPdw7SML53Thm6eMwkucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA0MjYxMDMzMTVaFw0yNjA0MjcxMTE1MTVaMDMxMTAvBgNV BAMTKERGOENENUZDOTk1RjVDNjRFNzFBQ0RGNUI4RUUwQzAyQTg5NTJCNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnoiu3ld7DIIpIGyr4WCW+BFTw 1N4uC+xesBj89Bzax9hotXqA/2f6NRow5QP9G95kdGEPLEvDYxrzUOVghdCoRPWY K0pFxFiLjzo6VfgnhQjF+0bY7cc/cgW8fNub+t2QC09do4zejRuEsltIhPtDJNAj yYLIjz0sRUbGJokXYIadkK4Lb5/Ag6x0/Lktj8AxhZg5ZZHjnixoAIe7ztLHglQe 7Da1PhQvw99hrmn5CE32Y1MBNhgvrqHzXPmYNk0OYRrGiukVwaxVc/u91NwiobZi Afvg8vgiYN5VrrGYKBj34qOTXS09YEUZBHqukWg9prG1FbBL+ur3tzifBLOVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU34zV/JlfXGTnGs31uO4MAqiVK1cwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiCiAUwExsgXo5D7o+0n 5SwFf6y6fJkADZMQVxCPYXLFI4orYj185WPq3Pd7hVjBHGba3WywXPpzKa4+Jfzb iXE06J/DpWiWcjgaYkQ0JJ7FTJ9haij5MEAmfsWKQe0D575OoqJN/U9Qm39EZ5kq iIkoGMv76efoCZ4rIlzGa9gIPcLSDKIRQkJux7FE5M/n38jgPcNFm4CoHUwlG7Oz 6YAmTJK2pBudQGVZUI+i2THyKpI2gQI6Yy9i+OAiXPuRdhJBPEgDvTTQvF4NE/9Y DzpJvbFAObe8u6PN39eEinzmPdsMWzm3txCASGv5eBCZqnsAgD/YSUC4BAxIPkOq tw== -----END CERTIFICATE-----Generated at Sun Apr 26 13:54:02 2026 by rpki-client