$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: Jf5L+1HPrL4UYH+25MlrH//zqxxi9v0LIXp0bXcu0XU= Subject key identifier: E6:72:FA:99:41:44:CE:1C:FE:75:C8:13:DE:C4:18:89:C4:27:D1:A4 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 43D7BE3768A39B6E474FF84B0912D83332CB5677 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04BE Signing time: Fri 24 Apr 2026 07:02:54 +0000 Manifest this update: Fri 24 Apr 2026 06:57:54 +0000 Manifest next update: Sat 25 Apr 2026 07:37:54 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 42z+hjj6eImK6ASZ4YdfxU7rmZvetgXjvBUfP6PtCKs=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Apr 2026 07:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d7:be:37:68:a3:9b:6e:47:4f:f8:4b:09:12:d8:33:32:cb:56:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 24 06:57:54 2026 GMT Not After : Apr 25 07:37:54 2026 GMT Subject: CN=E672FA994144CE1CFE75C813DEC41889C427D1A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b0:f2:8d:ec:87:71:4e:67:a1:e7:23:66:a2: e8:08:4b:7d:9a:64:0a:9a:0b:85:21:22:1f:fa:e2: c3:23:fe:d7:c1:b2:3e:b9:0a:55:c2:b0:41:cd:50: 09:cb:e6:ec:4c:e5:57:80:ac:49:95:7f:26:1b:d7: d1:94:f7:aa:7f:21:51:67:60:62:a1:65:a4:92:9c: c4:f7:37:9c:8d:df:0b:38:b9:d6:e6:f7:bc:c3:0f: ab:13:db:36:72:5d:06:be:17:3e:cb:71:f5:84:ed: e8:4e:0c:32:1b:12:9e:8b:e9:b0:b6:11:fd:b0:29: 6a:ca:b8:29:76:64:3b:51:b4:e1:26:7e:82:2b:ce: 56:cf:1f:cb:f7:09:f0:96:4d:e0:ee:09:ff:05:d5: 51:49:40:ca:68:87:c6:03:bb:6f:de:ff:a1:ce:93: 15:52:fe:3f:5f:f5:52:39:69:7c:26:82:3a:26:4d: f8:6a:3c:cc:53:bc:66:57:e0:74:8f:35:a1:cb:f1: a8:e2:80:c2:b0:75:6b:b2:d6:2b:dd:67:15:7b:0a: 64:7a:4c:60:6e:00:8f:97:47:3a:42:24:93:75:40: 18:db:8f:a7:4d:e2:09:84:98:db:a2:46:38:77:5b: d9:e5:38:96:2a:14:2d:05:4d:67:bc:40:72:d2:6f: 19:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:72:FA:99:41:44:CE:1C:FE:75:C8:13:DE:C4:18:89:C4:27:D1:A4 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:4d:b7:79:7c:39:50:a2:e3:89:df:b9:91:8b:7c:b2:0c:d7: dd:45:43:e7:7a:28:6d:af:2c:1d:d7:45:40:f3:29:03:aa:53: cb:bf:ba:94:8f:0c:f3:4b:40:4a:50:15:3e:1c:89:cf:92:80: 9b:4d:83:84:86:2d:17:2b:5b:1d:bb:24:c1:5b:80:7a:2f:d4: c3:7e:d8:b7:d1:bb:02:24:ec:7b:40:10:d6:1e:0f:0e:9c:34: aa:25:5d:1e:5f:16:2b:97:2b:de:9a:9b:a7:97:98:01:fc:39: 62:87:bf:90:f0:6f:a5:8d:4a:54:21:7e:a4:91:fc:b2:ef:15: 52:ee:01:a9:25:ef:34:c3:2f:d5:45:a2:80:d9:e1:65:60:5f: 72:86:21:d5:48:f2:c6:8d:00:ce:01:1f:d3:d5:1f:f7:83:bf: d6:e8:46:bd:b9:be:77:68:cc:0c:18:da:be:15:5c:0b:ff:03: 28:f7:86:e1:fc:64:78:09:d2:97:7f:b4:f2:6e:2c:88:22:2b: c9:73:9c:b8:00:e9:f6:31:24:be:31:80:8a:ed:55:7b:a3:4d: 54:19:5e:62:74:0a:4d:99:02:e7:31:8f:03:50:15:e2:46:6c: 7f:cd:93:3f:bc:86:5e:be:0b:08:e2:6b:51:7f:c1:ad:41:a3: 14:3e:b4:d4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQ9e+N2ijm25HT/hLCRLYMzLLVncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA0MjQwNjU3NTRaFw0yNjA0MjUwNzM3NTRaMDMxMTAvBgNV BAMTKEU2NzJGQTk5NDE0NENFMUNGRTc1QzgxM0RFQzQxODg5QzQyN0QxQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYsPKN7IdxTmeh5yNmougIS32a ZAqaC4UhIh/64sMj/tfBsj65ClXCsEHNUAnL5uxM5VeArEmVfyYb19GU96p/IVFn YGKhZaSSnMT3N5yN3ws4udbm97zDD6sT2zZyXQa+Fz7LcfWE7ehODDIbEp6L6bC2 Ef2wKWrKuCl2ZDtRtOEmfoIrzlbPH8v3CfCWTeDuCf8F1VFJQMpoh8YDu2/e/6HO kxVS/j9f9VI5aXwmgjomTfhqPMxTvGZX4HSPNaHL8ajigMKwdWuy1ivdZxV7CmR6 TGBuAI+XRzpCJJN1QBjbj6dN4gmEmNuiRjh3W9nlOJYqFC0FTWe8QHLSbxnXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5nL6mUFEzhz+dcgT3sQYicQn0aQwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYE23eXw5UKLjid+5kYt8 sgzX3UVD53ooba8sHddFQPMpA6pTy7+6lI8M80tASlAVPhyJz5KAm02DhIYtFytb HbskwVuAei/Uw37Yt9G7AiTse0AQ1h4PDpw0qiVdHl8WK5cr3pqbp5eYAfw5Yoe/ kPBvpY1KVCF+pJH8su8VUu4BqSXvNMMv1UWigNnhZWBfcoYh1Ujyxo0AzgEf09Uf 94O/1uhGvbm+d2jMDBjavhVcC/8DKPeG4fxkeAnSl3+08m4siCIryXOcuADp9jEk vjGAiu1Ve6NNVBleYnQKTZkC5zGPA1AV4kZsf82TP7yGXr4LCOJrUX/BrUGjFD60 1A== -----END CERTIFICATE-----Generated at Fri Apr 24 11:52:47 2026 by rpki-client