$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: zGjEBXRLyjiZGhxWoaGgJAb0ldESIWBGGtExSKeMY0A= Subject key identifier: B8:25:D7:FD:78:9F:AA:17:AF:1F:FC:9C:B3:46:71:7B:9D:42:AB:CC Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 174C8E2FCAF268F3653D454ECE854AD7A7862BDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 03C3 Signing time: Fri 17 Oct 2025 18:10:04 +0000 Manifest this update: Fri 17 Oct 2025 18:05:04 +0000 Manifest next update: Sat 18 Oct 2025 18:23:04 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: mZdu2DdZJ2/qDp18ky57QBIwL6UlhvUyWh4Gt5m93Io=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Oct 2025 15:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4c:8e:2f:ca:f2:68:f3:65:3d:45:4e:ce:85:4a:d7:a7:86:2b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Oct 17 18:05:04 2025 GMT Not After : Oct 18 18:23:04 2025 GMT Subject: CN=B825D7FD789FAA17AF1FFC9CB346717B9D42ABCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f1:1f:13:10:00:91:40:d2:8d:dd:b6:6c:3a: 73:cc:65:fd:37:ae:92:46:63:35:72:58:3c:07:d3: 29:57:c6:87:2f:11:07:ae:68:61:19:33:0d:88:d5: 78:96:69:ed:9f:9c:ca:93:8f:31:29:bb:17:f5:79: e5:8b:e0:54:eb:6a:b3:86:79:3d:56:24:2b:ab:96: a5:fa:65:03:85:ef:40:79:08:9d:75:76:31:2c:f8: 84:30:5f:02:a9:08:b9:2a:d0:13:58:63:34:b1:f8: c4:2a:6e:fe:7a:94:0e:40:fb:59:0b:94:a9:91:b3: d7:7d:7d:08:cd:7b:74:c7:f2:85:50:c9:0c:37:c1: 5a:98:dc:ce:58:b9:bb:2d:f6:f7:58:61:92:63:66: 85:dd:88:c9:32:48:4c:d7:41:11:16:af:f6:52:14: 84:41:0d:0b:1c:8a:5e:74:0b:2b:26:ac:1f:9f:0f: b7:a5:85:11:ac:a4:a8:b0:e8:f4:4a:96:39:eb:cd: 60:ce:16:e1:3b:be:4b:f8:16:52:c3:1b:68:e0:c6: 57:bd:2d:6b:2b:14:49:93:36:84:79:21:38:d6:80: 05:6e:83:fe:20:8e:4c:b8:ad:fb:90:0c:01:e3:7c: a2:47:00:e4:00:a6:88:1f:de:55:33:57:72:31:ab: 06:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:25:D7:FD:78:9F:AA:17:AF:1F:FC:9C:B3:46:71:7B:9D:42:AB:CC X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:1f:c3:3e:d1:27:28:a3:3d:32:7a:57:6c:ea:85:18:3b:66: d4:c6:60:98:60:f2:3d:15:9f:4e:55:7b:64:75:dd:28:50:c0: b5:32:59:81:e2:79:0d:ac:af:d5:bb:43:e0:e8:bc:1d:6e:67: 9b:2f:cb:e8:fc:87:eb:d6:38:0b:3e:fa:d3:3a:ae:a8:34:48: ca:ed:4b:c1:cd:f3:d0:22:51:08:02:19:a5:db:5f:81:2d:a1: a8:f4:8c:8b:ae:30:b9:18:e9:54:81:3b:e2:eb:c0:72:38:78: 0d:1e:4f:18:0b:cd:ec:04:1d:8d:97:26:0e:d2:8f:79:b5:55: d4:24:b3:0d:54:5f:d5:92:68:0f:ab:23:3a:51:51:60:35:bf: 5d:45:a5:c4:b9:8f:57:b8:f4:52:79:3b:da:8d:97:f0:9a:e7: f8:81:46:bf:47:ea:dc:6e:b2:3b:63:0f:cd:e4:4c:7e:52:52: 32:14:d8:31:e4:46:2b:fc:31:a1:22:a9:19:60:91:7c:b6:3a: 9f:9d:51:42:88:78:52:6b:eb:fb:96:0d:28:68:62:ac:2c:2e: 89:5c:0b:97:54:a7:24:88:48:6b:df:52:ae:f4:5b:26:62:37: 26:e5:5d:2b:3f:48:b2:9a:66:a5:5f:6a:9f:1a:f7:2d:03:5c: e6:03:25:cc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUF0yOL8ryaPNlPUVOzoVK16eGK98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEwMTcxODA1MDRaFw0yNTEwMTgxODIzMDRaMDMxMTAvBgNV BAMTKEI4MjVEN0ZENzg5RkFBMTdBRjFGRkM5Q0IzNDY3MTdCOUQ0MkFCQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48R8TEACRQNKN3bZsOnPMZf03 rpJGYzVyWDwH0ylXxocvEQeuaGEZMw2I1XiWae2fnMqTjzEpuxf1eeWL4FTrarOG eT1WJCurlqX6ZQOF70B5CJ11djEs+IQwXwKpCLkq0BNYYzSx+MQqbv56lA5A+1kL lKmRs9d9fQjNe3TH8oVQyQw3wVqY3M5Yubst9vdYYZJjZoXdiMkySEzXQREWr/ZS FIRBDQscil50CysmrB+fD7elhRGspKiw6PRKljnrzWDOFuE7vkv4FlLDG2jgxle9 LWsrFEmTNoR5ITjWgAVug/4gjky4rfuQDAHjfKJHAOQApogf3lUzV3IxqwY7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUuCXX/XifqhevH/ycs0Zxe51Cq8wwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXB/DPtEnKKM9MnpXbOqF GDtm1MZgmGDyPRWfTlV7ZHXdKFDAtTJZgeJ5Dayv1btD4Oi8HW5nmy/L6PyH69Y4 Cz760zquqDRIyu1Lwc3z0CJRCAIZpdtfgS2hqPSMi64wuRjpVIE74uvAcjh4DR5P GAvN7AQdjZcmDtKPebVV1CSzDVRf1ZJoD6sjOlFRYDW/XUWlxLmPV7j0Unk72o2X 8Jrn+IFGv0fq3G6yO2MPzeRMflJSMhTYMeRGK/wxoSKpGWCRfLY6n51RQoh4Umvr +5YNKGhirCwuiVwLl1SnJIhIa99SrvRbJmI3JuVdKz9IsppmpV9qnxr3LQNc5gMl zA== -----END CERTIFICATE-----Generated at Fri Oct 17 20:31:22 2025 by rpki-client