$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 2NZjdgtDGAuoCQONWm4r7A5eVCylgGZ0l/fe1jIuBo4= Subject key identifier: DE:84:84:54:7D:30:0F:26:B7:D2:23:AB:6A:D6:C5:4F:05:C3:44:89 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 4D2509E1707F8C1D94BDA9DB834169433BDC2878 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0503 Signing time: Mon 15 Jun 2026 04:31:27 +0000 Manifest this update: Mon 15 Jun 2026 04:26:27 +0000 Manifest next update: Tue 16 Jun 2026 07:41:27 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: CPLtwO2HnfMbBt1nmdWOz7gqQAxtWLZbIqt9Wk0EubM=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Jun 2026 22:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:25:09:e1:70:7f:8c:1d:94:bd:a9:db:83:41:69:43:3b:dc:28:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 15 04:26:27 2026 GMT Not After : Jun 16 07:41:27 2026 GMT Subject: CN=DE8484547D300F26B7D223AB6AD6C54F05C34489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ca:db:8f:04:57:23:63:04:f3:f8:c5:6e:a4: d3:86:e0:15:f5:60:4c:64:0b:9c:95:1a:63:9c:f4: c1:61:94:67:06:f7:a5:82:90:d6:1d:14:40:5f:8b: b8:a4:42:25:03:7e:dd:a2:78:44:cd:3e:53:b8:2d: 8e:5d:db:ae:e1:6c:e3:93:d3:87:4e:e8:09:95:ec: 39:5c:d6:4a:11:5c:16:a7:16:81:f7:b0:13:cf:fd: ab:46:f5:99:41:11:c4:b5:5f:8a:2e:6c:09:fa:4f: 44:5a:fa:8e:31:00:40:eb:4d:51:18:ed:7d:f3:d4: 0d:73:63:08:b3:63:a8:e7:b7:ef:44:fa:bb:49:44: 99:ea:ae:03:b7:b5:c9:4c:97:26:d2:35:88:67:2e: 7c:77:e7:39:a4:e9:83:94:29:c6:cc:4b:5e:ba:da: 8f:65:9f:92:65:e7:91:3e:21:9d:33:fa:e9:b9:0d: d9:59:7a:c6:76:5e:f6:f1:91:be:33:00:f5:91:5d: 18:43:b4:be:20:7e:7c:9e:35:50:b5:f2:f1:93:56: 54:f9:95:9f:87:b7:3e:71:77:41:56:4a:71:ae:da: 29:f4:ae:d2:7e:7d:c6:ae:3d:f0:39:d1:96:30:59: 17:11:66:b2:9e:9d:cd:de:a8:59:c8:ef:40:4d:d3: 43:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:84:84:54:7D:30:0F:26:B7:D2:23:AB:6A:D6:C5:4F:05:C3:44:89 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9b:cd:44:ea:64:07:a3:ad:4f:6e:1e:3b:3b:75:79:7f:ef: f4:8d:5e:ba:0c:04:e4:12:af:8e:75:d8:e5:a3:97:74:c2:5e: d1:62:e2:40:0c:a7:be:03:7c:f8:ed:f4:cc:eb:fc:51:68:8e: ee:8e:16:c3:50:30:1b:7c:3c:f1:48:01:b4:b1:17:1b:dd:a0: ae:96:40:8d:9c:d0:a6:1c:80:a5:a1:7f:38:0e:35:c3:1d:ef: f3:1a:31:02:bb:ca:38:6a:2b:7a:52:a9:01:a7:cc:a8:e6:ec: 90:88:91:49:5b:57:d8:62:ae:d6:f6:7b:26:0b:07:85:08:9e: d4:b2:6e:ba:cf:14:f8:1a:83:7d:bc:1e:6d:3c:19:57:9a:be: 58:a0:c2:ea:2a:81:84:6a:2a:0e:5c:45:df:87:5e:3c:54:f4: 03:17:a3:e9:9b:c7:0c:ed:51:22:c4:a0:1c:a8:05:97:40:1a: 97:df:1a:48:40:70:6a:fc:f5:a5:59:1e:e5:aa:51:17:1a:75: d3:0f:23:25:8e:a8:a8:4f:7f:6f:eb:f6:e2:28:8f:41:3d:98: 0b:76:8e:73:0c:58:e1:fb:ce:ad:8b:a1:55:7e:49:72:de:e4: 37:ca:89:6d:12:98:51:17:ee:36:d7:00:d4:75:89:4e:34:72: 4e:91:b9:2b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTSUJ4XB/jB2Uvanbg0FpQzvcKHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MTUwNDI2MjdaFw0yNjA2MTYwNzQxMjdaMDMxMTAvBgNV BAMTKERFODQ4NDU0N0QzMDBGMjZCN0QyMjNBQjZBRDZDNTRGMDVDMzQ0ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVytuPBFcjYwTz+MVupNOG4BX1 YExkC5yVGmOc9MFhlGcG96WCkNYdFEBfi7ikQiUDft2ieETNPlO4LY5d267hbOOT 04dO6AmV7Dlc1koRXBanFoH3sBPP/atG9ZlBEcS1X4oubAn6T0Ra+o4xAEDrTVEY 7X3z1A1zYwizY6jnt+9E+rtJRJnqrgO3tclMlybSNYhnLnx35zmk6YOUKcbMS166 2o9ln5Jl55E+IZ0z+um5DdlZesZ2Xvbxkb4zAPWRXRhDtL4gfnyeNVC18vGTVlT5 lZ+Htz5xd0FWSnGu2in0rtJ+fcauPfA50ZYwWRcRZrKenc3eqFnI70BN00O9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3oSEVH0wDya30iOratbFTwXDRIkwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5vNROpkB6OtT24eOzt1 eX/v9I1eugwE5BKvjnXY5aOXdMJe0WLiQAynvgN8+O30zOv8UWiO7o4Ww1AwG3w8 8UgBtLEXG92grpZAjZzQphyApaF/OA41wx3v8xoxArvKOGorelKpAafMqObskIiR SVtX2GKu1vZ7JgsHhQie1LJuus8U+BqDfbwebTwZV5q+WKDC6iqBhGoqDlxF34de PFT0Axej6ZvHDO1RIsSgHKgFl0Aal98aSEBwavz1pVke5apRFxp10w8jJY6oqE9/ b+v24iiPQT2YC3aOcwxY4fvOrYuhVX5Jct7kN8qJbRKYURfuNtcA1HWJTjRyTpG5 Kw== -----END CERTIFICATE-----Generated at Mon Jun 15 08:01:05 2026 by rpki-client