$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: KGAu+6k+mwQEyh3wrxA8KY6rZbQVEEEUUaPbAwhYdxk= Subject key identifier: 5A:D3:C9:41:39:D6:09:C4:6B:6A:38:51:42:4B:04:75:72:15:AA:AC Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 5CDCE58A05FF6FDC09BF63E052A0BBF3B3C22234 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0530 Signing time: Sun 19 Jul 2026 09:33:31 +0000 Manifest this update: Sun 19 Jul 2026 09:28:31 +0000 Manifest next update: Mon 20 Jul 2026 13:06:31 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: irDwmVP2+Xi//bzGGZmIH93dyHTRpPSMWohyOEWGk8Y=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Jul 2026 05:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:dc:e5:8a:05:ff:6f:dc:09:bf:63:e0:52:a0:bb:f3:b3:c2:22:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 19 09:28:31 2026 GMT Not After : Jul 20 13:06:31 2026 GMT Subject: CN=5AD3C94139D609C46B6A3851424B04757215AAAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:17:aa:de:f8:c0:b8:14:13:2f:bf:b6:6d: 64:f4:53:1e:00:7f:f9:22:dc:43:5e:23:74:a4:46: fa:14:73:a7:ae:d6:37:65:af:19:24:b1:2b:67:5e: 86:06:66:ac:fc:58:95:9e:3f:45:09:c9:22:5f:7d: d3:bf:64:8a:98:67:db:04:a2:ff:f2:da:87:47:72: 91:7e:e8:17:9e:8f:a0:e0:fa:55:fe:35:be:90:ce: bc:79:1b:b1:58:36:3f:0d:4b:49:8e:a4:07:25:f4: 61:13:69:78:42:c5:c2:a1:74:7a:22:11:07:82:0c: 0e:0a:c8:b0:32:95:66:dd:94:4e:1b:27:33:39:a7: af:7f:02:d2:a5:79:92:ea:e0:2b:68:ac:8f:4f:d3: d3:e9:fa:9c:56:4d:9e:5d:7d:93:b6:98:5c:62:df: 52:86:bc:93:3a:55:6a:2c:f0:89:83:2b:f9:96:4d: fd:38:dd:38:3a:2a:28:40:df:bd:f2:d8:72:f2:39: b4:56:37:35:72:60:7d:0a:02:19:ec:ff:75:c7:d5: 04:62:db:d7:33:f3:43:e7:95:ea:3c:46:77:9c:14: b6:f6:2a:b1:68:6d:be:b2:37:38:b7:85:83:ee:37: 4f:07:9f:06:a1:23:64:76:0e:c4:8b:ed:65:4a:ba: 1c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D3:C9:41:39:D6:09:C4:6B:6A:38:51:42:4B:04:75:72:15:AA:AC X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:24:ae:66:99:6d:ce:cc:46:ec:8a:5b:54:82:51:05:ab:db: 5c:a5:b3:95:bd:8a:63:c3:6a:1d:58:cf:d0:d8:5d:ed:4f:30: 5c:f8:a9:85:bd:cd:f3:6d:cf:02:83:f5:b9:2d:60:5f:08:ec: d0:e9:13:0d:0a:4a:1a:03:27:6a:f3:f5:fe:de:bd:ad:14:89: f5:0c:e9:63:6f:df:00:01:1a:5a:b4:8f:1d:3d:a8:25:2d:d2: e2:35:da:25:64:3a:04:29:56:8e:a1:e7:9c:97:67:44:e6:e7: 78:71:c4:4d:92:ef:82:8a:be:f8:2a:8a:d6:2b:ec:a4:86:9a: 6c:cb:7b:ae:53:76:8f:c2:56:90:a9:ae:22:38:62:13:93:c1: 60:61:b6:76:86:77:94:78:bc:ea:2f:72:b2:65:64:72:56:b2: f2:64:39:24:e7:18:1b:ab:59:34:8d:f2:90:22:f1:af:f7:5f: f5:69:9d:51:96:a8:49:e6:b3:6f:db:03:80:aa:76:08:5f:b0: d1:8e:ff:db:14:70:e7:08:12:e1:53:49:be:35:87:60:ec:11: 72:06:56:41:6d:f1:f7:d7:46:fb:88:f1:79:cf:ce:6d:7d:17: a6:63:5e:ce:c6:52:23:aa:b9:84:b0:f3:77:4e:ba:a5:7b:64: 45:90:03:d0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXNzligX/b9wJv2PgUqC787PCIjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MTkwOTI4MzFaFw0yNjA3MjAxMzA2MzFaMDMxMTAvBgNV BAMTKDVBRDNDOTQxMzlENjA5QzQ2QjZBMzg1MTQyNEIwNDc1NzIxNUFBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJYBeq3vjAuBQTL7+2bWT0Ux4A f/ki3ENeI3SkRvoUc6eu1jdlrxkksStnXoYGZqz8WJWeP0UJySJffdO/ZIqYZ9sE ov/y2odHcpF+6Beej6Dg+lX+Nb6Qzrx5G7FYNj8NS0mOpAcl9GETaXhCxcKhdHoi EQeCDA4KyLAylWbdlE4bJzM5p69/AtKleZLq4CtorI9P09Pp+pxWTZ5dfZO2mFxi 31KGvJM6VWos8ImDK/mWTf043Tg6KihA373y2HLyObRWNzVyYH0KAhns/3XH1QRi 29cz80Pnleo8RnecFLb2KrFobb6yNzi3hYPuN08HnwahI2R2DsSL7WVKuhxTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUWtPJQTnWCcRrajhRQksEdXIVqqwwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiSuZpltzsxG7IpbVIJR BavbXKWzlb2KY8NqHVjP0Nhd7U8wXPiphb3N823PAoP1uS1gXwjs0OkTDQpKGgMn avP1/t69rRSJ9QzpY2/fAAEaWrSPHT2oJS3S4jXaJWQ6BClWjqHnnJdnRObneHHE TZLvgoq++CqK1ivspIaabMt7rlN2j8JWkKmuIjhiE5PBYGG2doZ3lHi86i9ysmVk clay8mQ5JOcYG6tZNI3ykCLxr/df9WmdUZaoSeazb9sDgKp2CF+w0Y7/2xRw5wgS 4VNJvjWHYOwRcgZWQW3x99dG+4jxec/ObX0XpmNezsZSI6q5hLDzd066pXtkRZAD 0A== -----END CERTIFICATE-----Generated at Sun Jul 19 12:04:50 2026 by rpki-client