$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: ZV9FCRm26TMNq+fj+UWnE+Vd211ueBF0VgLUtU/JrpQ= Subject key identifier: 9C:27:C6:E0:DA:AB:42:39:28:93:B6:DE:BC:C5:EC:7A:28:57:45:06 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 6A1DED9B8D9398B32951A8418554572DD957FA61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 055B Signing time: Thu 20 Aug 2026 14:57:52 +0000 Manifest this update: Thu 20 Aug 2026 14:52:52 +0000 Manifest next update: Fri 21 Aug 2026 15:56:52 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: ZWaSGUzG2zx919z/qMJzWAK6XgnC8Yq4UXmw39QQXYw=) 6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Aug 2026 13:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:1d:ed:9b:8d:93:98:b3:29:51:a8:41:85:54:57:2d:d9:57:fa:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 20 14:52:52 2026 GMT Not After : Aug 21 15:56:52 2026 GMT Subject: CN=9C27C6E0DAAB42392893B6DEBCC5EC7A28574506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8d:4a:14:3c:4e:1b:45:c8:da:d4:2e:82:bc: 1c:aa:99:96:22:9c:e2:48:39:46:ba:56:1e:33:11: 52:52:35:db:13:04:e5:c6:19:52:dc:4d:00:97:db: 46:91:34:26:62:d1:09:7e:e9:23:14:3a:16:b2:2a: 45:df:37:f1:34:8e:f9:89:50:55:25:4f:59:e4:40: 39:d3:2b:7a:59:74:75:ce:56:ad:b5:77:dc:4f:91: 9d:79:73:54:86:69:39:82:69:25:64:c3:db:11:2b: 95:18:33:4b:21:56:09:42:58:99:c3:cd:87:6c:61: 10:39:a1:b9:4a:c9:b7:11:46:44:e7:7e:62:8d:c0: b6:44:9a:38:4b:ab:42:ef:e2:97:16:a1:e9:11:1a: 98:24:52:d3:ff:a4:b7:81:05:c4:07:f9:1c:45:8c: 58:e3:09:f0:9b:a4:6a:ae:d7:64:b9:c7:d8:f4:34: 69:2f:6e:37:a7:57:24:71:44:1b:ea:6e:01:ea:56: c6:5f:ae:19:c6:26:a6:ad:50:02:8a:57:8f:83:a7: 50:41:b0:9a:d4:f6:5c:c3:c8:28:72:2f:f5:c2:8b: 26:fd:9e:90:6b:f3:9c:e2:34:27:b5:9a:6d:b7:d9: d5:21:01:b6:d9:60:aa:e6:46:60:a0:05:92:24:db: a5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:27:C6:E0:DA:AB:42:39:28:93:B6:DE:BC:C5:EC:7A:28:57:45:06 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:69:6d:9e:14:a5:43:bd:8d:29:61:ed:a7:22:82:06:2d:2c: d6:1d:ad:2f:a9:07:fd:78:74:d1:f2:4f:1b:f6:37:e6:84:92: bb:b6:d2:68:68:3f:af:bf:08:e7:2a:6e:bd:75:28:67:d6:0f: 63:a4:09:ea:bf:a4:ec:d6:b6:86:97:22:8b:24:fc:6a:09:3f: c5:24:f0:0c:68:58:7c:c9:3c:93:09:1f:58:3c:5b:d9:6b:83: 38:de:ad:90:a1:4e:0e:e5:23:b1:71:dd:cb:32:5a:5b:e8:5c: 02:dc:0f:b8:85:0d:3d:b8:1f:be:ae:e2:57:84:4d:4c:0b:c7: 73:0e:89:31:fe:cb:33:a1:8d:44:d3:a1:cc:eb:58:93:15:5f: 1a:d2:2d:d7:ed:d4:25:71:10:58:ee:f8:d7:6f:16:60:6f:6c: b0:41:be:02:5c:f9:3b:ff:ce:91:46:c9:5b:98:2e:a1:70:74: 15:9c:5d:97:80:1d:77:44:27:a0:fe:dc:75:f1:36:0c:3d:64: 94:95:8e:b9:b6:21:6d:68:3d:7d:4d:60:95:a8:43:bc:2e:95: d8:af:a9:04:43:7e:39:53:59:3f:3b:e2:c1:69:78:b8:d9:74: 1a:67:54:88:d5:a1:e6:15:08:af:ce:7a:ca:e1:79:eb:7a:22: 4f:a3:21:7d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUah3tm42TmLMpUahBhVRXLdlX+mEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MjAxNDUyNTJaFw0yNjA4MjExNTU2NTJaMDMxMTAvBgNV BAMTKDlDMjdDNkUwREFBQjQyMzkyODkzQjZERUJDQzVFQzdBMjg1NzQ1MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCljUoUPE4bRcja1C6CvByqmZYi nOJIOUa6Vh4zEVJSNdsTBOXGGVLcTQCX20aRNCZi0Ql+6SMUOhayKkXfN/E0jvmJ UFUlT1nkQDnTK3pZdHXOVq21d9xPkZ15c1SGaTmCaSVkw9sRK5UYM0shVglCWJnD zYdsYRA5oblKybcRRkTnfmKNwLZEmjhLq0Lv4pcWoekRGpgkUtP/pLeBBcQH+RxF jFjjCfCbpGqu12S5x9j0NGkvbjenVyRxRBvqbgHqVsZfrhnGJqatUAKKV4+Dp1BB sJrU9lzDyChyL/XCiyb9npBr85ziNCe1mm232dUhAbbZYKrmRmCgBZIk26XPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnCfG4NqrQjkok7bevMXseihXRQYwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmltnhSlQ72NKWHtpyKC Bi0s1h2tL6kH/Xh00fJPG/Y35oSSu7bSaGg/r78I5ypuvXUoZ9YPY6QJ6r+k7Na2 hpciiyT8agk/xSTwDGhYfMk8kwkfWDxb2WuDON6tkKFODuUjsXHdyzJaW+hcAtwP uIUNPbgfvq7iV4RNTAvHcw6JMf7LM6GNRNOhzOtYkxVfGtIt1+3UJXEQWO74128W YG9ssEG+Alz5O//OkUbJW5guoXB0FZxdl4Add0QnoP7cdfE2DD1klJWOubYhbWg9 fU1glahDvC6V2K+pBEN+OVNZPzviwWl4uNl0GmdUiNWh5hUIr856yuF563oiT6Mh fQ== -----END CERTIFICATE-----Generated at Thu Aug 20 18:27:38 2026 by rpki-client