$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: s9gs2X0m6u2qQxPMTrVfobWkvWj9uQMyNgxVWJ+iVdM= Subject key identifier: 47:0C:CE:6D:81:9C:A1:E0:87:42:04:2A:58:AD:CF:03:CA:A4:FB:E6 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 12AD6CF08F2DEEE48FC71E4DF2E9549A96755F29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04F2 Signing time: Tue 02 Jun 2026 04:09:05 +0000 Manifest this update: Tue 02 Jun 2026 04:04:05 +0000 Manifest next update: Wed 03 Jun 2026 05:22:05 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: NTqxbEp3xS8eq5b42TDYpiMt1eQ2D6L1Dgmg3BVFvnA=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Jun 2026 05:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ad:6c:f0:8f:2d:ee:e4:8f:c7:1e:4d:f2:e9:54:9a:96:75:5f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 2 04:04:05 2026 GMT Not After : Jun 3 05:22:05 2026 GMT Subject: CN=470CCE6D819CA1E08742042A58ADCF03CAA4FBE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1f:67:3e:0f:cd:a7:eb:df:9e:da:e6:14:b5: 3e:b1:4b:81:92:8d:ac:65:ec:d2:aa:af:b4:81:0c: b5:ed:28:99:82:3b:02:71:f2:3d:1a:7b:16:1b:3f: b2:16:cb:fd:5e:8e:30:2b:cd:e2:2b:8b:da:8e:1d: ce:b6:c8:43:fb:93:2e:c6:dd:91:32:87:b7:da:ca: 61:ae:6b:d0:74:fb:56:8e:65:1d:4a:b6:ea:e2:3e: 51:3d:98:3b:f8:08:7d:77:91:1d:0c:20:31:fe:8b: a7:89:3a:ed:8a:49:e2:59:f0:3f:00:73:b6:90:2c: fa:c2:24:b8:4e:41:d3:19:6b:b6:e6:5d:76:53:4b: 1b:19:f9:e5:74:1c:0e:9d:a1:02:5c:aa:d8:ef:c7: d1:34:47:c3:11:4b:b9:35:48:82:33:ba:41:16:e4: 8d:35:48:4e:06:e3:12:68:d6:46:59:8e:31:30:c4: 9d:66:d6:42:c0:b0:30:26:bc:60:3f:d3:bf:c7:0a: f3:4c:67:04:ee:75:44:e5:ea:df:9d:f7:fe:a6:64: 03:b3:92:24:a1:e7:42:d0:c2:05:ee:9f:42:16:d5: ef:45:80:30:3c:95:57:f4:22:4a:da:1c:73:bf:9f: 4d:f3:30:d2:56:7f:b8:ff:17:04:b9:47:3c:51:88: 37:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0C:CE:6D:81:9C:A1:E0:87:42:04:2A:58:AD:CF:03:CA:A4:FB:E6 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ed:f8:0b:40:5c:bb:29:f1:33:26:42:99:bb:ec:61:f2:04: e5:18:61:09:9f:4d:88:c4:cd:bf:60:db:0f:13:d8:2c:61:10: ec:a3:62:9f:62:84:34:ca:04:bc:67:34:b7:6e:3e:7a:68:b5: 8d:90:f1:66:b3:ea:d0:4e:38:78:62:80:0b:f9:48:5b:60:cf: 2b:7c:8b:11:b1:55:2d:22:39:3c:7b:65:4b:17:06:65:b8:3a: df:bc:60:25:ca:87:45:a8:3f:34:09:50:fe:d6:13:de:e3:5e: ba:13:1a:db:7c:f8:ee:8e:5b:d5:e0:8f:f6:04:0a:d3:70:d0: b3:df:bc:8d:8c:17:82:1f:b7:99:97:c1:ae:43:6d:10:7d:fe: 46:ef:c5:48:3e:49:ee:80:3b:5e:4a:c1:e8:fb:da:e0:96:a8: f8:40:05:c5:da:07:bd:46:38:51:91:f3:d4:cc:10:58:f8:b3: e3:72:a1:78:38:90:60:09:8f:46:68:4e:61:ca:e8:8c:4a:ed: 44:47:58:4a:db:9c:ba:60:b8:31:41:19:c2:1f:c0:da:c7:63: bb:6f:0c:c4:4b:80:b0:1b:66:27:d4:5f:6d:f9:6e:ae:e2:66: 5d:18:3f:73:8c:5d:97:bc:74:db:6b:f4:db:12:d5:9f:9d:29: ed:c5:2c:ca -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEq1s8I8t7uSPxx5N8ulUmpZ1XykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MDIwNDA0MDVaFw0yNjA2MDMwNTIyMDVaMDMxMTAvBgNV BAMTKDQ3MENDRTZEODE5Q0ExRTA4NzQyMDQyQTU4QURDRjAzQ0FBNEZCRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCH2c+D82n69+e2uYUtT6xS4GS jaxl7NKqr7SBDLXtKJmCOwJx8j0aexYbP7IWy/1ejjArzeIri9qOHc62yEP7ky7G 3ZEyh7faymGua9B0+1aOZR1KturiPlE9mDv4CH13kR0MIDH+i6eJOu2KSeJZ8D8A c7aQLPrCJLhOQdMZa7bmXXZTSxsZ+eV0HA6doQJcqtjvx9E0R8MRS7k1SIIzukEW 5I01SE4G4xJo1kZZjjEwxJ1m1kLAsDAmvGA/07/HCvNMZwTudUTl6t+d9/6mZAOz kiSh50LQwgXun0IW1e9FgDA8lVf0IkraHHO/n03zMNJWf7j/FwS5RzxRiDdXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQURwzObYGcoeCHQgQqWK3PA8qk++YwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+34C0BcuynxMyZCmbvs YfIE5RhhCZ9NiMTNv2DbDxPYLGEQ7KNin2KENMoEvGc0t24+emi1jZDxZrPq0E44 eGKAC/lIW2DPK3yLEbFVLSI5PHtlSxcGZbg637xgJcqHRag/NAlQ/tYT3uNeuhMa 23z47o5b1eCP9gQK03DQs9+8jYwXgh+3mZfBrkNtEH3+Ru/FSD5J7oA7XkrB6Pva 4Jao+EAFxdoHvUY4UZHz1MwQWPiz43KheDiQYAmPRmhOYcrojErtREdYStucumC4 MUEZwh/A2sdju28MxEuAsBtmJ9RfbfluruJmXRg/c4xdl7x022v02xLVn50p7cUs yg== -----END CERTIFICATE-----Generated at Tue Jun 2 21:48:12 2026 by rpki-client