$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: R3PgFEjAInL8o3yyS1fzBBd3bBN3mYlMYAYBsajtdMI= Subject key identifier: 61:EF:D9:AB:45:8B:DF:E9:E3:DB:97:22:C3:B6:00:B0:89:D4:FB:99 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 7833E0F61568E530B14FEBD15B11B9B23E5391AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 052D Signing time: Fri 17 Jul 2026 04:37:55 +0000 Manifest this update: Fri 17 Jul 2026 04:32:55 +0000 Manifest next update: Sat 18 Jul 2026 06:41:55 +0000 Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: gkFldr3jLXrGNBGc/Wcl7R8lssrKO6W8MLlz2WgEp3Y=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Jul 2026 06:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:33:e0:f6:15:68:e5:30:b1:4f:eb:d1:5b:11:b9:b2:3e:53:91:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 17 04:32:55 2026 GMT Not After : Jul 18 06:41:55 2026 GMT Subject: CN=61EFD9AB458BDFE9E3DB9722C3B600B089D4FB99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:60:a9:bf:64:21:20:1f:d7:de:11:82:58:b7: 33:89:11:7f:75:66:a0:fd:19:c5:06:44:09:f0:6a: fe:5e:91:17:58:1c:af:d6:81:d8:bf:55:d0:79:63: 51:71:25:16:06:75:67:70:f7:3e:9b:8c:66:18:31: 23:b0:d6:e4:16:2e:de:7b:d4:15:8b:43:aa:e0:c6: 94:41:e2:7e:f8:52:25:7b:03:3e:d8:2a:4e:58:f6: 57:e9:42:eb:1e:40:4b:d2:4c:ed:f0:aa:07:45:3d: b1:ab:c6:c5:cb:14:98:20:1d:b3:85:d3:98:94:ac: 14:ef:9d:2b:b9:17:5d:ff:62:3c:46:30:27:49:65: 07:4d:59:48:09:d0:89:a6:fe:bf:67:f2:6c:b3:b5: 31:dc:49:3f:d1:11:b0:52:0d:6b:56:58:00:d2:69: 36:8e:28:d6:26:dc:9d:0e:1e:34:e7:fb:76:13:d6: ae:83:3d:81:9f:b5:7f:56:ad:ba:97:67:9d:0c:92: 82:2f:34:16:5e:b3:aa:99:62:0d:fc:30:4a:73:ad: 0c:22:54:c0:d5:6a:60:55:b0:22:68:59:bc:1e:19: 67:7d:7c:dc:5e:9d:8e:f4:fb:df:d2:14:2b:37:d0: f7:a5:bd:f5:02:e0:98:90:9f:a3:4d:de:30:21:62: 00:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:EF:D9:AB:45:8B:DF:E9:E3:DB:97:22:C3:B6:00:B0:89:D4:FB:99 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c2:94:e6:a8:f5:ee:3d:17:1a:bc:60:d8:16:ff:2a:b1:79: 8c:d0:ba:94:09:36:42:2e:3d:4a:d5:bc:86:b4:71:0b:1a:2b: 65:c3:58:3e:01:0c:07:cd:6a:4e:10:93:ea:07:7f:3b:69:37: dd:59:a9:4d:8a:67:8c:49:7c:fc:89:1a:b4:d1:50:62:fd:e0: 02:a1:12:5e:be:0f:1d:cb:b7:ab:d4:52:83:c6:05:5c:8b:c8: 9f:4c:e7:6b:d5:c3:7b:0d:d5:e4:e9:96:3f:38:0f:10:b9:77: 94:75:04:9d:b2:6f:07:81:06:02:38:5e:d8:24:70:b6:6c:7e: 2a:01:b1:a7:72:8b:77:57:57:63:c5:d3:40:a5:37:b9:c8:6f: b9:0b:6c:81:77:58:06:b7:71:21:43:26:38:ac:c4:5e:e5:47: 94:49:f5:29:75:5d:bf:72:b1:1b:b4:88:dc:c2:99:15:f3:43: 46:4e:99:2a:61:c0:b5:22:e0:6c:fe:21:2f:09:1d:a4:f7:96: cc:fe:01:48:fa:e3:cd:a0:62:10:96:2f:c0:6d:78:31:37:4d: 88:0e:d8:4e:03:e6:0f:9d:d3:dd:42:7f:af:a8:21:03:37:4e: 12:a8:e9:22:0e:dc:84:89:4e:c1:0b:60:e6:82:fa:cd:01:34: 8b:93:21:6b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUeDPg9hVo5TCxT+vRWxG5sj5TkaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MTcwNDMyNTVaFw0yNjA3MTgwNjQxNTVaMDMxMTAvBgNV BAMTKDYxRUZEOUFCNDU4QkRGRTlFM0RCOTcyMkMzQjYwMEIwODlENEZCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHYKm/ZCEgH9feEYJYtzOJEX91 ZqD9GcUGRAnwav5ekRdYHK/Wgdi/VdB5Y1FxJRYGdWdw9z6bjGYYMSOw1uQWLt57 1BWLQ6rgxpRB4n74UiV7Az7YKk5Y9lfpQuseQEvSTO3wqgdFPbGrxsXLFJggHbOF 05iUrBTvnSu5F13/YjxGMCdJZQdNWUgJ0Imm/r9n8myztTHcST/REbBSDWtWWADS aTaOKNYm3J0OHjTn+3YT1q6DPYGftX9WrbqXZ50MkoIvNBZes6qZYg38MEpzrQwi VMDVamBVsCJoWbweGWd9fNxenY70+9/SFCs30PelvfUC4JiQn6NN3jAhYgCzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYe/Zq0WL3+nj25ciw7YAsInU+5kwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisKU5qj17j0XGrxg2Bb/ KrF5jNC6lAk2Qi49StW8hrRxCxorZcNYPgEMB81qThCT6gd/O2k33VmpTYpnjEl8 /IkatNFQYv3gAqESXr4PHcu3q9RSg8YFXIvIn0zna9XDew3V5OmWPzgPELl3lHUE nbJvB4EGAjhe2CRwtmx+KgGxp3KLd1dXY8XTQKU3uchvuQtsgXdYBrdxIUMmOKzE XuVHlEn1KXVdv3KxG7SI3MKZFfNDRk6ZKmHAtSLgbP4hLwkdpPeWzP4BSPrjzaBi EJYvwG14MTdNiA7YTgPmD53T3UJ/r6ghAzdOEqjpIg7chIlOwQtg5oL6zQE0i5Mh aw== -----END CERTIFICATE-----Generated at Fri Jul 17 10:40:37 2026 by rpki-client