$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: dnPEOvcDuCYPUoWzvlP2zvvLB9BWpfTaAy5kfLja8l0= Subject key identifier: BA:E1:E6:B7:A2:1E:BF:AC:51:97:A4:93:39:8A:26:6A:D5:3A:53:80 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 56BF0BB47129A0AF90AF2EB5537132B368774424 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04B6 Signing time: Sat 18 Apr 2026 04:23:40 +0000 Manifest this update: Sat 18 Apr 2026 04:18:40 +0000 Manifest next update: Sun 19 Apr 2026 07:03:40 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 9+ILQca/dZ9z6zgW0Uhoz+tRhi29UeJlvr1YCauKpSY=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 21:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:bf:0b:b4:71:29:a0:af:90:af:2e:b5:53:71:32:b3:68:77:44:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 18 04:18:40 2026 GMT Not After : Apr 19 07:03:40 2026 GMT Subject: CN=BAE1E6B7A21EBFAC5197A493398A266AD53A5380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ae:83:ec:f1:44:59:06:85:3c:4f:72:09:e4: 49:c2:41:24:43:f5:0d:70:bc:32:3d:e9:f2:b5:d7: b0:52:2b:9e:19:a1:97:35:f7:49:23:8c:13:0d:aa: 07:09:0d:77:b3:7c:d3:88:70:d6:e2:59:ea:57:b0: d3:3b:52:62:8e:58:10:61:70:04:04:51:70:fe:aa: b0:9a:50:1d:2a:3a:dc:db:24:48:f9:2c:60:71:37: e8:0b:31:4a:3d:87:94:10:50:9f:a9:9d:82:59:4e: 76:c0:eb:65:42:d1:7b:05:ee:4c:30:f0:d7:71:e0: 3e:ee:9c:91:4d:d3:ab:86:cb:04:0f:64:8f:10:ba: b4:6a:82:6a:fb:04:fe:22:6e:8f:bf:8c:3c:42:70: 01:21:22:6d:cc:77:d3:c2:a3:98:ec:e0:ab:9c:b2: f2:3e:be:b3:af:26:a2:ef:71:03:84:e6:1f:25:34: c5:63:0e:2a:02:80:4a:33:b0:56:99:a6:7d:5e:87: cf:25:14:52:94:b1:b5:f4:2c:2f:ad:16:bc:9c:1a: 8e:c2:22:50:a1:fc:f3:d7:27:32:b4:14:35:0b:4a: 91:d8:de:96:0c:07:69:d9:46:3a:83:a5:8c:2e:ec: 7b:f5:d6:e6:cb:c7:bf:7d:c6:25:a9:49:0d:2c:47: 6d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E1:E6:B7:A2:1E:BF:AC:51:97:A4:93:39:8A:26:6A:D5:3A:53:80 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:78:6f:56:21:0d:b7:5d:15:f3:e5:88:91:7e:f2:02:59:7a: 17:9f:83:db:8b:49:b4:22:b0:b7:75:bd:24:d9:71:db:38:6e: c1:29:f8:c0:9d:1f:a2:30:1d:ee:08:56:a6:97:8f:9d:48:a5: b9:06:6c:d6:c0:98:61:a6:96:c9:53:67:0e:e3:76:bf:b7:9d: 68:64:3a:1f:ea:20:b1:96:07:94:ed:fd:b0:b2:a4:26:b0:fa: f9:29:2c:a2:42:94:69:62:bf:1d:c5:ae:05:19:31:ca:58:20: f2:ff:36:9e:25:bc:c0:93:14:e5:cf:f8:99:4a:bb:b9:1b:e4: 2a:f1:b1:78:bc:5b:b5:59:4b:27:6d:ec:9c:45:3d:0f:fa:78: 82:24:13:f5:90:d5:69:8e:1b:4d:73:7e:7e:8f:31:ac:df:6d: 0f:26:c2:a4:20:a3:65:19:75:fb:cd:9f:1f:fe:5f:42:72:49: ee:a4:07:34:17:1b:e8:3a:8e:bc:78:99:ad:e4:17:56:77:1c: 25:43:d4:24:1d:db:f1:a7:74:c4:d9:c2:83:09:f8:3a:e0:c0: 88:3c:41:9e:c4:7d:64:fe:d3:1b:55:50:f2:12:05:35:7c:f8: a7:4f:59:d3:67:85:b8:af:9d:d2:15:aa:28:6b:15:43:5f:36: b9:c5:28:1a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVr8LtHEpoK+Qry61U3Eys2h3RCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA0MTgwNDE4NDBaFw0yNjA0MTkwNzAzNDBaMDMxMTAvBgNV BAMTKEJBRTFFNkI3QTIxRUJGQUM1MTk3QTQ5MzM5OEEyNjZBRDUzQTUzODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlroPs8URZBoU8T3IJ5EnCQSRD 9Q1wvDI96fK117BSK54ZoZc190kjjBMNqgcJDXezfNOIcNbiWepXsNM7UmKOWBBh cAQEUXD+qrCaUB0qOtzbJEj5LGBxN+gLMUo9h5QQUJ+pnYJZTnbA62VC0XsF7kww 8Ndx4D7unJFN06uGywQPZI8QurRqgmr7BP4ibo+/jDxCcAEhIm3Md9PCo5js4Kuc svI+vrOvJqLvcQOE5h8lNMVjDioCgEozsFaZpn1eh88lFFKUsbX0LC+tFrycGo7C IlCh/PPXJzK0FDULSpHY3pYMB2nZRjqDpYwu7Hv11ubLx799xiWpSQ0sR20jAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUuuHmt6Iev6xRl6STOYomatU6U4AwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnhvViENt10V8+WIkX7y All6F5+D24tJtCKwt3W9JNlx2zhuwSn4wJ0fojAd7ghWppePnUiluQZs1sCYYaaW yVNnDuN2v7edaGQ6H+ogsZYHlO39sLKkJrD6+SksokKUaWK/HcWuBRkxylgg8v82 niW8wJMU5c/4mUq7uRvkKvGxeLxbtVlLJ23snEU9D/p4giQT9ZDVaY4bTXN+fo8x rN9tDybCpCCjZRl1+82fH/5fQnJJ7qQHNBcb6DqOvHiZreQXVnccJUPUJB3b8ad0 xNnCgwn4OuDAiDxBnsR9ZP7TG1VQ8hIFNXz4p09Z02eFuK+d0hWqKGsVQ182ucUo Gg== -----END CERTIFICATE-----Generated at Sat Apr 18 07:30:13 2026 by rpki-client