$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: ubVhTQz/xmEVTc1QE/3nGKDh1AVF1jaHqyVKqqIcIlY= Subject key identifier: 65:8E:64:23:99:86:02:A7:A1:0C:E7:6E:92:48:65:D7:E1:36:FE:2F Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 6B1FBD5D5F5C4006DB43F8B890AE83ABAF8EF7C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0489 Signing time: Sun 15 Mar 2026 10:11:56 +0000 Manifest this update: Sun 15 Mar 2026 10:06:56 +0000 Manifest next update: Mon 16 Mar 2026 10:23:56 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: sLV0wQiw4AKCE1Qi+WMuBpwj91yg6z2lkd2/ctoEGDk=) 3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1f:bd:5d:5f:5c:40:06:db:43:f8:b8:90:ae:83:ab:af:8e:f7:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Mar 15 10:06:56 2026 GMT Not After : Mar 16 10:23:56 2026 GMT Subject: CN=658E6423998602A7A10CE76E924865D7E136FE2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:aa:c2:bd:11:96:52:8c:d3:f5:85:89:58:d0: 0e:3b:07:28:ab:17:33:08:c2:c3:9d:99:00:d0:73: dd:39:54:fa:3d:d4:28:06:84:e2:51:66:33:6a:b3: 27:4f:e9:5c:3f:9e:22:94:91:f8:63:b0:a6:d2:ba: 5b:cc:88:04:93:b2:59:fc:93:53:50:9d:80:10:88: 4f:ea:f5:20:41:99:5b:69:92:30:84:01:45:0a:8a: 75:32:e4:3a:28:7d:3b:e5:e4:d5:b6:6c:7e:bf:d4: 37:cb:d0:e2:aa:16:76:bc:3a:8b:96:27:cf:f2:b8: f8:9a:4a:d2:58:e4:fc:34:f1:4f:aa:e6:04:93:1c: ce:11:2c:65:ab:74:c6:7b:17:5d:4c:7c:d6:24:d0: 70:d9:d4:12:7b:7a:d1:1f:74:18:ff:ef:15:3e:7f: b2:8f:e6:a9:3d:28:c3:0e:29:b7:c6:59:28:ad:c5: 3e:be:4b:16:b5:c1:48:ab:fc:1f:83:ba:4c:02:9e: 7d:e0:1d:e0:72:4b:0e:c1:85:8c:ed:72:6a:27:cd: 88:14:98:d4:4d:f3:7d:bf:e4:ee:f5:64:ee:38:8f: 86:f2:0a:91:4f:81:9f:b2:d1:9b:e1:18:3e:0f:98: ac:b2:50:02:84:76:1f:0c:76:bd:6f:f2:04:cd:a6: bd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8E:64:23:99:86:02:A7:A1:0C:E7:6E:92:48:65:D7:E1:36:FE:2F X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:75:40:62:62:65:b5:4b:23:b5:9f:ff:e2:df:59:e1:3b:1c: 62:fc:b4:85:00:84:ab:a2:25:f1:38:a8:0d:e9:9d:fb:4a:e8: f3:38:f4:35:d2:53:2d:0f:b0:3b:e5:3b:db:12:f9:7c:a2:0d: 55:cc:df:1a:4c:ee:ee:9e:98:3b:b5:17:32:fe:bb:f7:d4:20: d1:1c:5c:c5:5e:8b:b2:d4:dd:0f:c9:d9:cc:d2:8e:3b:6d:f3: c7:b8:44:6a:4f:c7:9a:6f:b0:e9:16:62:6b:d4:60:17:6c:7a: d1:c9:b6:55:5c:64:cd:38:b1:39:9a:4f:4c:19:23:75:76:1e: 3f:82:7b:b5:3b:91:22:f0:3a:46:e7:2e:4d:07:90:00:33:17: b4:5b:c1:d0:ff:e3:12:8b:2e:61:42:7f:36:38:7e:d4:af:d6: 40:d9:ac:04:18:64:2a:be:27:c5:77:db:d7:58:69:5b:fc:fd: 7e:51:c4:49:e8:74:df:70:35:b7:1b:8a:1a:18:1e:99:0a:02: 9c:af:42:6b:ae:f6:21:19:aa:60:cd:cf:ac:b7:75:75:97:6f: d8:59:6e:2c:24:b6:25:ae:a9:6f:69:25:ea:7c:c4:fd:ea:d9: e5:89:c0:12:a3:70:c7:0d:14:4f:7a:28:9c:18:f4:4d:48:43: 38:64:af:d0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUax+9XV9cQAbbQ/i4kK6Dq6+O98gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAzMTUxMDA2NTZaFw0yNjAzMTYxMDIzNTZaMDMxMTAvBgNV BAMTKDY1OEU2NDIzOTk4NjAyQTdBMTBDRTc2RTkyNDg2NUQ3RTEzNkZFMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFqsK9EZZSjNP1hYlY0A47Byir FzMIwsOdmQDQc905VPo91CgGhOJRZjNqsydP6Vw/niKUkfhjsKbSulvMiASTsln8 k1NQnYAQiE/q9SBBmVtpkjCEAUUKinUy5DoofTvl5NW2bH6/1DfL0OKqFna8OouW J8/yuPiaStJY5Pw08U+q5gSTHM4RLGWrdMZ7F11MfNYk0HDZ1BJ7etEfdBj/7xU+ f7KP5qk9KMMOKbfGWSitxT6+Sxa1wUir/B+DukwCnn3gHeBySw7BhYztcmonzYgU mNRN832/5O71ZO44j4byCpFPgZ+y0ZvhGD4PmKyyUAKEdh8Mdr1v8gTNpr1RAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUZY5kI5mGAqehDOdukkhl1+E2/i8wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3VAYmJltUsjtZ//4t9Z 4TscYvy0hQCEq6Il8TioDemd+0ro8zj0NdJTLQ+wO+U72xL5fKINVczfGkzu7p6Y O7UXMv6799Qg0RxcxV6LstTdD8nZzNKOO23zx7hEak/Hmm+w6RZia9RgF2x60cm2 VVxkzTixOZpPTBkjdXYeP4J7tTuRIvA6RucuTQeQADMXtFvB0P/jEosuYUJ/Njh+ 1K/WQNmsBBhkKr4nxXfb11hpW/z9flHESeh033A1txuKGhgemQoCnK9Ca672IRmq YM3PrLd1dZdv2FluLCS2Ja6pb2kl6nzE/erZ5YnAEqNwxw0UT3oonBj0TUhDOGSv 0A== -----END CERTIFICATE-----Generated at Sun Mar 15 12:30:17 2026 by rpki-client