$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: aOiVfzlwhyA2+I8K/7cJDNVGezFWuCXbQsWtZHgSoKE= Subject key identifier: B6:B5:90:62:13:EB:D8:99:AD:11:D5:A8:31:07:B5:A5:22:CA:14:2C Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 6E5AD0CF8B5284C460079900E428C299659EDA69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0483 Signing time: Tue 10 Mar 2026 23:05:34 +0000 Manifest this update: Tue 10 Mar 2026 23:00:34 +0000 Manifest next update: Thu 12 Mar 2026 02:45:34 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: /C3VW/Yix15KvcE/AgQb537u8q5krRFBTb4BzfM6Jkk=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Mar 2026 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:5a:d0:cf:8b:52:84:c4:60:07:99:00:e4:28:c2:99:65:9e:da:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Mar 10 23:00:34 2026 GMT Not After : Mar 12 02:45:34 2026 GMT Subject: CN=B6B5906213EBD899AD11D5A83107B5A522CA142C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:26:cb:68:70:80:bc:60:88:17:6e:5b:38:ce: 91:e6:fd:54:6b:e0:cc:3b:5c:5c:5a:76:5b:46:56: ad:06:ec:5e:df:40:0a:73:09:88:45:0d:c1:90:7f: da:13:3b:96:c6:37:bc:9d:f7:73:e3:e3:e5:24:11: 6f:87:d9:37:ef:66:51:cc:0d:68:3c:63:64:c6:70: 40:27:e1:51:fe:30:95:6b:83:cd:e1:be:b4:41:9e: c4:e9:5d:d1:fd:4c:75:77:49:22:e3:69:50:05:de: 9f:68:12:05:51:1b:8a:0f:bd:e8:a9:16:1f:2f:be: 69:f8:29:7b:9a:51:65:1e:2c:39:f2:61:5c:d8:51: 4e:57:be:8b:7e:10:99:e5:db:cc:f7:17:1c:c4:5f: 0b:b1:df:16:cf:74:8f:e0:20:e4:9f:d8:66:6b:cb: ad:80:96:31:0f:fd:00:8e:cc:b5:f7:74:e2:c8:cc: 2c:2c:33:ec:1c:2f:47:89:da:c6:4d:81:1a:3b:4a: a7:ba:ae:0f:2c:81:06:74:6b:c1:47:f0:4f:38:ef: 58:a5:24:1e:8e:2f:54:18:f6:7e:ce:b8:a7:49:b8: 2b:53:83:63:4a:5a:76:52:a4:84:c7:0c:b9:1d:e6: 25:1a:c6:06:4e:43:09:05:9e:6c:2a:3e:e4:3d:e8: 9e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B5:90:62:13:EB:D8:99:AD:11:D5:A8:31:07:B5:A5:22:CA:14:2C X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:db:09:46:48:9e:af:75:32:aa:93:82:9d:a3:e5:ae:f5:aa: 57:b4:01:03:04:71:90:e3:7d:d4:e5:88:79:61:2a:5e:53:c4: f5:94:a4:8d:a1:3a:ac:3d:79:e4:54:c7:02:e7:c2:d9:cd:dc: 00:e0:95:ee:8e:5e:74:e9:85:b2:45:e3:3c:6c:f2:59:c0:28: 43:82:be:51:68:4f:12:2e:36:15:c1:42:f1:80:7c:8f:23:5b: 51:f4:aa:65:d5:e3:0d:a4:eb:94:5f:5a:ad:eb:e8:ea:dc:0f: 20:92:5a:1b:14:b8:c7:b6:5f:64:39:b8:be:ec:cb:6a:86:87: 65:0d:bb:8b:ec:25:22:2f:9d:f0:e6:99:4a:3e:38:5c:8f:b9: 88:b2:33:41:2f:44:13:46:41:11:1d:cc:53:15:4f:58:2e:ee: f9:aa:89:4d:ec:20:95:de:ba:af:a5:fb:77:43:6a:ca:9d:74: 31:54:99:d5:a0:76:46:ae:16:f3:f0:d2:c8:f0:fd:66:52:44: 15:a3:fd:68:97:60:96:24:e9:94:30:9d:46:f6:d7:0e:d2:c6: 8c:56:53:7b:e1:83:37:c1:74:a7:34:ec:0a:1d:f9:98:44:af: dc:5e:1e:5a:76:2e:55:45:17:e9:49:61:4f:27:27:65:4f:26: 77:0b:34:34 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUblrQz4tShMRgB5kA5CjCmWWe2mkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAzMTAyMzAwMzRaFw0yNjAzMTIwMjQ1MzRaMDMxMTAvBgNV BAMTKEI2QjU5MDYyMTNFQkQ4OTlBRDExRDVBODMxMDdCNUE1MjJDQTE0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2JstocIC8YIgXbls4zpHm/VRr 4Mw7XFxadltGVq0G7F7fQApzCYhFDcGQf9oTO5bGN7yd93Pj4+UkEW+H2TfvZlHM DWg8Y2TGcEAn4VH+MJVrg83hvrRBnsTpXdH9THV3SSLjaVAF3p9oEgVRG4oPveip Fh8vvmn4KXuaUWUeLDnyYVzYUU5Xvot+EJnl28z3FxzEXwux3xbPdI/gIOSf2GZr y62AljEP/QCOzLX3dOLIzCwsM+wcL0eJ2sZNgRo7Sqe6rg8sgQZ0a8FH8E8471il JB6OL1QY9n7OuKdJuCtTg2NKWnZSpITHDLkd5iUaxgZOQwkFnmwqPuQ96J7TAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUtrWQYhPr2JmtEdWoMQe1pSLKFCwwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtsJRkier3UyqpOCnaPl rvWqV7QBAwRxkON91OWIeWEqXlPE9ZSkjaE6rD155FTHAufC2c3cAOCV7o5edOmF skXjPGzyWcAoQ4K+UWhPEi42FcFC8YB8jyNbUfSqZdXjDaTrlF9arevo6twPIJJa GxS4x7ZfZDm4vuzLaoaHZQ27i+wlIi+d8OaZSj44XI+5iLIzQS9EE0ZBER3MUxVP WC7u+aqJTewgld66r6X7d0Nqyp10MVSZ1aB2Rq4W8/DSyPD9ZlJEFaP9aJdgliTp lDCdRvbXDtLGjFZTe+GDN8F0pzTsCh35mESv3F4eWnYuVUUX6UlhTycnZU8mdws0 NA== -----END CERTIFICATE-----Generated at Wed Mar 11 04:37:09 2026 by rpki-client