$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: N4X0SqKWns1ciZsdQp7qdOtvr7W5OufYsRL7xceSa0I= Subject key identifier: D9:37:4A:C4:AF:69:AA:F5:4D:CF:EE:E5:5D:18:EE:63:38:90:7D:45 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 7D482C8DD2EAF050991302F4ED85E86BE97054D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0531 Signing time: Mon 20 Jul 2026 05:07:25 +0000 Manifest this update: Mon 20 Jul 2026 05:02:25 +0000 Manifest next update: Tue 21 Jul 2026 07:00:25 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: f+njOw0Ri4r+StGemSri/gHG8znSHZSa1P3KjjE7WVM=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:48:2c:8d:d2:ea:f0:50:99:13:02:f4:ed:85:e8:6b:e9:70:54:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 20 05:02:25 2026 GMT Not After : Jul 21 07:00:25 2026 GMT Subject: CN=D9374AC4AF69AAF54DCFEEE55D18EE6338907D45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a0:b9:f9:34:8c:70:e2:bc:ed:e2:a2:fe:7f: bd:33:97:b2:5d:a0:b2:9d:bd:da:5f:7f:ff:3b:49: c1:7c:2c:82:dc:47:9e:a7:76:42:88:eb:ac:ed:96: 27:84:6d:be:95:d3:dd:55:fa:a4:b2:80:b5:2b:f5: 27:a4:c7:c9:62:e5:34:af:6c:7e:61:73:1b:29:1f: 01:76:54:df:d9:80:9d:d9:56:dc:3b:d4:91:33:b8: 63:d1:47:bf:45:a5:5d:0c:4b:20:3a:ff:58:97:f5: fd:f0:fc:7c:9d:a9:ed:03:ab:53:1e:bd:32:02:41: b4:c0:dd:ee:4f:d9:91:4a:a1:bd:2c:a2:f9:79:27: 43:d2:84:38:a0:f1:a2:c4:b8:5e:d6:97:fd:37:9d: 40:9e:eb:3b:f4:9c:12:33:36:b1:bf:8f:e3:9e:02: 11:62:e3:21:12:cd:cf:25:47:a8:73:17:11:ee:dc: 2b:c4:16:7d:c1:17:fb:13:05:07:0a:53:8f:28:2c: 4c:70:e7:a0:e9:2a:0a:9e:a4:b1:f2:ec:c2:b8:00: c3:77:c8:4d:41:90:b4:19:66:de:cb:24:b8:8d:22: f5:f4:8f:d7:a2:3b:24:d3:78:82:a0:d9:93:3c:82: 08:76:0f:28:b2:00:83:f2:cd:ba:af:6f:e3:33:65: 06:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:37:4A:C4:AF:69:AA:F5:4D:CF:EE:E5:5D:18:EE:63:38:90:7D:45 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:fd:ce:23:9a:78:92:24:d0:b3:ed:01:1d:b9:8d:9a:d7:03: de:e9:24:8c:b8:e6:b4:6b:fe:a5:f3:06:c5:82:31:44:85:1b: 03:e6:e0:92:0d:6d:cf:b6:bd:1a:f0:5b:94:71:b2:9e:f4:09: 15:04:17:19:46:c4:74:a7:60:96:c7:63:17:f7:1d:40:18:ca: 97:f9:d7:a5:8f:3f:ba:20:1f:3e:8a:fb:d9:29:84:db:3a:b4: fa:2d:f4:60:55:1e:b7:18:39:5f:00:e3:d6:9b:74:8c:d1:d6: fd:73:c8:ec:d9:48:17:e8:15:e3:a1:59:9d:c3:fa:3c:82:b0: 5c:5c:93:2e:ab:03:9c:b6:8f:7d:1d:f7:ee:6e:e6:c2:4a:ad: 0f:c3:96:ee:e7:b4:43:bc:cd:fb:3c:20:16:d4:5a:cc:b5:46: 93:26:0c:60:da:8d:d6:8a:ca:7d:f2:b4:44:f0:96:fd:a0:45: 7a:11:70:d6:3c:43:f1:6d:f9:01:27:5c:7f:ab:63:2b:72:06: 3f:4c:e6:19:92:29:63:d2:ad:0e:de:f7:ec:16:47:81:18:7f: 4e:11:cc:b4:68:5a:64:b8:80:49:66:42:ae:1b:d3:67:e6:14: 91:95:c8:8b:0b:9c:0d:ce:bb:08:06:2d:94:8b:04:68:b1:74: 41:d7:27:58 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfUgsjdLq8FCZEwL07YXoa+lwVNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MjAwNTAyMjVaFw0yNjA3MjEwNzAwMjVaMDMxMTAvBgNV BAMTKEQ5Mzc0QUM0QUY2OUFBRjU0RENGRUVFNTVEMThFRTYzMzg5MDdENDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7oLn5NIxw4rzt4qL+f70zl7Jd oLKdvdpff/87ScF8LILcR56ndkKI66ztlieEbb6V091V+qSygLUr9Sekx8li5TSv bH5hcxspHwF2VN/ZgJ3ZVtw71JEzuGPRR79FpV0MSyA6/1iX9f3w/Hydqe0Dq1Me vTICQbTA3e5P2ZFKob0sovl5J0PShDig8aLEuF7Wl/03nUCe6zv0nBIzNrG/j+Oe AhFi4yESzc8lR6hzFxHu3CvEFn3BF/sTBQcKU48oLExw56DpKgqepLHy7MK4AMN3 yE1BkLQZZt7LJLiNIvX0j9eiOyTTeIKg2ZM8ggh2DyiyAIPyzbqvb+MzZQYdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU2TdKxK9pqvVNz+7lXRjuYziQfUUwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkP3OI5p4kiTQs+0BHbmN mtcD3ukkjLjmtGv+pfMGxYIxRIUbA+bgkg1tz7a9GvBblHGynvQJFQQXGUbEdKdg lsdjF/cdQBjKl/nXpY8/uiAfPor72SmE2zq0+i30YFUetxg5XwDj1pt0jNHW/XPI 7NlIF+gV46FZncP6PIKwXFyTLqsDnLaPfR337m7mwkqtD8OW7ue0Q7zN+zwgFtRa zLVGkyYMYNqN1orKffK0RPCW/aBFehFw1jxD8W35ASdcf6tjK3IGP0zmGZIpY9Kt Dt737BZHgRh/ThHMtGhaZLiASWZCrhvTZ+YUkZXIiwucDc67CAYtlIsEaLF0Qdcn WA== -----END CERTIFICATE-----Generated at Mon Jul 20 12:40:32 2026 by rpki-client