$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 0pRGdvFfkW+iyyDTT0HNNxPEn6drHocRowF+z0nPt5E= Subject key identifier: B1:38:0F:E4:82:61:63:2A:23:DE:31:D5:88:4F:2F:58:53:E7:AC:9A Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 11393EC7BE785CEC423B87B0F0CBFAA81B86BE90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 050D Signing time: Mon 22 Jun 2026 23:52:04 +0000 Manifest this update: Mon 22 Jun 2026 23:47:04 +0000 Manifest next update: Wed 24 Jun 2026 03:11:04 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: vLhpyQh3ZkTiiZl9sb7NVdvp3uESJa27dSnEZJYEYjs=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Jun 2026 03:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:39:3e:c7:be:78:5c:ec:42:3b:87:b0:f0:cb:fa:a8:1b:86:be:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 22 23:47:04 2026 GMT Not After : Jun 24 03:11:04 2026 GMT Subject: CN=B1380FE48261632A23DE31D5884F2F5853E7AC9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f5:1f:d8:9b:8a:6b:7a:c8:fc:84:82:50:42: cf:fa:ed:bc:ab:d7:f4:07:67:1d:1b:32:56:db:84: 4c:64:29:e0:cd:ca:7d:a9:62:25:68:2f:84:65:46: af:06:21:4c:9d:9c:7d:45:0c:a9:f5:63:8d:80:67: d2:97:6d:e3:b7:5b:1c:00:19:15:f0:19:eb:f2:16: aa:f3:6e:c9:06:f4:eb:b1:f2:78:e6:f3:48:d1:5e: 6d:97:80:b0:b0:e0:d3:c7:ca:19:92:22:8a:bd:4d: c2:aa:ad:0e:ec:47:c9:1a:bc:07:5a:82:df:68:63: c7:c5:c1:0b:63:d4:5b:f7:22:35:40:f2:99:81:44: d1:c4:dc:b3:37:59:2a:8c:38:19:f6:7d:d2:fc:98: f3:93:42:18:0e:20:ac:8e:b8:f9:c9:cb:92:b0:4f: 50:9d:d5:57:ca:e5:13:3e:03:59:4e:3b:f5:8d:3e: f8:8b:91:dd:b5:5e:a3:93:a6:61:da:89:55:d1:65: 50:1c:ab:53:73:f8:10:c3:9d:5d:81:cf:d4:09:f8: ed:e1:6f:ae:7b:4d:98:54:ef:64:39:70:4f:30:fa: f8:e6:00:cf:b5:a8:75:a3:92:78:d3:de:b7:9e:7c: 30:d0:bb:5d:5a:0c:25:1d:b4:f8:d0:6e:93:34:da: fe:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:38:0F:E4:82:61:63:2A:23:DE:31:D5:88:4F:2F:58:53:E7:AC:9A X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:9b:0e:d7:7c:11:85:86:fb:79:16:6f:37:cb:b3:20:f7:b0: 27:3f:53:4f:e4:b9:1f:13:7f:cb:e2:5b:ec:ff:b6:45:47:d7: fe:4e:51:0c:68:65:e2:5b:cd:12:4d:d2:cb:79:d9:ce:79:92: aa:98:2d:b5:b6:08:8b:94:49:a8:a0:5f:47:97:73:c7:68:b2: 17:a0:a8:f4:b5:0d:17:1a:fb:1f:25:52:00:cb:cc:65:ab:d8: f4:2e:54:8e:0c:65:3d:b0:82:4d:af:53:26:38:df:bb:3b:4c: a5:e3:6a:82:bb:d2:ee:68:7e:87:75:0a:c0:75:64:5c:9f:c0: ed:ff:5d:84:f9:36:19:cd:9a:53:69:97:29:d2:3b:ae:fd:2e: bc:12:00:21:2c:d9:6f:76:d4:4f:f2:20:b1:6c:51:8c:51:06: 70:2b:69:2c:59:50:64:1e:a0:ae:09:e7:00:b0:71:80:d6:9d: b9:a7:54:5d:26:bb:0a:f8:59:5a:bf:ca:58:f4:86:c7:9d:11: 1c:d8:85:06:f8:7f:a9:44:32:10:c9:64:72:cb:6b:ba:86:fe: 6f:41:90:15:31:d6:73:e5:e2:d3:ae:4d:8e:5c:1c:ad:07:e7: d0:84:f3:15:70:3e:8e:32:b7:04:fc:08:04:6e:20:c3:e5:5f: db:f1:cc:f5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUETk+x754XOxCO4ew8Mv6qBuGvpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MjIyMzQ3MDRaFw0yNjA2MjQwMzExMDRaMDMxMTAvBgNV BAMTKEIxMzgwRkU0ODI2MTYzMkEyM0RFMzFENTg4NEYyRjU4NTNFN0FDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9R/Ym4presj8hIJQQs/67byr 1/QHZx0bMlbbhExkKeDNyn2pYiVoL4RlRq8GIUydnH1FDKn1Y42AZ9KXbeO3WxwA GRXwGevyFqrzbskG9Oux8njm80jRXm2XgLCw4NPHyhmSIoq9TcKqrQ7sR8kavAda gt9oY8fFwQtj1Fv3IjVA8pmBRNHE3LM3WSqMOBn2fdL8mPOTQhgOIKyOuPnJy5Kw T1Cd1VfK5RM+A1lOO/WNPviLkd21XqOTpmHaiVXRZVAcq1Nz+BDDnV2Bz9QJ+O3h b657TZhU72Q5cE8w+vjmAM+1qHWjknjT3reefDDQu11aDCUdtPjQbpM02v4/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUsTgP5IJhYyoj3jHViE8vWFPnrJowHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5sO13wRhYb7eRZvN8uz IPewJz9TT+S5HxN/y+Jb7P+2RUfX/k5RDGhl4lvNEk3Sy3nZznmSqpgttbYIi5RJ qKBfR5dzx2iyF6Co9LUNFxr7HyVSAMvMZavY9C5UjgxlPbCCTa9TJjjfuztMpeNq grvS7mh+h3UKwHVkXJ/A7f9dhPk2Gc2aU2mXKdI7rv0uvBIAISzZb3bUT/IgsWxR jFEGcCtpLFlQZB6grgnnALBxgNaduadUXSa7CvhZWr/KWPSGx50RHNiFBvh/qUQy EMlkcstruob+b0GQFTHWc+Xi065NjlwcrQfn0ITzFXA+jjK3BPwIBG4gw+Vf2/HM 9Q== -----END CERTIFICATE-----Generated at Tue Jun 23 13:39:42 2026 by rpki-client