$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: pDuR1BRmHcCmpcncExw/xysKqYrDjG2TRhohZ35u6so= Subject key identifier: A0:8F:40:43:17:B5:78:24:EC:F6:EC:4D:B0:73:E7:59:A0:C4:2D:FB Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 0F2A6B1629D55589D4C627C70AE15F74057479A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0477 Signing time: Sun 01 Mar 2026 23:42:34 +0000 Manifest this update: Sun 01 Mar 2026 23:37:34 +0000 Manifest next update: Tue 03 Mar 2026 01:29:34 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: feWKEUu4mRKTt4PgVnC4/qSIcfC6OifBk84+5yqbdhc=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2a:6b:16:29:d5:55:89:d4:c6:27:c7:0a:e1:5f:74:05:74:79:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Mar 1 23:37:34 2026 GMT Not After : Mar 3 01:29:34 2026 GMT Subject: CN=A08F404317B57824ECF6EC4DB073E759A0C42DFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7c:b5:1d:fd:cb:f0:4a:09:6c:de:94:1e:eb: 4b:7b:bc:1e:f5:f6:37:36:cd:c1:ff:41:c2:ed:ed: ab:20:e2:ae:bd:78:cc:67:e5:39:5c:b1:77:77:80: dd:14:44:85:9c:17:ee:79:6b:fd:00:50:1f:4f:37: 1d:70:71:34:ff:2e:2e:15:92:54:57:00:f9:e0:09: 24:13:3e:cd:f5:ee:e5:0b:66:5a:7a:da:7e:0c:40: 6b:6a:c0:0b:44:69:c8:fb:d1:1f:e9:fb:9a:60:bc: 68:b8:95:38:88:2d:53:1f:0a:b3:4b:19:01:b8:39: 0b:5e:ce:aa:46:29:11:5f:c3:0e:b1:32:b8:1a:26: 16:68:c3:8b:1d:26:35:79:ad:a2:08:f3:53:01:35: 1b:a0:99:5e:6a:f8:78:37:db:dd:55:63:1d:07:fb: cd:bd:c5:58:03:24:f8:e2:a1:a3:b9:e3:ff:b8:11: ad:36:d6:68:77:74:e5:74:20:37:fd:b3:79:c3:ba: e8:4a:bb:aa:9b:db:d3:b0:33:a6:3d:c5:4f:04:e8: 7f:ec:a9:13:ba:e2:1d:3e:39:88:35:a7:2c:32:f7: 94:ae:64:a9:b7:06:29:7d:87:5b:a2:ef:4c:f7:7c: 73:36:9b:02:8d:57:06:60:9b:78:05:40:f7:af:aa: 33:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8F:40:43:17:B5:78:24:EC:F6:EC:4D:B0:73:E7:59:A0:C4:2D:FB X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:d6:f4:93:c9:99:e5:c0:6d:18:3a:b0:f1:f9:e8:8d:19:89: 49:fe:8c:c5:17:fd:ad:13:5d:60:31:2d:f3:06:61:16:fd:ad: 19:80:35:06:dd:a4:d3:0e:d8:9b:94:1e:a6:43:ff:68:fe:be: 51:7c:ab:e8:03:39:25:86:a4:23:21:5f:65:f7:12:c4:e9:a5: ff:6a:c2:4b:4e:2d:44:26:78:70:0e:82:b0:ca:66:56:df:8a: a9:3f:87:4c:00:08:fe:d1:90:3e:1c:97:05:38:ae:70:8c:72: 14:bf:66:0c:c6:b9:fe:35:89:96:32:75:5a:56:69:77:48:02: 9a:71:c6:2d:b0:af:b9:a0:bf:fc:8b:1e:88:dc:b6:c7:ec:e2: 3e:19:cf:2e:4e:b2:f2:bb:6b:da:08:ea:23:ac:7f:6b:50:57: b1:04:e9:f8:20:25:fd:9e:f7:d1:ea:5b:18:3e:44:de:43:89: d5:63:63:66:56:d2:f4:8b:b5:a7:9d:1c:37:6b:fd:e3:7d:e4: f1:03:d6:dc:74:3f:f7:40:bb:df:f6:85:8a:ff:1b:dd:0b:ed: 47:fc:ed:f8:76:3b:f2:9e:64:ef:93:2b:aa:e4:5c:a3:c6:5c: 98:b8:a0:32:c8:5e:a1:f9:fe:f6:f2:92:ef:f5:16:e1:71:9b: 27:c3:b4:e9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDyprFinVVYnUxifHCuFfdAV0eacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAzMDEyMzM3MzRaFw0yNjAzMDMwMTI5MzRaMDMxMTAvBgNV BAMTKEEwOEY0MDQzMTdCNTc4MjRFQ0Y2RUM0REIwNzNFNzU5QTBDNDJERkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTfLUd/cvwSgls3pQe60t7vB71 9jc2zcH/QcLt7asg4q69eMxn5TlcsXd3gN0URIWcF+55a/0AUB9PNx1wcTT/Li4V klRXAPngCSQTPs317uULZlp62n4MQGtqwAtEacj70R/p+5pgvGi4lTiILVMfCrNL GQG4OQtezqpGKRFfww6xMrgaJhZow4sdJjV5raII81MBNRugmV5q+Hg3291VYx0H +829xVgDJPjioaO54/+4Ea021mh3dOV0IDf9s3nDuuhKu6qb29OwM6Y9xU8E6H/s qRO64h0+OYg1pywy95SuZKm3Bil9h1ui70z3fHM2mwKNVwZgm3gFQPevqjPDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUoI9AQxe1eCTs9uxNsHPnWaDELfswHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9b0k8mZ5cBtGDqw8fno jRmJSf6MxRf9rRNdYDEt8wZhFv2tGYA1Bt2k0w7Ym5QepkP/aP6+UXyr6AM5JYak IyFfZfcSxOml/2rCS04tRCZ4cA6CsMpmVt+KqT+HTAAI/tGQPhyXBTiucIxyFL9m DMa5/jWJljJ1WlZpd0gCmnHGLbCvuaC//IseiNy2x+ziPhnPLk6y8rtr2gjqI6x/ a1BXsQTp+CAl/Z730epbGD5E3kOJ1WNjZlbS9Iu1p50cN2v9433k8QPW3HQ/90C7 3/aFiv8b3QvtR/zt+HY78p5k75MrquRco8ZcmLigMsheofn+9vKS7/UW4XGbJ8O0 6Q== -----END CERTIFICATE-----Generated at Mon Mar 2 09:28:04 2026 by rpki-client