$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: aBvIq2MdHoX3l3HOx4Ilk2G/DHplfDbITTdDtgt7RBU= Subject key identifier: 25:BA:5D:CE:4D:7B:E7:57:6D:1A:44:44:21:6F:20:B2:63:5C:B9:28 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 461A84767457C2C64F3FA4705ACCD148BF5D91BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04E4 Signing time: Fri 22 May 2026 13:28:19 +0000 Manifest this update: Fri 22 May 2026 13:23:19 +0000 Manifest next update: Sat 23 May 2026 17:18:19 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: lDQ4TazUxMrjPsfqBSOAH3vTBK6h4Nu//iFwO7CsuzE=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 May 2026 17:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:1a:84:76:74:57:c2:c6:4f:3f:a4:70:5a:cc:d1:48:bf:5d:91:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 22 13:23:19 2026 GMT Not After : May 23 17:18:19 2026 GMT Subject: CN=25BA5DCE4D7BE7576D1A4444216F20B2635CB928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:97:7a:a6:4e:ff:9e:c1:0f:ba:0a:4d:cc: 90:0b:4e:5a:e5:26:d6:e1:c2:8f:4a:c6:85:55:65: 43:e2:05:87:fc:f0:bf:09:7a:91:b5:2a:6f:eb:15: d5:a5:90:58:e6:fb:e5:90:9c:87:68:78:81:a8:6e: f4:0b:34:ad:c0:96:f7:69:96:4e:72:9e:96:ba:3e: 43:20:d6:20:9d:08:fb:23:9c:ae:17:df:73:c5:ea: 83:ce:9b:22:16:1e:29:b9:f3:e9:7c:e3:63:d8:4c: a5:f9:17:28:c6:ac:d7:76:ea:4c:b6:f6:bd:a9:b3: 84:fd:8b:ec:9d:6c:7f:a4:24:bc:d8:58:5b:26:ff: 70:0e:0d:15:7f:50:f1:2a:fb:37:e2:54:00:97:29: 64:38:c0:74:31:9e:49:33:85:84:d6:4f:a5:58:ff: 11:fb:26:e0:4b:b2:bb:53:18:bd:62:bb:31:4b:12: f9:b7:d2:47:72:99:13:e3:b7:00:74:da:e2:35:a6: aa:5a:92:72:61:c8:d3:6a:75:da:d9:8f:33:cf:37: 0e:3a:a2:7a:44:89:3d:bd:3e:df:8e:a3:5d:02:0e: 44:1d:3e:33:41:ab:45:2a:61:74:0b:3b:71:5c:2d: a1:b7:08:96:e3:bd:89:38:91:f5:86:9c:c0:1e:db: 32:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BA:5D:CE:4D:7B:E7:57:6D:1A:44:44:21:6F:20:B2:63:5C:B9:28 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c5:a0:cf:2f:e9:a5:6b:c5:74:4a:81:9c:c7:46:cc:06:25: ea:9f:4c:dd:87:f5:f3:b3:fe:0e:a0:5e:aa:d4:56:02:20:29: e2:78:05:6a:0c:69:48:78:d9:cb:cd:1a:b1:b0:f9:ef:18:ba: 7e:7b:d0:75:a5:37:e1:cb:62:bb:cf:bf:ea:3c:ce:d1:77:50: 7d:bb:28:fe:e2:f7:eb:b5:a2:74:be:45:81:5e:7d:a9:7f:3c: 74:d5:e7:8d:12:28:7a:03:45:85:97:3a:8d:6f:69:a2:e7:06: d9:5f:ae:0a:81:50:41:7a:a9:9e:b8:92:3d:72:00:c1:4a:b6: 17:3d:f9:ec:a6:2e:e4:5f:0e:c2:93:cc:ee:30:b5:7f:62:7c: e1:13:7b:64:08:9e:84:e1:ae:17:52:98:bd:c1:eb:68:fc:7e: 14:f6:b9:e7:e1:b1:a0:91:bb:47:e0:f5:ff:62:14:1f:9b:80: 5a:4a:97:2d:39:b0:b5:07:79:86:c6:80:4b:78:5b:fb:15:62: 66:dd:1f:15:e3:da:e4:2d:1d:ec:e5:cc:da:2b:c2:f0:08:b8: 31:06:dc:8e:3d:f1:2f:50:cf:98:71:77:3b:50:7f:6f:0c:8e: 63:a7:42:ee:85:80:88:60:3d:a0:d9:16:32:0f:60:18:8c:63: f1:64:7f:ea -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURhqEdnRXwsZPP6RwWszRSL9dkbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MjIxMzIzMTlaFw0yNjA1MjMxNzE4MTlaMDMxMTAvBgNV BAMTKDI1QkE1RENFNEQ3QkU3NTc2RDFBNDQ0NDIxNkYyMEIyNjM1Q0I5MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDJd6pk7/nsEPugpNzJALTlrl Jtbhwo9KxoVVZUPiBYf88L8JepG1Km/rFdWlkFjm++WQnIdoeIGobvQLNK3Alvdp lk5ynpa6PkMg1iCdCPsjnK4X33PF6oPOmyIWHim58+l842PYTKX5FyjGrNd26ky2 9r2ps4T9i+ydbH+kJLzYWFsm/3AODRV/UPEq+zfiVACXKWQ4wHQxnkkzhYTWT6VY /xH7JuBLsrtTGL1iuzFLEvm30kdymRPjtwB02uI1pqpaknJhyNNqddrZjzPPNw46 onpEiT29Pt+Oo10CDkQdPjNBq0UqYXQLO3FcLaG3CJbjvYk4kfWGnMAe2zLRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJbpdzk1751dtGkREIW8gsmNcuSgwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMWgzy/ppWvFdEqBnMdG zAYl6p9M3Yf187P+DqBeqtRWAiAp4ngFagxpSHjZy80asbD57xi6fnvQdaU34cti u8+/6jzO0XdQfbso/uL367WidL5FgV59qX88dNXnjRIoegNFhZc6jW9poucG2V+u CoFQQXqpnriSPXIAwUq2Fz357KYu5F8OwpPM7jC1f2J84RN7ZAiehOGuF1KYvcHr aPx+FPa55+GxoJG7R+D1/2IUH5uAWkqXLTmwtQd5hsaAS3hb+xViZt0fFePa5C0d 7OXM2ivC8Ai4MQbcjj3xL1DPmHF3O1B/bwyOY6dC7oWAiGA9oNkWMg9gGIxj8WR/ 6g== -----END CERTIFICATE-----Generated at Fri May 22 21:39:25 2026 by rpki-client