$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 4Xmc5wAJyZcNpdJZXgN/OuOzLjVNbGWBqJ153km18fY= Subject key identifier: B4:29:CD:73:C2:39:4C:AA:EF:60:3C:34:11:F6:61:01:F0:2A:08:26 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 047D2A8E1B3C24CE3E51D4601A908B76E4C1184D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 04E3 Signing time: Thu 21 May 2026 20:24:55 +0000 Manifest this update: Thu 21 May 2026 20:19:55 +0000 Manifest next update: Fri 22 May 2026 21:27:55 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 6MJfW88q6slaSJ2SELGwSxTO0Bwa71OSymzPy+a/vZ8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 May 2026 21:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:7d:2a:8e:1b:3c:24:ce:3e:51:d4:60:1a:90:8b:76:e4:c1:18:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 21 20:19:55 2026 GMT Not After : May 22 21:27:55 2026 GMT Subject: CN=B429CD73C2394CAAEF603C3411F66101F02A0826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bc:79:a3:73:59:60:0f:86:01:86:f1:fa:16: c3:dc:78:0d:07:1f:af:9f:c8:e0:9d:fb:64:a8:b8: 5d:b0:3b:5e:cd:f4:b0:54:a6:d0:78:f7:f3:bc:c4: 82:44:1b:89:0b:b0:68:f4:41:9f:f4:3a:29:3b:92: f8:6d:88:6c:b5:1a:f3:1b:14:8b:cb:b5:75:03:b8: df:e3:36:e2:c1:e9:da:b8:31:d5:e2:0a:08:85:a2: 89:5c:ff:2f:45:9c:41:d4:80:17:02:d4:d8:c4:41: 57:84:00:ff:f4:2f:19:63:3f:d1:d8:26:6c:af:99: 90:13:04:15:b1:40:fe:fa:95:a9:f1:9f:cc:1b:1d: ba:fa:31:90:6d:3a:ef:b3:59:28:93:c9:03:da:fc: 9d:18:ab:1e:cb:7f:fc:8d:d3:dc:a4:0e:a2:98:6a: 6b:b8:a2:e5:d1:68:3b:f2:af:c2:25:1f:25:4c:1a: 18:fa:e4:1a:8c:7d:6d:69:ff:e5:ca:8d:b1:1a:55: bf:82:25:0f:12:f3:b1:bd:5a:76:44:e6:66:8a:0c: 76:76:d5:a9:ea:e7:44:33:8d:78:30:1c:45:e9:b3: 95:35:d7:1e:51:7f:d4:f4:06:02:5b:30:fe:dc:d1: 47:a4:6b:9c:61:74:14:7a:c9:89:00:9a:cd:b1:24: d5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:29:CD:73:C2:39:4C:AA:EF:60:3C:34:11:F6:61:01:F0:2A:08:26 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b6:5f:69:23:b4:12:90:86:00:14:13:07:72:43:8a:27:58: 92:e0:47:31:34:46:e2:1c:6c:c9:1d:fb:ed:27:48:fb:e4:9d: c3:6b:87:f2:2e:dd:19:df:5b:25:6d:f6:f1:b1:42:19:8e:3d: 93:62:43:98:2a:08:1c:0f:66:89:89:3a:c7:c6:ac:82:e6:4f: 8f:bb:f9:5b:15:67:10:72:f0:25:b2:91:b4:02:eb:3b:e7:86: 5c:78:9d:92:02:03:43:51:0e:4b:13:5e:68:66:a1:92:dd:6b: b8:e7:17:ec:b4:5d:23:17:42:6e:7e:f4:09:a0:2c:ba:fc:43: f1:9e:07:9d:67:bf:da:f0:13:7c:7b:6a:e4:f7:aa:be:b8:d5: 4f:62:f9:b0:5a:f6:75:a2:7c:63:3d:bb:68:2b:7b:6d:4c:59: ae:bc:07:33:d9:02:5f:bf:e7:51:5e:9b:13:f8:85:4c:5e:31: 99:93:d0:5e:01:d2:9c:3a:78:a5:5e:92:bc:3b:b2:d3:0a:2a: fd:9d:0b:50:56:a0:13:b7:34:e2:f2:bf:92:94:7f:b0:7a:ec: 62:dc:75:74:a1:0c:71:0a:59:7b:6e:12:0f:b1:85:d2:05:b3: 76:e2:3a:05:be:0a:7a:5e:3f:90:69:0e:95:09:82:a5:9d:24: f6:0b:dc:a6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBH0qjhs8JM4+UdRgGpCLduTBGE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA1MjEyMDE5NTVaFw0yNjA1MjIyMTI3NTVaMDMxMTAvBgNV BAMTKEI0MjlDRDczQzIzOTRDQUFFRjYwM0MzNDExRjY2MTAxRjAyQTA4MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzvHmjc1lgD4YBhvH6FsPceA0H H6+fyOCd+2SouF2wO17N9LBUptB49/O8xIJEG4kLsGj0QZ/0Oik7kvhtiGy1GvMb FIvLtXUDuN/jNuLB6dq4MdXiCgiFoolc/y9FnEHUgBcC1NjEQVeEAP/0LxljP9HY JmyvmZATBBWxQP76lanxn8wbHbr6MZBtOu+zWSiTyQPa/J0Yqx7Lf/yN09ykDqKY amu4ouXRaDvyr8IlHyVMGhj65BqMfW1p/+XKjbEaVb+CJQ8S87G9WnZE5maKDHZ2 1anq50QzjXgwHEXps5U11x5Rf9T0BgJbMP7c0Ueka5xhdBR6yYkAms2xJNVjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUtCnNc8I5TKrvYDw0EfZhAfAqCCYwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7ZfaSO0EpCGABQTB3JD iidYkuBHMTRG4hxsyR377SdI++Sdw2uH8i7dGd9bJW328bFCGY49k2JDmCoIHA9m iYk6x8asguZPj7v5WxVnEHLwJbKRtALrO+eGXHidkgIDQ1EOSxNeaGahkt1ruOcX 7LRdIxdCbn70CaAsuvxD8Z4HnWe/2vATfHtq5PeqvrjVT2L5sFr2daJ8Yz27aCt7 bUxZrrwHM9kCX7/nUV6bE/iFTF4xmZPQXgHSnDp4pV6SvDuy0woq/Z0LUFagE7c0 4vK/kpR/sHrsYtx1dKEMcQpZe24SD7GF0gWzduI6Bb4Kel4/kGkOlQmCpZ0k9gvc pg== -----END CERTIFICATE-----Generated at Fri May 22 08:46:06 2026 by rpki-client