$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 2RB97MiIJ4wVaikFv4VKshmub7WPbxmvTCFtaupQnFc= Subject key identifier: 1D:30:B1:29:1D:39:4C:EA:9D:84:FD:7A:B5:B1:A6:64:71:40:20:28 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: BDA0D776F30362BCD4195AC7DB86849C839ECB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04E0 Signing time: Tue 19 May 2026 18:24:55 +0000 Manifest this update: Tue 19 May 2026 18:19:55 +0000 Manifest next update: Wed 20 May 2026 21:22:55 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: TPp2mMGV8C745dCrOeBJUudSfjRX+jYO1waV2XUG7Q0=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 20 May 2026 21:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: bd:a0:d7:76:f3:03:62:bc:d4:19:5a:c7:db:86:84:9c:83:9e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 19 18:19:55 2026 GMT Not After : May 20 21:22:55 2026 GMT Subject: CN=1D30B1291D394CEA9D84FD7AB5B1A66471402028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:89:33:1c:dd:9f:84:8d:e2:4f:dc:b4:9b: 89:ab:5c:f1:7b:4e:89:bf:f9:9f:54:07:7e:58:4b: 0c:7a:34:b6:b5:38:6f:7a:f4:ff:af:6f:79:b5:cd: ff:dd:f7:f0:f1:48:85:28:a8:33:db:e2:fc:48:c5: a0:cf:34:35:6f:8b:21:e9:5c:c9:7b:e9:85:d9:4e: e7:8a:e7:d1:30:e0:45:2c:3b:c0:31:f2:7f:8f:42: 63:87:55:4f:29:25:54:80:da:78:e4:26:9c:74:ed: 7f:ea:fd:5a:5c:73:7c:59:97:4e:20:f0:0f:1d:60: 99:f3:bd:8a:1c:f4:49:7f:02:a9:27:3a:b3:85:7f: a8:ed:ed:73:10:f7:87:e5:97:e5:39:5e:7d:4c:21: dc:9c:2f:e8:79:46:7a:29:af:a1:87:f5:ea:04:84: 8b:7d:8b:d8:ca:4d:47:cf:fe:ca:a8:ea:24:8a:95: 5a:8f:6c:65:3a:d3:89:3b:16:bd:95:2f:bb:fc:43: ca:0d:b5:2c:8a:56:db:da:19:5d:8b:44:c6:39:96: 62:b5:95:22:f6:f1:fb:cb:f0:e5:80:e0:e9:5d:32: fe:68:5b:50:d5:b9:47:88:f3:66:61:c8:25:e0:07: f7:b1:7b:a3:66:61:c5:dc:f4:5b:18:8f:7e:87:41: 43:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:30:B1:29:1D:39:4C:EA:9D:84:FD:7A:B5:B1:A6:64:71:40:20:28 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:15:7f:b3:aa:4f:0d:dd:1f:ed:8c:f1:c0:fd:94:69:68:62: 63:9b:4d:e8:26:b6:d1:9e:5b:25:0c:98:5e:7d:69:43:b9:e7: 5c:79:67:c3:ff:1f:d5:56:00:17:87:04:d3:49:75:ed:ab:0a: 1a:77:e5:5e:cf:8a:57:d6:b8:f1:4e:31:49:9c:f1:f7:e4:86: 8d:34:86:61:61:c1:f1:a6:f0:d8:8e:c3:b8:f4:d3:65:4f:79: 76:83:c5:3f:f7:b2:48:12:57:7f:ca:21:d0:2e:3a:b2:11:9f: 35:aa:cd:08:e3:ed:05:b9:5e:8e:2e:d3:68:9e:6e:f7:2d:bd: af:cd:55:1f:68:3c:54:3e:87:04:1f:a7:71:b8:41:a8:58:b2: 2d:6b:aa:3a:61:6a:3a:9e:57:ad:c9:b2:da:9f:73:24:ef:90: 88:e8:06:4e:a1:21:e8:1a:e2:fb:e6:0f:75:f7:bb:9f:a2:62: 35:21:e2:38:81:43:4a:11:78:93:4f:39:27:ca:52:d8:1c:5d: a3:f5:4a:a2:75:b5:30:bb:8a:22:e4:a8:0d:11:4d:ff:44:ea: 19:83:62:89:2d:2b:f9:2f:f7:56:eb:97:a1:f6:eb:2c:eb:fd: d7:fa:81:04:e6:8d:0f:70:3f:d4:41:58:89:5a:f0:71:87:9e: c2:1d:f0:8d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAL2g13bzA2K81Blax9uGhJyDnsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MTkxODE5NTVaFw0yNjA1MjAyMTIyNTVaMDMxMTAvBgNV BAMTKDFEMzBCMTI5MUQzOTRDRUE5RDg0RkQ3QUI1QjFBNjY0NzE0MDIwMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5nYkzHN2fhI3iT9y0m4mrXPF7 Tom/+Z9UB35YSwx6NLa1OG969P+vb3m1zf/d9/DxSIUoqDPb4vxIxaDPNDVviyHp XMl76YXZTueK59Ew4EUsO8Ax8n+PQmOHVU8pJVSA2njkJpx07X/q/Vpcc3xZl04g 8A8dYJnzvYoc9El/AqknOrOFf6jt7XMQ94fll+U5Xn1MIdycL+h5Rnopr6GH9eoE hIt9i9jKTUfP/sqo6iSKlVqPbGU604k7Fr2VL7v8Q8oNtSyKVtvaGV2LRMY5lmK1 lSL28fvL8OWA4OldMv5oW1DVuUeI82ZhyCXgB/exe6NmYcXc9FsYj36HQUPfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHTCxKR05TOqdhP16tbGmZHFAICgwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRV/s6pPDd0f7YzxwP2U aWhiY5tN6Ca20Z5bJQyYXn1pQ7nnXHlnw/8f1VYAF4cE00l17asKGnflXs+KV9a4 8U4xSZzx9+SGjTSGYWHB8abw2I7DuPTTZU95doPFP/eySBJXf8oh0C46shGfNarN COPtBbleji7TaJ5u9y29r81VH2g8VD6HBB+ncbhBqFiyLWuqOmFqOp5Xrcmy2p9z JO+QiOgGTqEh6Bri++YPdfe7n6JiNSHiOIFDShF4k085J8pS2Bxdo/VKonW1MLuK IuSoDRFN/0TqGYNiiS0r+S/3VuuXofbrLOv91/qBBOaND3A/1EFYiVrwcYeewh3w jQ== -----END CERTIFICATE-----Generated at Wed May 20 06:15:07 2026 by rpki-client