$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: Y1CoCC+C7Wg+twi+KitzFv7CBTn1NYzzmlvzsZMEzFk= Subject key identifier: 19:4E:EE:F1:55:86:9C:8A:CA:A2:9E:4B:46:2C:50:CD:78:1F:72:CC Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 021CC51315A7B1DD426FD1896D470EBB6BDD4530 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 056F Signing time: Fri 04 Sep 2026 20:40:51 +0000 Manifest this update: Fri 04 Sep 2026 20:35:51 +0000 Manifest next update: Sun 06 Sep 2026 00:06:51 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Imx40I8M9MyAeE7SjH/2Hs7OUCyWS2rt96h0InbimAY=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Sep 2026 00:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:1c:c5:13:15:a7:b1:dd:42:6f:d1:89:6d:47:0e:bb:6b:dd:45:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Sep 4 20:35:51 2026 GMT Not After : Sep 6 00:06:51 2026 GMT Subject: CN=194EEEF155869C8ACAA29E4B462C50CD781F72CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:54:6f:75:a1:d8:f5:ac:00:1b:03:15:02:c7: 9e:45:05:c8:f7:03:3c:b3:fd:d7:6b:b0:6a:d3:8e: 38:c1:95:7c:aa:6f:ea:78:b2:7d:f9:8f:d6:6d:8a: f5:e8:6a:78:c6:af:8c:5d:f7:6b:fa:47:12:d0:ef: ba:f1:a3:fd:d4:76:2e:71:a2:29:f5:ce:89:4b:2c: 6e:05:75:8f:8b:00:86:fb:a3:25:5c:0d:9c:51:27: 4d:2d:b8:a3:4a:8c:4c:75:8f:88:b1:20:dc:39:c8: c0:10:b8:8b:4a:f0:f7:cc:f1:55:be:8d:c5:d8:14: b6:de:73:fa:69:86:c6:af:96:58:51:98:2c:b1:19: 3b:64:9c:bf:65:9d:b7:db:23:1c:ac:32:f0:18:0f: 05:55:b8:90:c8:fe:0a:8c:f0:5d:46:2d:9d:49:b1: fd:d0:23:10:9f:4b:52:21:5f:ba:5a:75:1c:ab:6c: d8:50:04:3e:62:37:19:09:eb:95:33:7f:d9:ee:87: be:e4:fb:67:ab:4f:3c:1e:12:60:63:3c:56:ec:55: a8:02:76:17:57:6d:fa:65:ac:a1:25:f8:8c:c9:87: a4:0d:e0:f2:22:01:a8:c2:77:52:02:24:4d:85:57: 8d:a2:9c:59:5a:5f:bb:93:6e:87:e1:97:04:16:32: 6a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4E:EE:F1:55:86:9C:8A:CA:A2:9E:4B:46:2C:50:CD:78:1F:72:CC X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:47:15:d5:84:0e:ad:5b:f3:12:eb:3a:38:b2:a3:08:6a:05: e0:7b:dc:fe:6d:b7:da:c6:9b:89:89:72:4a:78:c1:5c:81:e8: d6:f4:47:0c:ad:7e:fd:c6:9e:1c:b4:9b:3d:02:0a:65:d7:7a: e9:d1:1c:b7:31:6d:01:6c:46:17:cb:11:10:d4:d7:bc:ae:e2: 5a:4a:52:3d:e1:fd:70:75:3a:45:e6:72:d8:be:37:aa:f9:08: 63:77:f8:ca:8c:a0:10:c6:a6:0a:2d:05:4a:d7:ac:fe:25:75: 64:c4:16:db:00:6f:ce:36:43:e5:b4:3e:ba:2d:cb:7d:a9:53: 10:0e:c5:23:72:af:ce:07:30:0e:92:01:fe:d0:09:58:cf:7b: 6a:a1:e5:9c:41:63:97:c9:ba:e9:7b:cc:ee:37:df:46:f6:fc: 15:41:54:27:12:69:45:98:d8:76:97:76:54:c0:1b:6d:33:07: 1b:91:6b:2c:4f:c8:4e:29:eb:55:6d:16:de:b9:a7:6b:c9:9a: a7:e8:4a:9b:25:98:cc:22:b5:d6:25:84:7e:a3:a9:5d:3e:d1: cd:75:4d:43:29:5b:0e:45:d4:a9:56:36:23:b9:53:e6:00:0f: 7f:66:38:9e:2c:5b:1f:2a:79:17:87:07:3b:14:4f:b8:c4:59: 21:36:a3:9a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAhzFExWnsd1Cb9GJbUcOu2vdRTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA5MDQyMDM1NTFaFw0yNjA5MDYwMDA2NTFaMDMxMTAvBgNV BAMTKDE5NEVFRUYxNTU4NjlDOEFDQUEyOUU0QjQ2MkM1MENENzgxRjcyQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVG91odj1rAAbAxUCx55FBcj3 Azyz/ddrsGrTjjjBlXyqb+p4sn35j9ZtivXoanjGr4xd92v6RxLQ77rxo/3Udi5x oin1zolLLG4FdY+LAIb7oyVcDZxRJ00tuKNKjEx1j4ixINw5yMAQuItK8PfM8VW+ jcXYFLbec/pphsavllhRmCyxGTtknL9lnbfbIxysMvAYDwVVuJDI/gqM8F1GLZ1J sf3QIxCfS1IhX7padRyrbNhQBD5iNxkJ65Uzf9nuh77k+2erTzweEmBjPFbsVagC dhdXbfplrKEl+IzJh6QN4PIiAajCd1ICJE2FV42inFlaX7uTbofhlwQWMmpVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGU7u8VWGnIrKop5LRixQzXgfcswwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkcV1YQOrVvzEus6OLKj CGoF4Hvc/m232sabiYlySnjBXIHo1vRHDK1+/caeHLSbPQIKZdd66dEctzFtAWxG F8sRENTXvK7iWkpSPeH9cHU6ReZy2L43qvkIY3f4yoygEMamCi0FStes/iV1ZMQW 2wBvzjZD5bQ+ui3LfalTEA7FI3KvzgcwDpIB/tAJWM97aqHlnEFjl8m66XvM7jff Rvb8FUFUJxJpRZjYdpd2VMAbbTMHG5FrLE/ITinrVW0W3rmna8map+hKmyWYzCK1 1iWEfqOpXT7RzXVNQylbDkXUqVY2I7lT5gAPf2Y4nixbHyp5F4cHOxRPuMRZITaj mg== -----END CERTIFICATE-----Generated at Sat Sep 5 08:15:17 2026 by rpki-client