$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: vMfqPQ01BNGzRTapFsiPAIz6q4H7lq2bRadAXSVLOwc= Subject key identifier: 68:A9:B1:89:41:E1:5F:A9:E1:36:F9:B3:43:1C:D4:E8:1F:94:85:66 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 4652FF191334A649677C3DABD714D6E0C03CD805 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0547 Signing time: Thu 06 Aug 2026 02:28:18 +0000 Manifest this update: Thu 06 Aug 2026 02:23:18 +0000 Manifest next update: Fri 07 Aug 2026 05:37:18 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: ocKann7lDsr3k3/rdAPHC+ELkATST+9jEBd6h+jySQY=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Aug 2026 22:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:52:ff:19:13:34:a6:49:67:7c:3d:ab:d7:14:d6:e0:c0:3c:d8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 6 02:23:18 2026 GMT Not After : Aug 7 05:37:18 2026 GMT Subject: CN=68A9B18941E15FA9E136F9B3431CD4E81F948566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bc:a3:a0:70:81:03:21:46:9a:a3:6a:67:cf: b5:9d:0d:27:52:6e:54:1d:6c:0b:e5:48:6c:9a:86: d9:84:7b:1a:3e:36:0b:6b:5a:c3:2e:14:aa:57:3d: 68:b8:0b:01:02:a2:3a:2a:32:b6:16:b9:4f:03:2d: 2c:8c:00:29:87:aa:0c:7b:19:c2:11:7a:39:bd:bb: c2:ff:5b:13:8b:73:4d:2e:99:2f:6e:96:c2:46:83: 96:90:97:f5:6b:9d:99:71:2d:30:79:83:2f:c5:47: 1c:f4:5e:07:a7:55:9e:7a:b4:b6:8d:36:65:37:d3: 6b:4a:3c:a5:d1:87:66:00:4b:15:25:1a:a7:2b:cc: fd:c8:a9:b6:16:a2:15:64:1a:1d:0a:0c:33:3c:f9: 87:91:3d:2a:0e:e9:7a:2c:1b:da:17:d9:ce:1d:00: db:90:05:4f:6f:06:f1:b9:5b:58:0c:42:54:7e:51: 43:34:32:a7:08:72:e7:71:1e:ac:4d:d4:1f:77:90: a6:fc:28:d2:4c:99:66:d0:fe:0a:50:ed:e7:54:f0: 9e:70:e6:dc:e0:1a:09:08:42:92:d6:1f:19:bd:3c: 47:bb:d6:6a:db:9b:e6:80:7d:9f:9d:99:f9:05:64: 09:df:ee:ea:c9:00:fa:94:b2:7f:8f:94:43:8f:e8: 0d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A9:B1:89:41:E1:5F:A9:E1:36:F9:B3:43:1C:D4:E8:1F:94:85:66 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:27:71:a9:6c:86:a6:dc:59:d1:32:34:4c:06:2a:53:7f:19: 16:89:c7:72:6c:9e:55:e3:1b:ca:40:df:6d:81:4f:b5:36:c8: 11:98:a6:be:b1:24:20:35:cd:4c:73:ef:8a:29:d7:87:66:fb: 12:0d:61:c7:15:71:f0:40:d4:7a:57:52:f1:40:1f:ff:6e:f1: 92:fe:a9:1a:95:97:8c:9d:d8:1a:05:b0:f2:dc:b0:1f:68:96: 47:b8:57:d0:98:44:fe:8f:bd:e6:28:c0:4d:11:70:eb:02:5e: 20:1c:8e:87:19:2d:f2:a4:e7:bb:9f:72:e5:f6:83:0a:86:4b: 08:81:a3:f6:a9:eb:57:ad:15:7b:5b:0f:bc:c9:27:d7:7a:30: cd:73:bd:61:a3:4a:7d:e1:c8:75:3b:6e:87:75:46:2a:c1:a8: 40:49:98:81:d7:29:7c:4b:cb:5e:a0:c1:11:a9:40:02:19:17: bb:d0:cf:33:68:6b:0e:15:4a:c1:d6:66:ea:19:ab:12:81:df: 01:da:6c:c0:7f:dd:68:38:68:30:05:df:9e:bb:27:9c:e3:3f: 29:05:00:a2:ab:85:2e:b6:79:2c:37:26:54:99:8b:d1:4e:4d: fb:57:a4:18:6a:ab:4a:c4:b4:1d:64:ab:e6:9b:10:7b:91:98: c7:79:6b:7a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURlL/GRM0pklnfD2r1xTW4MA82AUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA4MDYwMjIzMThaFw0yNjA4MDcwNTM3MThaMDMxMTAvBgNV BAMTKDY4QTlCMTg5NDFFMTVGQTlFMTM2RjlCMzQzMUNENEU4MUY5NDg1NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqvKOgcIEDIUaao2pnz7WdDSdS blQdbAvlSGyahtmEexo+NgtrWsMuFKpXPWi4CwECojoqMrYWuU8DLSyMACmHqgx7 GcIRejm9u8L/WxOLc00umS9ulsJGg5aQl/VrnZlxLTB5gy/FRxz0XgenVZ56tLaN NmU302tKPKXRh2YASxUlGqcrzP3IqbYWohVkGh0KDDM8+YeRPSoO6XosG9oX2c4d ANuQBU9vBvG5W1gMQlR+UUM0MqcIcudxHqxN1B93kKb8KNJMmWbQ/gpQ7edU8J5w 5tzgGgkIQpLWHxm9PEe71mrbm+aAfZ+dmfkFZAnf7urJAPqUsn+PlEOP6A27AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUaKmxiUHhX6nhNvmzQxzU6B+UhWYwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjidxqWyGptxZ0TI0TAYq U38ZFonHcmyeVeMbykDfbYFPtTbIEZimvrEkIDXNTHPviinXh2b7Eg1hxxVx8EDU eldS8UAf/27xkv6pGpWXjJ3YGgWw8tywH2iWR7hX0JhE/o+95ijATRFw6wJeIByO hxkt8qTnu59y5faDCoZLCIGj9qnrV60Ve1sPvMkn13owzXO9YaNKfeHIdTtuh3VG KsGoQEmYgdcpfEvLXqDBEalAAhkXu9DPM2hrDhVKwdZm6hmrEoHfAdpswH/daDho MAXfnrsnnOM/KQUAoquFLrZ5LDcmVJmL0U5N+1ekGGqrSsS0HWSr5psQe5GYx3lr eg== -----END CERTIFICATE-----Generated at Thu Aug 6 08:45:53 2026 by rpki-client