$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: aAisTz/gBKzGqoq3xtCLZ68SBz1HXKdzzAqa8wbX8h4= Subject key identifier: 7D:96:A8:83:A7:32:95:33:6B:66:B1:B8:36:5B:ED:00:41:F3:61:FB Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 3C92F0A5B8584445B0945479E0F8CB0AFFA0C427 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0517 Signing time: Tue 30 Jun 2026 14:58:35 +0000 Manifest this update: Tue 30 Jun 2026 14:53:35 +0000 Manifest next update: Wed 01 Jul 2026 16:01:35 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 1zorBMLEs3k32YmRqyBjhKtvd2B4a2KC0s/HIHIIAJY=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Jul 2026 14:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:92:f0:a5:b8:58:44:45:b0:94:54:79:e0:f8:cb:0a:ff:a0:c4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 30 14:53:35 2026 GMT Not After : Jul 1 16:01:35 2026 GMT Subject: CN=7D96A883A73295336B66B1B8365BED0041F361FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:07:34:cb:58:0b:ed:7e:c6:46:11:20:b8: 32:b4:5c:48:02:ba:62:29:05:5b:87:3c:89:a9:28: 28:f0:4f:05:f3:24:cd:4b:b4:cb:ff:be:70:64:20: 1c:14:5d:4f:fc:4e:ce:e1:98:61:87:b2:21:cd:7d: 68:63:69:2e:28:fc:d4:4f:e0:29:b5:13:f7:a5:89: fe:52:28:06:a5:3a:c6:c2:03:f9:82:d6:0e:26:4c: e3:cb:3a:d0:88:df:98:68:3b:e3:21:6e:00:cf:33: f3:19:6a:27:a6:bc:7c:f0:53:43:e9:1d:f6:41:8d: 3e:59:91:f1:3c:fa:75:09:be:4f:e6:03:28:c6:7b: c3:98:65:ab:04:28:af:68:19:07:f6:83:d9:96:17: 90:c0:10:d2:7c:a1:2a:f0:2d:ab:a8:88:38:b2:53: cd:14:17:0e:39:ea:43:cf:0d:30:50:47:0a:1e:c8: 52:30:91:1a:87:70:0d:5d:f0:56:6c:0a:31:ba:44: 44:30:21:f8:30:5e:59:1c:73:05:80:f2:df:87:9f: 2b:79:2a:31:25:b7:20:14:2d:fc:d2:69:f4:62:98: ee:9a:4a:1d:75:80:47:8f:35:59:f2:91:2b:96:19: 77:e4:12:0d:7b:78:f9:c3:b8:ce:42:e8:55:25:18: b1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:96:A8:83:A7:32:95:33:6B:66:B1:B8:36:5B:ED:00:41:F3:61:FB X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b8:c0:47:fc:e9:90:3d:85:db:3f:8a:17:eb:e8:51:d6:1f: 74:c7:88:06:e6:28:08:74:c5:d7:72:8f:8a:47:1f:bd:87:38: cc:76:20:e8:f5:15:78:16:98:45:9c:69:16:35:70:04:10:e1: 67:c5:48:96:2e:45:2c:19:f4:36:17:d8:75:ac:ef:d0:47:24: 15:dd:95:9c:bc:0e:55:7d:bc:79:11:4d:9d:68:87:61:56:bd: 72:0a:f8:9c:be:e9:bb:d7:f3:87:3b:11:7f:c5:a0:2f:24:36: d3:de:6c:b6:e3:68:88:2a:b7:d7:18:7f:dd:ea:39:77:18:7d: 4d:83:1d:0a:ed:c5:56:34:8a:94:92:1b:23:a5:db:62:54:73: 51:b5:1d:3a:99:84:61:30:b1:73:1c:8f:b5:09:97:bf:b2:aa: 5f:99:dc:e1:ee:ec:95:44:58:f5:94:c3:5f:39:1b:0c:e6:a9: 73:3e:6e:b4:36:d6:94:c5:99:bd:26:16:80:b5:cd:b9:f0:f7: 86:5b:3e:28:f8:68:9b:28:7d:db:dd:91:3d:79:21:a9:a0:42: 09:89:c3:7b:f4:a8:6a:ca:08:ba:0d:b9:c5:61:30:6a:64:5d: 3e:5f:0a:20:65:bd:55:f5:3e:51:a2:b4:b7:c4:13:02:88:a9: 3b:b6:1f:4b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPJLwpbhYREWwlFR54PjLCv+gxCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MzAxNDUzMzVaFw0yNjA3MDExNjAxMzVaMDMxMTAvBgNV BAMTKDdEOTZBODgzQTczMjk1MzM2QjY2QjFCODM2NUJFRDAwNDFGMzYxRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxFwc0y1gL7X7GRhEguDK0XEgC umIpBVuHPImpKCjwTwXzJM1LtMv/vnBkIBwUXU/8Ts7hmGGHsiHNfWhjaS4o/NRP 4Cm1E/elif5SKAalOsbCA/mC1g4mTOPLOtCI35hoO+MhbgDPM/MZaiemvHzwU0Pp HfZBjT5ZkfE8+nUJvk/mAyjGe8OYZasEKK9oGQf2g9mWF5DAENJ8oSrwLauoiDiy U80UFw456kPPDTBQRwoeyFIwkRqHcA1d8FZsCjG6REQwIfgwXlkccwWA8t+Hnyt5 KjEltyAULfzSafRimO6aSh11gEePNVnykSuWGXfkEg17ePnDuM5C6FUlGLEdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUfZaog6cylTNrZrG4NlvtAEHzYfswHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7jAR/zpkD2F2z+KF+vo UdYfdMeIBuYoCHTF13KPikcfvYc4zHYg6PUVeBaYRZxpFjVwBBDhZ8VIli5FLBn0 NhfYdazv0EckFd2VnLwOVX28eRFNnWiHYVa9cgr4nL7pu9fzhzsRf8WgLyQ2095s tuNoiCq31xh/3eo5dxh9TYMdCu3FVjSKlJIbI6XbYlRzUbUdOpmEYTCxcxyPtQmX v7KqX5nc4e7slURY9ZTDXzkbDOapcz5utDbWlMWZvSYWgLXNufD3hls+KPhomyh9 292RPXkhqaBCCYnDe/SoasoIug25xWEwamRdPl8KIGW9VfU+UaK0t8QTAoipO7Yf Sw== -----END CERTIFICATE-----Generated at Tue Jun 30 17:24:26 2026 by rpki-client