$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: T04fRmANvHvdsU1+63e17NSMnGiNz6hYkIYqlGsBpNA= Subject key identifier: 48:D9:EE:1D:17:46:01:E1:86:DA:3A:CA:F0:84:90:7E:26:D6:C9:2B Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 420F5FBC03F928920FF9E1576B34E90C00446343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 054B Signing time: Sun 09 Aug 2026 00:47:21 +0000 Manifest this update: Sun 09 Aug 2026 00:42:21 +0000 Manifest next update: Mon 10 Aug 2026 02:03:21 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: RBYSQFeWnzKTAxxRLxrEXboo2kp0r1A8FATk71AQaUI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 10 Aug 2026 02:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:0f:5f:bc:03:f9:28:92:0f:f9:e1:57:6b:34:e9:0c:00:44:63:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 9 00:42:21 2026 GMT Not After : Aug 10 02:03:21 2026 GMT Subject: CN=48D9EE1D174601E186DA3ACAF084907E26D6C92B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:7d:14:71:51:2e:c0:61:78:fb:92:72:6a: 24:3e:74:ae:b6:50:8d:c0:b4:30:f0:f4:b3:6f:a6: ee:ec:97:74:e8:91:b2:5a:7a:25:04:11:0f:6a:70: 3b:b1:f7:03:69:d0:5a:3b:d1:b2:46:2c:76:cb:05: 16:d2:9b:5b:f4:53:96:ab:1b:2d:b1:70:88:76:96: 57:e3:3a:ca:7d:70:d4:34:c3:d9:3f:c9:61:7d:0c: 12:04:3e:03:89:2f:65:99:25:29:89:d1:04:96:95: 0f:72:86:f0:c3:4e:8e:e2:e3:cd:80:88:a9:28:a2: 01:f7:37:5d:2d:81:00:51:10:2e:a4:54:d9:36:5f: ca:ac:a6:82:68:0b:eb:19:11:30:9f:b4:a5:a9:83: 29:37:3a:4d:24:be:3b:f3:64:01:b3:d1:b0:f1:b3: f3:9f:98:24:7b:84:4c:ed:e9:1a:d0:a2:6d:e4:f4: 52:ec:72:c6:78:47:7b:fe:ee:9a:80:f4:9a:cb:14: c1:8e:e3:f0:58:14:80:cf:33:f7:5e:db:63:45:20: 6e:e4:c4:56:1c:a7:e5:50:cc:3b:77:05:de:27:15: 3c:de:d8:9c:eb:7c:00:12:dd:34:e9:28:22:a5:ad: ac:06:da:17:0d:ea:eb:82:1a:6b:4d:95:c9:00:0c: 2b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D9:EE:1D:17:46:01:E1:86:DA:3A:CA:F0:84:90:7E:26:D6:C9:2B X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c3:51:a9:a4:a3:0b:d2:70:4f:98:2e:9e:7c:b7:41:96:38: 74:79:46:70:32:25:76:1e:1f:77:bf:79:c1:a7:92:09:e5:2f: e3:39:79:49:79:86:fd:1a:3a:36:41:75:37:51:dc:8d:ea:6a: c4:35:83:53:73:97:31:37:85:4d:13:41:94:3b:e0:23:5e:5d: d9:39:e2:c8:f0:87:27:ee:94:08:65:87:8c:f5:78:6b:3a:aa: 64:a7:b2:8a:d7:31:38:67:d3:ba:2d:35:f6:24:ea:13:91:c4: 36:31:e2:59:d0:ed:a6:77:88:dc:2b:4a:64:68:ee:21:80:c6: a5:c9:4d:9a:51:e5:46:e0:ed:0c:d7:5b:26:99:b6:bd:4d:93: 51:b3:f1:38:92:f8:b3:98:2a:67:5a:dd:56:56:b8:0c:42:8c: a2:56:b9:30:75:86:63:25:82:01:65:b7:2c:8e:f8:90:9b:c9: 52:7b:47:2f:62:cc:12:13:07:45:cb:15:c3:30:dd:f7:ff:08: c0:b0:18:33:8d:04:be:16:5b:5f:2c:be:93:6d:4d:e9:75:92: 22:cc:5e:fa:92:64:e1:db:10:d8:49:33:7a:67:cc:ff:fe:4b: 34:bf:e7:fc:57:11:b7:27:ae:60:29:cb:8f:82:b8:bd:96:5d: 42:ad:f1:02 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQg9fvAP5KJIP+eFXazTpDABEY0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MDkwMDQyMjFaFw0yNjA4MTAwMjAzMjFaMDMxMTAvBgNV BAMTKDQ4RDlFRTFEMTc0NjAxRTE4NkRBM0FDQUYwODQ5MDdFMjZENkM5MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw8X0UcVEuwGF4+5JyaiQ+dK62 UI3AtDDw9LNvpu7sl3TokbJaeiUEEQ9qcDux9wNp0Fo70bJGLHbLBRbSm1v0U5ar Gy2xcIh2llfjOsp9cNQ0w9k/yWF9DBIEPgOJL2WZJSmJ0QSWlQ9yhvDDTo7i482A iKkoogH3N10tgQBREC6kVNk2X8qspoJoC+sZETCftKWpgyk3Ok0kvjvzZAGz0bDx s/OfmCR7hEzt6RrQom3k9FLscsZ4R3v+7pqA9JrLFMGO4/BYFIDPM/de22NFIG7k xFYcp+VQzDt3Bd4nFTze2JzrfAAS3TTpKCKlrawG2hcN6uuCGmtNlckADCs/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUSNnuHRdGAeGG2jrK8ISQfibWySswHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8NRqaSjC9JwT5gunny3 QZY4dHlGcDIldh4fd795waeSCeUv4zl5SXmG/Ro6NkF1N1HcjepqxDWDU3OXMTeF TRNBlDvgI15d2TniyPCHJ+6UCGWHjPV4azqqZKeyitcxOGfTui019iTqE5HENjHi WdDtpneI3CtKZGjuIYDGpclNmlHlRuDtDNdbJpm2vU2TUbPxOJL4s5gqZ1rdVla4 DEKMola5MHWGYyWCAWW3LI74kJvJUntHL2LMEhMHRcsVwzDd9/8IwLAYM40EvhZb Xyy+k21N6XWSIsxe+pJk4dsQ2EkzemfM//5LNL/n/FcRtyeuYCnLj4K4vZZdQq3x Ag== -----END CERTIFICATE-----Generated at Sun Aug 9 11:39:18 2026 by rpki-client