$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: PMs2oypNCW/a+zflmhlCCCjIbQE8+R5fRB924mwRBN8= Subject key identifier: 5B:D6:28:EB:8E:A2:FD:C1:12:56:C0:12:87:4F:C9:9A:07:A1:CE:AB Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 70EB10C4EE0C15A9DEFE9E0615723C6BB2E1362E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0518 Signing time: Wed 01 Jul 2026 08:01:59 +0000 Manifest this update: Wed 01 Jul 2026 07:56:59 +0000 Manifest next update: Thu 02 Jul 2026 11:56:59 +0000 Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: p8FQ5MJf5NIwtltIdBaDFXCS1P5P5fdIX9DWT/wW3UI=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 02 Jul 2026 11:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:eb:10:c4:ee:0c:15:a9:de:fe:9e:06:15:72:3c:6b:b2:e1:36:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 1 07:56:59 2026 GMT Not After : Jul 2 11:56:59 2026 GMT Subject: CN=5BD628EB8EA2FDC11256C012874FC99A07A1CEAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:a3:5f:cd:b3:24:ea:46:b8:7a:4b:76:88: 6c:3d:d1:59:f8:b0:25:83:62:0d:6b:45:5d:34:08: d8:a1:e3:ff:cb:61:93:b4:57:04:e8:b3:cc:ae:e4: 99:07:24:26:10:57:18:10:64:92:f8:6c:55:58:d7: 6f:31:1d:59:25:bb:4b:80:ec:08:49:41:6f:a0:42: c2:8d:ed:ab:75:20:b6:91:9e:b0:7b:94:2d:01:39: 89:49:92:dc:c9:c4:6b:47:af:8e:5b:7f:d4:4f:2f: f2:85:a4:cf:fd:2d:3f:b4:e4:22:03:f9:f6:5e:ba: d6:6b:fe:6a:6d:55:80:30:b5:43:f8:85:1b:95:13: a5:eb:95:3b:a2:86:cc:ea:18:11:03:e8:d9:86:f8: 04:66:db:1d:f0:fa:db:59:87:27:5e:d5:5a:13:9f: 0d:c0:92:6c:5c:e1:43:10:05:39:9e:8d:1e:69:9f: ab:cd:ec:57:de:b5:cb:e6:48:c0:ff:22:77:09:af: 2a:cd:24:1c:6c:89:0d:dd:1b:d9:d2:97:7b:9a:a8: 2a:7f:d3:f7:bf:5e:64:48:fb:e6:88:b9:84:ec:a4: 2f:55:e8:2c:7f:fd:ef:7b:b0:8a:f3:7f:b6:f9:6a: a4:f1:4c:34:00:5d:0e:17:56:12:76:fa:07:6f:84: 62:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D6:28:EB:8E:A2:FD:C1:12:56:C0:12:87:4F:C9:9A:07:A1:CE:AB X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:59:ee:67:5c:2f:3e:71:26:cf:44:36:81:a0:8a:96:17:d6: d8:4d:5c:73:a5:4c:94:b3:a5:43:b5:c1:9b:4f:11:95:92:0e: d8:cf:3f:1e:d9:c9:02:49:80:18:15:bf:7d:94:a8:84:57:fa: 35:85:7b:a6:d4:81:3d:6b:c9:a6:53:48:2c:20:25:3d:eb:41: 84:48:50:6a:84:b4:d0:7f:e4:f1:f1:f6:05:cd:e7:cc:c7:b7: 4c:93:25:a3:e3:8d:16:a6:54:87:e6:0a:2c:b0:1d:d0:60:57: 80:9d:4e:34:c8:bc:fb:c2:ca:28:6b:d5:68:63:1f:8b:f1:bb: 80:28:56:8d:f4:5a:ea:5c:69:90:96:f9:0f:c7:77:db:8c:c3: 7e:3e:6c:4f:83:0a:99:ef:38:c4:35:52:0a:d4:b8:a8:99:35: 23:99:ca:38:cf:9f:ad:68:35:5c:2a:26:83:31:58:4d:59:95: 50:38:0e:8a:ae:36:55:f6:52:6f:43:92:3a:8c:98:95:de:2a: b6:57:1b:c1:71:c8:20:00:cb:2f:8e:f3:c9:7b:fc:18:9f:0a: 4b:04:44:77:ef:72:d4:46:ed:92:f0:2d:6e:fb:69:cc:02:20: 90:27:80:55:fb:40:a6:ec:dd:6a:99:42:5c:7e:f9:66:08:77: 16:0c:30:f0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcOsQxO4MFane/p4GFXI8a7LhNi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MDEwNzU2NTlaFw0yNjA3MDIxMTU2NTlaMDMxMTAvBgNV BAMTKDVCRDYyOEVCOEVBMkZEQzExMjU2QzAxMjg3NEZDOTlBMDdBMUNFQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjB6NfzbMk6ka4ekt2iGw90Vn4 sCWDYg1rRV00CNih4//LYZO0VwTos8yu5JkHJCYQVxgQZJL4bFVY128xHVklu0uA 7AhJQW+gQsKN7at1ILaRnrB7lC0BOYlJktzJxGtHr45bf9RPL/KFpM/9LT+05CID +fZeutZr/mptVYAwtUP4hRuVE6XrlTuihszqGBED6NmG+ARm2x3w+ttZhyde1VoT nw3Akmxc4UMQBTmejR5pn6vN7FfetcvmSMD/IncJryrNJBxsiQ3dG9nSl3uaqCp/ 0/e/XmRI++aIuYTspC9V6Cx//e97sIrzf7b5aqTxTDQAXQ4XVhJ2+gdvhGKlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUW9Yo646i/cESVsASh0/JmgehzqswHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFnuZ1wvPnEmz0Q2gaCK lhfW2E1cc6VMlLOlQ7XBm08RlZIO2M8/HtnJAkmAGBW/fZSohFf6NYV7ptSBPWvJ plNILCAlPetBhEhQaoS00H/k8fH2Bc3nzMe3TJMlo+ONFqZUh+YKLLAd0GBXgJ1O NMi8+8LKKGvVaGMfi/G7gChWjfRa6lxpkJb5D8d324zDfj5sT4MKme84xDVSCtS4 qJk1I5nKOM+frWg1XComgzFYTVmVUDgOiq42VfZSb0OSOoyYld4qtlcbwXHIIADL L47zyXv8GJ8KSwREd+9y1EbtkvAtbvtpzAIgkCeAVftApuzdaplCXH75Zgh3Fgww 8A== -----END CERTIFICATE-----Generated at Wed Jul 1 18:02:30 2026 by rpki-client