$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: Did5P8BrK/JpQrj7UmTljjwngy1jaCweVlFKc4TnffU= Subject key identifier: 56:41:8B:C2:41:4F:6F:13:89:48:4B:93:31:0B:6E:45:D0:CE:73:01 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 063101E7B37DFBD2CCD7442F194D341A838A846D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0535 Signing time: Thu 23 Jul 2026 05:21:49 +0000 Manifest this update: Thu 23 Jul 2026 05:16:49 +0000 Manifest next update: Fri 24 Jul 2026 05:21:49 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: RglseEwHdU9YDiOFp65262Xe/tqo3bVxio+yqXXBO0Q=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 05:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:31:01:e7:b3:7d:fb:d2:cc:d7:44:2f:19:4d:34:1a:83:8a:84:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 23 05:16:49 2026 GMT Not After : Jul 24 05:21:49 2026 GMT Subject: CN=56418BC2414F6F1389484B93310B6E45D0CE7301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e8:4d:01:d5:77:c1:0a:58:8b:63:64:18:ff: 2d:ce:03:9a:30:5a:0a:05:61:00:e9:ba:15:ee:bc: d1:f9:bd:cb:ff:12:9c:ec:93:06:5c:3b:25:a5:95: 72:d4:ed:7b:21:f8:03:94:05:22:93:74:e0:4a:c9: 24:da:aa:5c:f8:d7:17:5c:85:d0:19:d8:55:ef:3e: 12:5b:2e:6a:af:40:31:9f:6d:d1:96:fa:bf:e9:c7: c0:07:ec:7c:d0:62:00:54:11:c2:3a:af:73:cb:5b: 0b:6d:d1:d5:d2:28:c7:89:ca:a3:dc:2e:3f:32:41: 3a:a3:cc:cc:19:a0:b2:89:d8:6d:e9:ba:ac:4e:58: bf:bf:90:51:e5:38:b7:23:fc:c1:e8:7c:3c:97:f6: 14:a8:34:17:fe:13:1a:90:e9:d7:ca:16:5a:39:e4: 02:d4:40:fa:de:ab:61:c7:b9:68:16:12:44:b7:e0: c2:a1:81:bb:71:6f:db:e8:4e:19:c9:a2:dd:29:21: 2c:a6:db:ff:ab:0d:3f:08:e0:1a:01:d6:8e:cb:ee: 72:e5:7b:23:4d:6e:b3:a3:99:8e:fb:9f:37:86:e3: b9:f8:9b:80:5c:64:9c:16:71:6d:61:7c:29:47:a8: 81:b1:66:bc:5d:9b:d6:b5:f4:82:6c:d1:89:1d:5c: 57:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:41:8B:C2:41:4F:6F:13:89:48:4B:93:31:0B:6E:45:D0:CE:73:01 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:da:c0:64:92:af:45:bf:38:4b:90:3f:89:9d:48:c1:f6:48: 36:3d:64:d1:52:11:88:65:40:c4:2a:b0:34:85:3a:db:d9:e0: 5f:46:5d:0c:e9:0d:07:99:76:67:43:0d:f6:35:b5:4d:ac:87: 64:e3:3b:50:85:12:26:c6:a9:c0:3c:a7:1a:7c:27:3a:1b:f8: c7:10:7e:84:8f:76:a4:11:8b:2e:53:cd:fe:e0:9e:d0:54:1a: f8:8b:61:b1:86:ee:9d:49:28:77:21:d3:5b:b9:a9:4e:6a:f2: 9e:98:05:6f:60:95:0f:90:69:bc:45:99:25:71:1d:3f:f7:9f: c4:26:dd:e6:18:30:4a:13:02:e0:0d:b8:a3:e7:66:dd:57:a2: 0b:a7:b9:97:41:d3:48:70:23:ab:aa:74:7e:30:2a:97:76:34: b5:41:7c:88:3f:e3:2e:a6:1a:de:5a:00:19:ff:e3:ac:d3:04: 7e:38:bb:24:67:fe:17:ea:50:0c:85:04:78:b4:1f:07:5f:17: 97:7c:22:19:46:a6:ed:10:34:ff:11:da:f0:25:be:f6:c1:d2: 02:1d:df:55:48:89:c3:84:19:73:1f:21:b0:ab:4c:96:cb:ec: a4:82:36:8b:73:eb:ad:37:c1:af:85:57:43:30:8f:6d:11:49: 92:61:e8:5d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBjEB57N9+9LM10QvGU00GoOKhG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MjMwNTE2NDlaFw0yNjA3MjQwNTIxNDlaMDMxMTAvBgNV BAMTKDU2NDE4QkMyNDE0RjZGMTM4OTQ4NEI5MzMxMEI2RTQ1RDBDRTczMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp6E0B1XfBCliLY2QY/y3OA5ow WgoFYQDpuhXuvNH5vcv/EpzskwZcOyWllXLU7Xsh+AOUBSKTdOBKySTaqlz41xdc hdAZ2FXvPhJbLmqvQDGfbdGW+r/px8AH7HzQYgBUEcI6r3PLWwtt0dXSKMeJyqPc Lj8yQTqjzMwZoLKJ2G3puqxOWL+/kFHlOLcj/MHofDyX9hSoNBf+ExqQ6dfKFlo5 5ALUQPreq2HHuWgWEkS34MKhgbtxb9voThnJot0pISym2/+rDT8I4BoB1o7L7nLl eyNNbrOjmY77nzeG47n4m4BcZJwWcW1hfClHqIGxZrxdm9a19IJs0YkdXFfzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUVkGLwkFPbxOJSEuTMQtuRdDOcwEwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9rAZJKvRb84S5A/iZ1I wfZINj1k0VIRiGVAxCqwNIU629ngX0ZdDOkNB5l2Z0MN9jW1TayHZOM7UIUSJsap wDynGnwnOhv4xxB+hI92pBGLLlPN/uCe0FQa+IthsYbunUkodyHTW7mpTmrynpgF b2CVD5BpvEWZJXEdP/efxCbd5hgwShMC4A24o+dm3VeiC6e5l0HTSHAjq6p0fjAq l3Y0tUF8iD/jLqYa3loAGf/jrNMEfji7JGf+F+pQDIUEeLQfB18Xl3wiGUam7RA0 /xHa8CW+9sHSAh3fVUiJw4QZcx8hsKtMlsvspII2i3PrrTfBr4VXQzCPbRFJkmHo XQ== -----END CERTIFICATE-----Generated at Thu Jul 23 16:06:21 2026 by rpki-client