$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: wHFsfRJYqayis1ftWf4FanUC280GPSbipYjryiYk2GM= Subject key identifier: D5:F5:D1:7C:6D:10:FD:79:0B:E8:FA:EC:EF:F9:CD:D5:0C:1C:45:99 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 4F2DB9EE90BA7BDCF2970FDB4B3195DDDE7B313E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0501 Signing time: Sat 13 Jun 2026 14:38:53 +0000 Manifest this update: Sat 13 Jun 2026 14:33:53 +0000 Manifest next update: Sun 14 Jun 2026 17:55:53 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 04Z7ZygIwGuMUP6fuSq/Vephy2ysFmrbxprDoeh3Elc=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 17:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:2d:b9:ee:90:ba:7b:dc:f2:97:0f:db:4b:31:95:dd:de:7b:31:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 13 14:33:53 2026 GMT Not After : Jun 14 17:55:53 2026 GMT Subject: CN=D5F5D17C6D10FD790BE8FAECEFF9CDD50C1C4599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bc:4f:b6:4a:62:8c:84:25:09:9d:d3:37:76: 8a:6a:b6:d6:f6:c5:ce:a1:e8:f8:3e:a4:8c:3b:39: 67:f3:5b:4d:19:c7:d8:8b:02:e2:fa:60:91:f1:69: 42:cc:db:4e:0c:8e:96:f2:7d:ab:49:64:62:ea:18: fc:b6:7a:01:87:2e:d9:1c:2d:20:f5:51:41:eb:61: ab:bd:d1:4c:5b:64:3e:72:3f:05:7d:80:91:31:82: 97:96:1a:38:a4:f7:ad:b9:a0:8b:19:78:1e:89:98: ec:78:33:18:c0:f3:a6:60:79:3b:cb:52:8f:21:76: 00:e0:d0:c4:be:8a:d1:17:ac:12:58:67:b1:56:ba: 94:9f:3c:b6:26:60:1b:50:3a:25:52:39:fb:4b:11: 81:ba:c2:6e:14:a4:44:fd:73:a4:e7:85:49:20:08: b0:fb:86:38:34:65:94:c9:b5:ba:72:a2:63:3e:c6: 78:27:25:1e:0b:76:07:c0:36:fd:98:45:8e:55:57: 8e:a9:dd:40:57:84:ce:cb:aa:74:85:0c:51:b6:09: f0:65:35:d7:f6:cd:a1:ba:d0:f5:32:5a:db:9d:07: e3:7a:1c:dd:fb:34:1f:0d:3a:16:c3:ab:ae:99:96: 4c:bf:e1:7f:d4:d8:0d:62:6b:e7:e3:a3:e8:a9:d3: f4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F5:D1:7C:6D:10:FD:79:0B:E8:FA:EC:EF:F9:CD:D5:0C:1C:45:99 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:eb:d8:61:97:2a:84:3a:e5:0e:a9:59:28:3e:ce:84:64:22: 81:d0:65:79:b2:6b:54:0e:25:23:54:f0:40:3e:4a:2b:41:b9: 8f:e4:c7:f2:fd:ad:65:cc:ba:1d:6d:40:5b:21:7e:84:dd:c3: 52:47:39:e4:02:98:db:bf:0f:41:98:43:e5:e5:88:40:45:cb: eb:0a:5e:31:11:cb:f9:98:95:ab:08:a8:c2:75:78:4f:ff:06: 32:f6:92:65:f7:f4:66:19:b5:f3:f5:0a:88:9a:18:c4:ac:b1: cd:31:7a:80:f3:b7:fd:1d:15:b2:ea:6f:11:35:58:66:86:39: 8c:a7:22:94:cf:1b:24:fa:83:7a:5e:fd:6b:17:6f:e6:1b:6b: 39:7f:8f:7a:b2:8b:72:57:6a:a1:0d:ab:1b:ab:17:c4:cd:63: 77:33:91:89:e3:da:5a:07:4c:91:b1:79:15:d8:23:da:68:9b: 2e:8d:da:96:1c:09:8a:e2:b2:b8:c9:13:ad:ee:78:1c:fe:7e: c7:78:1f:70:d3:47:29:4c:f8:bb:c4:a5:41:06:06:42:cb:90: cd:ee:78:93:21:04:31:ae:b2:0f:19:40:fc:c9:ea:1e:48:e1: b5:58:85:9f:9a:87:44:73:23:42:80:f0:24:ae:b8:33:ec:78: 8e:2c:96:18 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTy257pC6e9zylw/bSzGV3d57MT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MTMxNDMzNTNaFw0yNjA2MTQxNzU1NTNaMDMxMTAvBgNV BAMTKEQ1RjVEMTdDNkQxMEZENzkwQkU4RkFFQ0VGRjlDREQ1MEMxQzQ1OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMvE+2SmKMhCUJndM3dopqttb2 xc6h6Pg+pIw7OWfzW00Zx9iLAuL6YJHxaULM204MjpbyfatJZGLqGPy2egGHLtkc LSD1UUHrYau90UxbZD5yPwV9gJExgpeWGjik9625oIsZeB6JmOx4MxjA86ZgeTvL Uo8hdgDg0MS+itEXrBJYZ7FWupSfPLYmYBtQOiVSOftLEYG6wm4UpET9c6TnhUkg CLD7hjg0ZZTJtbpyomM+xngnJR4LdgfANv2YRY5VV46p3UBXhM7LqnSFDFG2CfBl Ndf2zaG60PUyWtudB+N6HN37NB8NOhbDq66Zlky/4X/U2A1ia+fjo+ip0/QtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU1fXRfG0Q/XkL6Prs7/nN1QwcRZkwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuvYYZcqhDrlDqlZKD7O hGQigdBlebJrVA4lI1TwQD5KK0G5j+TH8v2tZcy6HW1AWyF+hN3DUkc55AKY278P QZhD5eWIQEXL6wpeMRHL+ZiVqwiownV4T/8GMvaSZff0Zhm18/UKiJoYxKyxzTF6 gPO3/R0VsupvETVYZoY5jKcilM8bJPqDel79axdv5htrOX+PerKLcldqoQ2rG6sX xM1jdzORiePaWgdMkbF5Fdgj2mibLo3alhwJiuKyuMkTre54HP5+x3gfcNNHKUz4 u8SlQQYGQsuQze54kyEEMa6yDxlA/MnqHkjhtViFn5qHRHMjQoDwJK64M+x4jiyW GA== -----END CERTIFICATE-----Generated at Sun Jun 14 05:42:58 2026 by rpki-client