$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 9uc+BPZBR5VmwNGreiFczxjBjJ2Jy1cIr6B5Wu6Bloc= Subject key identifier: 10:D1:F6:0D:8F:F1:27:68:9A:F9:50:EC:DE:A5:2E:DF:AE:01:C9:E0 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 4D4D4B54720816E759C50911FC3689C09FC654FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04EB Signing time: Wed 27 May 2026 22:59:08 +0000 Manifest this update: Wed 27 May 2026 22:54:08 +0000 Manifest next update: Thu 28 May 2026 23:35:08 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Svb9XooGfuY2NIys2d4YaGaS8S7KY1vLnwec4X53cYM=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 28 May 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:4d:4b:54:72:08:16:e7:59:c5:09:11:fc:36:89:c0:9f:c6:54:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 27 22:54:08 2026 GMT Not After : May 28 23:35:08 2026 GMT Subject: CN=10D1F60D8FF127689AF950ECDEA52EDFAE01C9E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ab:1b:c2:58:7c:8c:2b:d0:c9:0e:cd:0d:c6: 56:dd:53:8e:10:f6:95:d7:98:36:9d:0a:df:38:39: 09:8e:91:71:2b:ad:69:94:6d:4b:32:77:e8:20:dc: 15:7b:ac:80:76:3b:4d:8d:c4:14:fb:1f:e2:8e:42: 50:4b:29:52:40:ec:31:39:03:ed:c7:4c:c3:8e:f1: 66:6e:7d:0d:16:bd:a4:d4:d1:30:f3:99:ba:19:b6: dc:b4:96:85:24:94:86:7c:2b:c8:83:1a:d9:70:85: dc:f6:15:15:a8:fb:61:b8:4e:d4:aa:a6:64:f7:97: 28:ad:09:d6:ba:f8:d3:0c:a2:0f:9e:21:05:ef:2f: c7:62:0f:9b:17:86:79:54:a0:5a:af:9c:dd:10:15: 7f:fe:09:3b:07:95:87:c7:05:e1:94:c5:77:5f:bb: 9a:3d:10:be:a1:0d:b1:85:6f:cd:f2:02:48:0f:bb: 47:c4:5e:76:63:c2:8d:c6:01:cf:ac:f3:05:d9:70: ca:f5:d7:4b:0d:1c:e8:39:4d:d8:d5:a0:a6:46:b0: 35:0f:c7:19:2b:99:b4:3a:65:15:77:96:a3:4f:2e: 41:df:2d:5b:bc:c0:a8:83:f8:ec:a2:64:4f:88:f7: c5:30:2b:36:86:64:68:b9:db:01:af:80:69:d3:ee: b4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D1:F6:0D:8F:F1:27:68:9A:F9:50:EC:DE:A5:2E:DF:AE:01:C9:E0 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:c0:11:c0:23:39:83:f7:6b:7c:ae:2b:86:df:96:7e:d3:7c: 25:b9:88:58:a3:85:ea:26:c7:28:49:bc:07:a1:81:05:b3:69: b3:99:cc:cf:56:7a:bc:ce:6a:1f:14:d8:06:6b:03:b7:0a:76: b6:fd:63:09:46:d9:81:21:9d:a4:21:72:1f:45:4d:14:fc:56: 9e:0d:24:83:05:0a:86:6b:5b:76:3b:13:63:ba:e9:91:cf:62: a2:d8:0d:b4:ba:cc:07:b6:36:25:30:f6:3c:2a:de:de:82:12: 9b:eb:19:e4:1c:23:33:b3:6c:bf:65:31:35:39:08:7b:1f:a5: ec:fb:5d:ff:30:de:ad:ef:4f:04:4c:fb:58:28:bc:a4:fd:7b: bc:37:2a:d3:a8:d1:d5:c7:ed:73:27:89:1a:de:77:1e:5f:f9: e0:93:2e:2a:f9:8b:a1:8d:cc:0f:f7:51:bf:18:a3:ba:68:00: c3:c6:8e:64:fc:64:1b:63:3a:7e:d7:c6:72:7b:fd:6e:a2:41: 96:4d:e2:07:78:a2:e1:12:22:cc:bd:00:9d:64:10:d8:03:31: 4c:81:8f:c4:86:06:74:fb:2c:7d:f6:37:ee:44:fb:50:9d:61: 26:e3:ed:28:d5:3f:78:1d:b4:78:ce:7d:5c:38:f0:2e:69:fc: ed:1e:b3:19 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTU1LVHIIFudZxQkR/DaJwJ/GVP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MjcyMjU0MDhaFw0yNjA1MjgyMzM1MDhaMDMxMTAvBgNV BAMTKDEwRDFGNjBEOEZGMTI3Njg5QUY5NTBFQ0RFQTUyRURGQUUwMUM5RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtqxvCWHyMK9DJDs0NxlbdU44Q 9pXXmDadCt84OQmOkXErrWmUbUsyd+gg3BV7rIB2O02NxBT7H+KOQlBLKVJA7DE5 A+3HTMOO8WZufQ0WvaTU0TDzmboZtty0loUklIZ8K8iDGtlwhdz2FRWo+2G4TtSq pmT3lyitCda6+NMMog+eIQXvL8diD5sXhnlUoFqvnN0QFX/+CTsHlYfHBeGUxXdf u5o9EL6hDbGFb83yAkgPu0fEXnZjwo3GAc+s8wXZcMr110sNHOg5TdjVoKZGsDUP xxkrmbQ6ZRV3lqNPLkHfLVu8wKiD+OyiZE+I98UwKzaGZGi52wGvgGnT7rQrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUENH2DY/xJ2ia+VDs3qUu364ByeAwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8ARwCM5g/drfK4rht+W ftN8JbmIWKOF6ibHKEm8B6GBBbNps5nMz1Z6vM5qHxTYBmsDtwp2tv1jCUbZgSGd pCFyH0VNFPxWng0kgwUKhmtbdjsTY7rpkc9iotgNtLrMB7Y2JTD2PCre3oISm+sZ 5BwjM7Nsv2UxNTkIex+l7Ptd/zDere9PBEz7WCi8pP17vDcq06jR1cftcyeJGt53 Hl/54JMuKvmLoY3MD/dRvxijumgAw8aOZPxkG2M6ftfGcnv9bqJBlk3iB3ii4RIi zL0AnWQQ2AMxTIGPxIYGdPssffY37kT7UJ1hJuPtKNU/eB20eM59XDjwLmn87R6z GQ== -----END CERTIFICATE-----Generated at Thu May 28 04:54:03 2026 by rpki-client