$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: uSdLzF0dsMH7svUqbOfjAA0bInP3DvlECyGnrrjfJaI= Subject key identifier: 43:60:F1:E1:E3:29:C1:7A:D0:63:70:88:51:51:AF:39:36:F0:FB:8B Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 0DE1A3603F4D348CF2C752D537CCB069E64F09B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0561 Signing time: Tue 25 Aug 2026 04:14:40 +0000 Manifest this update: Tue 25 Aug 2026 04:09:40 +0000 Manifest next update: Wed 26 Aug 2026 07:33:40 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Ji/f7liwR55VDW3AFOb5fkaoMF4HYtYJYgWfLBQOhIg=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=) 4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 25 Aug 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e1:a3:60:3f:4d:34:8c:f2:c7:52:d5:37:cc:b0:69:e6:4f:09:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 25 04:09:40 2026 GMT Not After : Aug 26 07:33:40 2026 GMT Subject: CN=4360F1E1E329C17AD06370885151AF3936F0FB8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ce:41:b3:2f:b6:39:4c:62:25:5c:29:c4:d6: b0:e3:34:34:86:11:b4:9e:25:06:8a:fa:52:9f:29: 99:2c:6b:44:b1:2b:0e:6b:8c:8e:27:dc:ec:fc:e9: 1d:7e:e8:24:57:c5:a1:91:2e:08:68:7d:25:c5:ed: 52:c5:97:31:84:2d:1d:d6:4f:7a:c0:6a:a2:bc:36: fb:77:0b:51:ef:c0:ce:8b:e1:d4:4f:6e:a3:5d:52: 1b:81:e3:4c:01:15:47:7b:b7:91:db:27:fe:f1:67: f2:64:a7:bd:5c:89:88:2b:74:9e:89:9e:21:db:11: 7b:d7:2c:54:5b:24:e2:10:6d:b0:a7:9d:83:5c:5a: 1f:1c:9c:24:db:bd:76:2f:e4:18:67:3b:74:0b:af: 68:0f:da:0b:2b:e6:86:cb:d7:ae:80:17:25:1c:52: e4:0f:40:48:ea:e4:9e:86:19:c8:90:3b:55:58:2d: 33:26:d3:08:86:b1:3a:5b:45:6f:a6:a1:df:ae:62: f2:3f:4e:c0:70:83:af:87:91:1b:4c:5f:d3:00:ad: 41:60:e8:24:6b:fe:dc:dd:e1:e4:da:2c:08:c2:e2: 07:32:81:03:df:74:60:03:90:dd:f4:57:3e:a6:01: ee:57:c0:4a:59:b8:c0:38:02:e4:4c:98:85:c0:8b: 77:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:60:F1:E1:E3:29:C1:7A:D0:63:70:88:51:51:AF:39:36:F0:FB:8B X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b8:6a:4d:1c:99:69:ed:e2:d0:49:e0:3a:86:11:7b:7e:bb: 40:d4:cb:01:4a:7f:72:b4:10:46:d1:e3:42:d2:13:c5:1e:42: c4:1c:70:5d:d4:6a:0d:fb:63:ce:96:c3:68:e0:0e:95:31:66: 79:79:a9:0d:69:11:0a:8d:72:ab:77:62:e6:fb:ed:ce:e4:53: 5a:d2:53:9d:cc:32:ac:3e:53:f0:08:b5:7e:4f:ef:6d:3c:70: 07:05:99:d6:c7:64:84:f7:96:55:2f:a2:c0:dd:49:c2:e5:eb: 87:0c:a8:d7:ad:20:6b:5b:a3:0c:f2:a8:e6:e3:f4:e7:a7:bd: 34:72:b3:a8:ad:d5:e6:bb:a9:2a:3e:8c:41:93:44:98:ab:bd: 0d:e4:c8:61:7a:0b:ff:e7:f7:28:ad:e7:2a:4a:3f:dc:1c:96: 18:7c:da:c7:ff:56:d8:dd:ed:72:4b:19:c6:2b:e3:38:67:70: f8:3f:ab:f5:f5:5c:b9:d9:5b:60:03:3d:64:3f:4d:2d:e3:cb: 2b:50:f7:c9:74:28:0e:6e:92:cd:1b:23:3b:3c:1a:0e:4f:ad: f5:e4:3f:85:42:16:c8:73:3b:55:6b:7d:34:de:81:29:b8:e9: d4:b9:4f:bd:24:a1:ba:89:7d:84:1c:a3:9a:2b:7b:6d:bc:b0: b4:6a:09:c0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDeGjYD9NNIzyx1LVN8ywaeZPCbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MjUwNDA5NDBaFw0yNjA4MjYwNzMzNDBaMDMxMTAvBgNV BAMTKDQzNjBGMUUxRTMyOUMxN0FEMDYzNzA4ODUxNTFBRjM5MzZGMEZCOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCszkGzL7Y5TGIlXCnE1rDjNDSG EbSeJQaK+lKfKZksa0SxKw5rjI4n3Oz86R1+6CRXxaGRLghofSXF7VLFlzGELR3W T3rAaqK8Nvt3C1HvwM6L4dRPbqNdUhuB40wBFUd7t5HbJ/7xZ/Jkp71ciYgrdJ6J niHbEXvXLFRbJOIQbbCnnYNcWh8cnCTbvXYv5BhnO3QLr2gP2gsr5obL166AFyUc UuQPQEjq5J6GGciQO1VYLTMm0wiGsTpbRW+mod+uYvI/TsBwg6+HkRtMX9MArUFg 6CRr/tzd4eTaLAjC4gcygQPfdGADkN30Vz6mAe5XwEpZuMA4AuRMmIXAi3cfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQ2Dx4eMpwXrQY3CIUVGvOTbw+4swHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLhqTRyZae3i0EngOoYR e367QNTLAUp/crQQRtHjQtITxR5CxBxwXdRqDftjzpbDaOAOlTFmeXmpDWkRCo1y q3di5vvtzuRTWtJTncwyrD5T8Ai1fk/vbTxwBwWZ1sdkhPeWVS+iwN1JwuXrhwyo 160ga1ujDPKo5uP056e9NHKzqK3V5rupKj6MQZNEmKu9DeTIYXoL/+f3KK3nKko/ 3ByWGHzax/9W2N3tcksZxivjOGdw+D+r9fVcudlbYAM9ZD9NLePLK1D3yXQoDm6S zRsjOzwaDk+t9eQ/hUIWyHM7VWt9NN6BKbjp1LlPvSShuol9hByjmit7bbywtGoJ wA== -----END CERTIFICATE-----Generated at Tue Aug 25 08:00:48 2026 by rpki-client