$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: vx0E9KGTu+YwLHB/FyLH2n06tAf0NwZWbaVoIZQiQjc= Subject key identifier: 30:B5:F5:6F:39:73:AC:04:DF:63:EB:F4:DD:22:A7:33:12:8B:DC:33 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 460BD273B556165DEFCA34D95BE317141F98CCB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04DE Signing time: Mon 18 May 2026 09:28:21 +0000 Manifest this update: Mon 18 May 2026 09:23:21 +0000 Manifest next update: Tue 19 May 2026 09:37:21 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: K0bK82hlhwtO9SDMsw2G/WFXgG4ZT7zKmKo9qR9jH9c=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 19 May 2026 09:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:0b:d2:73:b5:56:16:5d:ef:ca:34:d9:5b:e3:17:14:1f:98:cc:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 18 09:23:21 2026 GMT Not After : May 19 09:37:21 2026 GMT Subject: CN=30B5F56F3973AC04DF63EBF4DD22A733128BDC33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9d:43:3b:ed:59:c0:4b:28:98:a5:9d:6e:35: ef:ba:d8:2f:cf:d6:e5:89:2b:4f:a5:47:98:85:cb: b1:6c:ff:94:c6:3e:8d:f7:1c:3c:da:20:52:84:fb: 92:35:5c:5e:5e:93:a1:ed:c7:85:d9:eb:1b:4f:93: 88:20:f5:26:b3:ea:27:3c:5e:87:e8:6d:b5:6b:db: 8f:71:e1:f7:6c:d5:ba:9e:00:03:a2:14:31:27:81: d7:40:76:5f:31:86:fc:b9:11:7b:ed:0c:af:54:08: 75:b6:0f:c5:19:1a:f8:f3:69:c5:68:67:4f:6a:44: b0:73:85:4b:4d:ed:59:37:f4:44:38:f4:54:72:12: fd:c4:ce:45:c3:59:c1:e6:e4:2a:22:89:91:5f:f0: 04:cf:79:63:c4:2c:38:32:a8:7b:dc:47:c7:41:f4: 42:27:b5:b5:ba:f4:f4:75:fd:d2:31:bc:59:62:d1: c7:04:a4:f9:0c:fb:ac:f9:47:13:22:d9:68:b4:e3: bd:68:0c:5a:84:22:5b:e2:05:d2:fb:82:36:ac:f8: 63:26:19:da:12:f1:21:de:9d:94:e6:27:64:e4:9f: 8f:34:6b:ec:90:26:bb:74:55:65:95:c9:74:27:97: 83:d2:7b:e6:98:9f:23:c0:bc:06:ed:f5:f2:eb:79: c3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B5:F5:6F:39:73:AC:04:DF:63:EB:F4:DD:22:A7:33:12:8B:DC:33 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:b5:c0:ef:18:13:27:9c:66:67:21:6b:29:03:5a:fa:3d:6a: ec:90:0e:a9:3f:6c:c5:53:86:b5:f3:b0:9c:72:8a:41:33:4c: 96:90:80:28:5d:63:55:b3:6f:92:b0:9a:40:52:ba:16:a2:e7: 94:94:7d:ed:83:6a:5f:db:26:86:fd:d1:e5:87:fc:9e:05:42: 61:4e:a9:de:80:f3:d3:a5:47:90:c1:32:5e:a1:0b:c4:0a:6c: dd:b7:1a:e8:4e:b0:1f:b0:e9:be:39:3f:78:20:39:20:ba:ed: 03:24:c0:e5:0a:3f:40:24:55:06:79:8f:32:85:82:d3:bd:26: 51:d1:12:17:3c:bd:16:2f:3f:a4:af:6b:21:02:ef:24:dd:67: 1b:03:cf:16:1e:78:e9:21:48:f1:12:f6:fd:10:c4:e3:6a:4a: b3:89:39:5c:a2:9b:de:50:d8:f5:b4:3a:65:af:2c:46:c8:b7: a3:69:98:22:8c:64:a8:88:b4:c9:be:e4:d2:c9:d9:8e:80:9c: 76:47:db:39:3c:53:bb:ac:34:4f:04:c0:c1:49:33:1d:ef:81: c6:09:f5:77:d4:8e:38:cd:b3:d7:ea:9e:e8:03:44:c6:bb:72: cd:88:31:b5:83:0a:46:de:0e:67:a8:7b:27:b5:f7:1a:ba:9f: f4:ae:66:9d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURgvSc7VWFl3vyjTZW+MXFB+YzLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MTgwOTIzMjFaFw0yNjA1MTkwOTM3MjFaMDMxMTAvBgNV BAMTKDMwQjVGNTZGMzk3M0FDMDRERjYzRUJGNEREMjJBNzMzMTI4QkRDMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtnUM77VnASyiYpZ1uNe+62C/P 1uWJK0+lR5iFy7Fs/5TGPo33HDzaIFKE+5I1XF5ek6Htx4XZ6xtPk4gg9Saz6ic8 XofobbVr249x4fds1bqeAAOiFDEngddAdl8xhvy5EXvtDK9UCHW2D8UZGvjzacVo Z09qRLBzhUtN7Vk39EQ49FRyEv3EzkXDWcHm5CoiiZFf8ATPeWPELDgyqHvcR8dB 9EIntbW69PR1/dIxvFli0ccEpPkM+6z5RxMi2Wi0471oDFqEIlviBdL7gjas+GMm GdoS8SHenZTmJ2Tkn480a+yQJrt0VWWVyXQnl4PSe+aYnyPAvAbt9fLrecM7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUMLX1bzlzrATfY+v03SKnMxKL3DMwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLXA7xgTJ5xmZyFrKQNa +j1q7JAOqT9sxVOGtfOwnHKKQTNMlpCAKF1jVbNvkrCaQFK6FqLnlJR97YNqX9sm hv3R5Yf8ngVCYU6p3oDz06VHkMEyXqELxAps3bca6E6wH7Dpvjk/eCA5ILrtAyTA 5Qo/QCRVBnmPMoWC070mUdESFzy9Fi8/pK9rIQLvJN1nGwPPFh546SFI8RL2/RDE 42pKs4k5XKKb3lDY9bQ6Za8sRsi3o2mYIoxkqIi0yb7k0snZjoCcdkfbOTxTu6w0 TwTAwUkzHe+Bxgn1d9SOOM2z1+qe6ANExrtyzYgxtYMKRt4OZ6h7J7X3Grqf9K5m nQ== -----END CERTIFICATE-----Generated at Mon May 18 17:16:55 2026 by rpki-client