$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: CBEP613NPDKupiFNsuMAAsO27EvgVq/HGX/Vnty8KG4= Subject key identifier: 01:8D:DF:DE:19:E8:B1:34:B5:6C:38:E7:E8:8D:19:21:F4:A4:96:43 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 6BBF2C954A856569D512F92FA11A703B8A92BDE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0569 Signing time: Mon 31 Aug 2026 08:44:18 +0000 Manifest this update: Mon 31 Aug 2026 08:39:18 +0000 Manifest next update: Tue 01 Sep 2026 10:57:18 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: e1+p0LwXViVSlgTkv8yVdHNY8Bg47+pgo/Z9m9rRkhk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Sep 2026 10:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:bf:2c:95:4a:85:65:69:d5:12:f9:2f:a1:1a:70:3b:8a:92:bd:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 31 08:39:18 2026 GMT Not After : Sep 1 10:57:18 2026 GMT Subject: CN=018DDFDE19E8B134B56C38E7E88D1921F4A49643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:90:b5:4e:f5:ef:2b:6d:0e:35:00:b9:cf:f9: 50:8b:7d:06:21:82:9b:e7:20:1f:81:e2:85:16:3f: 66:9b:77:8a:21:51:9a:d0:a5:6f:8d:61:8c:dd:35: 67:0d:6c:3b:46:6e:f5:92:0c:62:25:33:c6:de:08: e6:f3:d9:8d:41:01:e4:4a:98:5b:bf:f3:29:34:e4: 54:bb:8a:e3:19:9e:89:d1:4f:9f:4f:e1:e7:54:f0: de:99:07:6e:bf:11:93:f6:7e:3d:71:12:c8:31:42: 65:a6:8f:27:61:32:48:93:5e:7c:92:0b:c0:2a:fd: c2:5f:e1:67:ba:00:e4:4d:c2:7f:c9:ff:1c:57:1f: 2c:45:6e:00:ac:7e:51:6f:50:67:77:44:29:9a:c4: d7:02:69:b3:31:6f:96:ec:de:3c:d5:54:b1:18:35: 9b:c4:e5:98:c0:21:9f:85:4b:95:82:4e:45:a5:8c: ce:14:5e:98:5f:f3:dc:b5:26:71:25:21:e6:23:2b: 50:61:eb:91:2c:b7:5f:3b:0a:0f:45:9b:22:b6:57: 72:41:80:15:3c:04:f1:43:a7:4f:48:17:bb:93:ad: b6:da:d0:7f:21:dd:35:64:29:77:94:e3:ec:a6:bc: 31:54:33:45:5b:0b:92:88:a0:43:3c:34:6d:d8:01: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8D:DF:DE:19:E8:B1:34:B5:6C:38:E7:E8:8D:19:21:F4:A4:96:43 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ad:72:b9:d6:7d:bd:3a:3d:98:74:10:dd:d7:37:b5:cb:aa: 84:a8:94:57:3f:a1:af:a9:98:82:96:44:4e:9e:b0:5d:75:bc: b7:fe:bb:53:38:bb:3b:00:c7:2d:13:44:64:71:cf:15:d0:39: f1:f2:1d:b3:11:0c:35:23:d5:5d:e1:90:6b:69:41:05:23:4e: e9:f5:b6:f2:9f:04:2b:32:7f:7b:01:19:1c:bd:88:80:bc:b7: ef:bf:bd:85:b4:d7:51:3b:96:ba:72:ec:f9:5f:1b:3c:fd:1b: 77:b1:65:49:ed:e1:7e:06:d3:e0:ad:6d:f2:2b:42:bf:82:de: ce:48:f0:08:e3:6f:3f:15:ed:01:01:69:52:6f:a2:60:51:4e: 6f:cf:3d:44:8f:52:1d:cc:ab:b3:4e:a1:55:5b:01:4a:cf:3b: b2:c4:56:2b:f3:b3:6f:5d:9a:8e:c5:b5:68:53:c3:59:a0:50: 35:c3:5a:3a:0c:b2:6f:be:b1:7a:75:85:35:b3:87:3d:ee:65: 78:fe:ef:f6:ef:9d:86:b7:60:64:eb:ba:a7:03:37:71:2a:24: 39:b6:23:d1:d2:31:f9:25:9f:f6:60:a8:40:20:0b:ea:42:38: 1d:d3:fa:69:d9:0e:1d:f2:54:cc:e6:73:ac:a1:36:3d:d7:65: 40:47:6d:04 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUa78slUqFZWnVEvkvoRpwO4qSveIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MzEwODM5MThaFw0yNjA5MDExMDU3MThaMDMxMTAvBgNV BAMTKDAxOERERkRFMTlFOEIxMzRCNTZDMzhFN0U4OEQxOTIxRjRBNDk2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRkLVO9e8rbQ41ALnP+VCLfQYh gpvnIB+B4oUWP2abd4ohUZrQpW+NYYzdNWcNbDtGbvWSDGIlM8beCObz2Y1BAeRK mFu/8yk05FS7iuMZnonRT59P4edU8N6ZB26/EZP2fj1xEsgxQmWmjydhMkiTXnyS C8Aq/cJf4We6AORNwn/J/xxXHyxFbgCsflFvUGd3RCmaxNcCabMxb5bs3jzVVLEY NZvE5ZjAIZ+FS5WCTkWljM4UXphf89y1JnElIeYjK1Bh65Est187Cg9FmyK2V3JB gBU8BPFDp09IF7uTrbba0H8h3TVkKXeU4+ymvDFUM0VbC5KIoEM8NG3YAVlTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAY3f3hnosTS1bDjn6I0ZIfSklkMwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUq1yudZ9vTo9mHQQ3dc3 tcuqhKiUVz+hr6mYgpZETp6wXXW8t/67Uzi7OwDHLRNEZHHPFdA58fIdsxEMNSPV XeGQa2lBBSNO6fW28p8EKzJ/ewEZHL2IgLy377+9hbTXUTuWunLs+V8bPP0bd7Fl Se3hfgbT4K1t8itCv4LezkjwCONvPxXtAQFpUm+iYFFOb889RI9SHcyrs06hVVsB Ss87ssRWK/Ozb12ajsW1aFPDWaBQNcNaOgyyb76xenWFNbOHPe5leP7v9u+dhrdg ZOu6pwM3cSokObYj0dIx+SWf9mCoQCAL6kI4HdP6adkOHfJUzOZzrKE2PddlQEdt BA== -----END CERTIFICATE-----Generated at Tue Sep 1 02:56:22 2026 by rpki-client