$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: uS43Shmu1iLGoazcMiENX2A+Gk6CoWw4qgHV8xcgjPA= Subject key identifier: F7:9F:7D:90:CE:66:8C:D7:B6:A2:FB:96:8A:70:21:B6:71:71:DE:6E Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 0FB33C8386E8B7FC55D451B2BEC6F5AECB1BDD54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 055D Signing time: Sat 22 Aug 2026 03:35:10 +0000 Manifest this update: Sat 22 Aug 2026 03:30:10 +0000 Manifest next update: Sun 23 Aug 2026 05:01:10 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: D6ouPRriwwmh9xHcMb0QZbO6INJ3cGJZnSyrm1Av8YM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Aug 2026 05:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b3:3c:83:86:e8:b7:fc:55:d4:51:b2:be:c6:f5:ae:cb:1b:dd:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 22 03:30:10 2026 GMT Not After : Aug 23 05:01:10 2026 GMT Subject: CN=F79F7D90CE668CD7B6A2FB968A7021B67171DE6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ac:35:92:4b:8f:82:4c:18:e2:07:a5:83:40: 95:1c:8f:d9:da:08:4e:70:d4:56:ba:7d:f0:ec:7d: ab:a0:20:63:31:6b:33:1f:73:c3:47:7e:5b:04:ae: 1c:2d:8f:b0:00:18:ed:a1:a1:f1:16:7a:79:d0:0d: 50:2a:1d:82:7a:32:d0:36:1b:a8:0f:d5:76:d4:a9: 1b:ed:5b:8d:fc:f1:dd:ca:74:cc:12:2b:aa:be:ec: 9c:5e:17:9e:92:fd:0a:e6:8f:31:93:61:ec:b4:ba: 29:9b:42:01:4a:f9:09:9e:81:5d:ba:97:ba:a5:7b: 37:75:a1:2b:98:52:f5:f4:34:fe:46:cc:00:c8:3c: 50:82:e6:1f:a6:b1:74:39:36:03:47:38:e3:47:cd: f2:c2:5d:06:23:26:b5:1b:aa:df:c8:6f:0d:92:51: 12:cb:31:d2:8a:29:0c:2d:21:6d:be:54:a5:58:42: 94:7c:36:f7:4c:bc:4b:20:1d:9d:e2:a0:e7:55:fe: 45:d5:13:7b:31:51:45:05:78:86:3f:57:6f:98:19: 9b:f8:f2:a2:eb:19:93:2c:36:17:e3:20:78:f2:8b: 0b:02:a8:b3:2d:86:81:25:8b:1c:d0:9a:8a:e1:25: 03:79:03:9d:81:52:d9:38:3a:71:07:5b:d8:42:34: f8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9F:7D:90:CE:66:8C:D7:B6:A2:FB:96:8A:70:21:B6:71:71:DE:6E X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:74:f0:a4:ad:2c:b4:26:b3:a5:02:54:2a:06:0d:0f:ac:71: 8d:40:37:3b:cb:3a:9d:91:ea:0a:e8:0c:25:b8:2f:b6:f5:d3: 7d:f3:90:b4:46:68:8f:2b:ed:51:12:14:6b:65:29:f8:94:44: cc:1b:d2:7b:04:a3:73:9b:12:cc:67:b5:b1:13:8d:4a:50:c2: 76:42:8a:ee:44:a0:04:d6:fa:0d:53:c6:02:dc:6e:62:d8:d6: 75:5e:16:ce:7a:9f:92:e3:99:ea:5d:9a:d8:3d:06:ee:bc:7a: 4c:6f:95:0f:ec:e1:14:67:05:91:63:c2:3c:4c:99:fc:a8:9e: 53:8c:18:0f:c5:54:87:13:88:ef:de:16:58:01:70:fe:fa:69: 6d:3c:69:7a:53:b5:7a:a2:9b:ca:71:94:ff:93:0e:4d:ff:76: ae:a2:16:58:96:6f:a8:81:04:36:b1:27:66:d0:3f:f7:1d:e2: 6f:9a:40:60:fc:51:4b:35:a0:42:50:06:6e:3f:0f:77:80:25: 8e:d2:01:97:55:ed:68:a1:4c:23:76:12:b7:e3:22:9f:87:cd: cc:7d:26:7b:e0:bd:31:e5:e6:2c:a5:fe:79:27:09:64:40:ed: a7:c5:b1:2d:5b:07:40:9f:03:a8:38:8a:09:39:fc:88:2a:6e: f6:40:5e:1d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUD7M8g4bot/xV1FGyvsb1rssb3VQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MjIwMzMwMTBaFw0yNjA4MjMwNTAxMTBaMDMxMTAvBgNV BAMTKEY3OUY3RDkwQ0U2NjhDRDdCNkEyRkI5NjhBNzAyMUI2NzE3MURFNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFrDWSS4+CTBjiB6WDQJUcj9na CE5w1Fa6ffDsfaugIGMxazMfc8NHflsErhwtj7AAGO2hofEWennQDVAqHYJ6MtA2 G6gP1XbUqRvtW4388d3KdMwSK6q+7JxeF56S/QrmjzGTYey0uimbQgFK+QmegV26 l7qlezd1oSuYUvX0NP5GzADIPFCC5h+msXQ5NgNHOONHzfLCXQYjJrUbqt/Ibw2S URLLMdKKKQwtIW2+VKVYQpR8NvdMvEsgHZ3ioOdV/kXVE3sxUUUFeIY/V2+YGZv4 8qLrGZMsNhfjIHjyiwsCqLMthoElixzQmorhJQN5A52BUtk4OnEHW9hCNPjNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU9599kM5mjNe2ovuWinAhtnFx3m4wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHTwpK0stCazpQJUKgYN D6xxjUA3O8s6nZHqCugMJbgvtvXTffOQtEZojyvtURIUa2Up+JREzBvSewSjc5sS zGe1sRONSlDCdkKK7kSgBNb6DVPGAtxuYtjWdV4WznqfkuOZ6l2a2D0G7rx6TG+V D+zhFGcFkWPCPEyZ/KieU4wYD8VUhxOI794WWAFw/vppbTxpelO1eqKbynGU/5MO Tf92rqIWWJZvqIEENrEnZtA/9x3ib5pAYPxRSzWgQlAGbj8Pd4AljtIBl1XtaKFM I3YSt+Min4fNzH0me+C9MeXmLKX+eScJZEDtp8WxLVsHQJ8DqDiKCTn8iCpu9kBe HQ== -----END CERTIFICATE-----Generated at Sat Aug 22 20:19:37 2026 by rpki-client