$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: L0orJ58N/cPLAOMO3AS6+BrZUihtEgxxXmNa8k6pleE= Subject key identifier: D5:46:D9:56:0A:6D:BB:33:FD:6C:4E:5A:10:99:2A:89:2E:74:FD:78 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 553984F967904AE1A350D3F0A69A35BC3B74447E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0532 Signing time: Mon 20 Jul 2026 23:00:59 +0000 Manifest this update: Mon 20 Jul 2026 22:55:59 +0000 Manifest next update: Wed 22 Jul 2026 01:33:59 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: BtWX7aZRpuwqkSKL6qk0Wi7R1lVMwsJOHkxPoKAvzW8=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 01:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:39:84:f9:67:90:4a:e1:a3:50:d3:f0:a6:9a:35:bc:3b:74:44:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 20 22:55:59 2026 GMT Not After : Jul 22 01:33:59 2026 GMT Subject: CN=D546D9560A6DBB33FD6C4E5A10992A892E74FD78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3b:96:a2:b0:78:59:77:e6:a3:a2:e9:6b:ac: 9a:8a:51:83:de:83:c1:b8:3a:b9:fb:46:5a:76:9b: 2e:c3:02:2d:9b:c1:6b:e0:2a:48:68:db:7f:1c:f8: 2e:19:90:fb:20:ef:fb:31:4a:bb:ca:71:be:1c:b6: 0b:d2:88:fc:b2:e2:99:6c:b4:3f:a2:65:fd:2f:5b: 10:14:cb:49:8e:74:d6:ae:79:ed:e0:d1:7d:ef:1a: 45:7e:96:31:5e:17:24:94:26:c0:ff:63:b0:11:ae: 3c:7c:7c:e1:85:62:01:7a:89:9c:96:ac:04:fb:d7: ef:8d:48:2b:43:23:a4:26:03:19:f4:7a:5f:44:f1: b8:5b:36:b0:57:92:59:83:41:e0:c2:57:6b:52:e2: 3c:d4:ee:9f:8d:85:2b:74:aa:0a:66:c2:8a:ab:6d: 59:0d:0c:ab:b4:ca:96:b3:9f:f8:d4:96:c6:ab:35: 81:42:25:57:61:5d:f5:d1:24:7b:27:69:40:f0:5f: f2:ea:43:d3:25:d7:04:7e:d7:6d:ed:fe:08:23:20: a7:74:23:39:59:9c:ec:de:26:82:c3:73:44:91:81: a0:ca:47:08:e0:4a:73:9e:bc:66:ea:f3:9f:b6:36: f8:d4:82:f1:d5:8c:3d:3b:23:a4:1e:95:69:0d:e7: ea:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:46:D9:56:0A:6D:BB:33:FD:6C:4E:5A:10:99:2A:89:2E:74:FD:78 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:54:cc:f3:39:1f:4e:7f:e9:ca:84:ba:70:32:55:4a:a0:ff: 72:b2:e7:90:f6:92:8a:8d:2f:18:2b:e5:6f:f5:aa:cb:f9:9a: a8:f9:ab:79:fe:40:1c:a7:78:43:eb:f1:96:c7:1b:49:33:02: 0a:97:37:68:29:88:79:6d:27:0f:af:e3:a3:e6:e3:1c:14:e6: a8:98:1c:81:53:3a:f2:79:04:a9:a1:b0:57:37:fb:c4:b7:32: de:b8:91:9c:6c:15:be:ad:dd:b2:0c:c6:c9:05:f6:45:05:57: 68:e1:96:36:b8:6f:79:89:7e:fd:c7:bf:1d:9c:e7:95:89:77: fa:02:c3:95:61:0b:22:11:ea:74:64:b8:c4:cc:96:c3:c2:2f: 8c:24:84:39:ce:88:9d:fd:4a:dd:c7:16:7b:68:92:f7:31:45: 35:52:92:1b:5f:30:79:5c:cd:52:f5:92:22:13:4c:30:de:92: e4:2b:fe:62:97:ea:b7:11:0b:ea:52:d3:77:56:cc:4f:28:a2: 5c:89:6c:5b:c6:65:63:8a:76:b4:a5:21:25:2e:32:31:0e:fc: ff:94:fe:82:2c:82:9f:e6:58:8b:75:02:df:0f:e9:33:7f:fe: 6d:5a:4e:1c:00:63:c2:4b:7f:51:6d:fd:e7:d0:62:8a:19:2f: 9c:a3:81:3d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVTmE+WeQSuGjUNPwppo1vDt0RH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MjAyMjU1NTlaFw0yNjA3MjIwMTMzNTlaMDMxMTAvBgNV BAMTKEQ1NDZEOTU2MEE2REJCMzNGRDZDNEU1QTEwOTkyQTg5MkU3NEZENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUO5aisHhZd+ajoulrrJqKUYPe g8G4Orn7Rlp2my7DAi2bwWvgKkho238c+C4ZkPsg7/sxSrvKcb4ctgvSiPyy4pls tD+iZf0vWxAUy0mOdNauee3g0X3vGkV+ljFeFySUJsD/Y7ARrjx8fOGFYgF6iZyW rAT71++NSCtDI6QmAxn0el9E8bhbNrBXklmDQeDCV2tS4jzU7p+NhSt0qgpmwoqr bVkNDKu0ypazn/jUlsarNYFCJVdhXfXRJHsnaUDwX/LqQ9Ml1wR+123t/ggjIKd0 IzlZnOzeJoLDc0SRgaDKRwjgSnOevGbq85+2NvjUgvHVjD07I6QelWkN5+qnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU1UbZVgptuzP9bE5aEJkqiS50/XgwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVTM8zkfTn/pyoS6cDJV SqD/crLnkPaSio0vGCvlb/Wqy/maqPmref5AHKd4Q+vxlscbSTMCCpc3aCmIeW0n D6/jo+bjHBTmqJgcgVM68nkEqaGwVzf7xLcy3riRnGwVvq3dsgzGyQX2RQVXaOGW NrhveYl+/ce/HZznlYl3+gLDlWELIhHqdGS4xMyWw8IvjCSEOc6Inf1K3ccWe2iS 9zFFNVKSG18weVzNUvWSIhNMMN6S5Cv+YpfqtxEL6lLTd1bMTyiiXIlsW8ZlY4p2 tKUhJS4yMQ78/5T+giyCn+ZYi3UC3w/pM3/+bVpOHABjwkt/UW3959BiihkvnKOB PQ== -----END CERTIFICATE-----Generated at Tue Jul 21 14:55:18 2026 by rpki-client