$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: WevFmVjX9BYLEcmgrZo1CbhzqV6rihZGu1YYsqUMUDY= Subject key identifier: 59:20:C6:41:88:36:22:9B:06:C2:EB:B2:0A:0D:C8:12:B6:20:CF:12 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 3B093B312178BDD7AABFF970BF08C2D3A956AB8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0511 Signing time: Fri 26 Jun 2026 03:32:09 +0000 Manifest this update: Fri 26 Jun 2026 03:27:09 +0000 Manifest next update: Sat 27 Jun 2026 07:14:09 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 6H/YlbYXNab5vgbps1DwuI9ZTIslUlxDFspsWBhZ/NY=) 4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Jun 2026 07:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:09:3b:31:21:78:bd:d7:aa:bf:f9:70:bf:08:c2:d3:a9:56:ab:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 26 03:27:09 2026 GMT Not After : Jun 27 07:14:09 2026 GMT Subject: CN=5920C6418836229B06C2EBB20A0DC812B620CF12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b2:57:76:6a:7b:f0:49:2a:9e:88:3f:bd:15: 17:19:6a:29:19:4b:94:7b:7d:1a:80:24:1c:bb:c2: 9d:29:2e:87:4d:2d:fa:04:4a:75:30:46:23:61:3f: ac:eb:52:bd:eb:b2:f7:3e:c2:82:4f:d9:9d:f8:a7: 42:37:fc:0b:df:e5:34:5f:4e:4d:b8:0b:19:12:0a: 07:7c:ba:a2:2b:5c:39:77:b6:16:1f:47:01:82:90: e7:98:d8:25:1b:62:50:7d:d9:56:54:70:2e:df:63: 17:66:64:d2:ec:86:d5:b3:78:04:92:ac:0d:fd:2b: bf:14:3d:9b:ef:4d:9e:19:3b:0e:f1:7d:09:53:36: 4d:26:10:48:df:80:74:7a:74:96:ce:0b:0e:ad:a2: 25:7d:38:ef:50:d1:72:14:99:bc:fe:d9:f1:1f:2a: bd:d5:f1:58:70:f1:6b:a4:43:d5:f3:ac:5d:11:62: 94:53:ce:76:fa:49:e0:66:c8:9a:58:c7:50:e8:10: f1:09:67:f4:f1:4d:d6:0a:05:4b:20:87:84:1e:91: 13:0e:b3:3d:a6:dd:44:fc:67:f2:0a:a2:8f:fc:9a: 1f:7a:b2:fa:35:cb:af:f2:1b:05:1c:62:34:a4:3d: f1:2a:5c:27:28:c3:e5:3b:c4:b0:0c:66:2b:58:dd: 01:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:20:C6:41:88:36:22:9B:06:C2:EB:B2:0A:0D:C8:12:B6:20:CF:12 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b5:76:3d:c1:89:b2:79:18:45:ae:11:3a:b9:b2:f5:af:48: 95:34:1e:8d:f2:0e:eb:8d:7f:62:9e:aa:b5:63:53:c9:51:39: 54:0f:c3:55:38:03:18:76:b1:e4:4d:52:fd:68:64:ac:5a:ed: 27:6e:27:d6:d6:15:16:48:7f:6d:3c:f0:29:d6:7c:62:56:49: 79:7d:11:bb:bf:6b:83:96:c8:f9:78:45:cc:ad:57:ac:9b:09: 3d:91:67:8f:5d:ef:c2:23:5d:aa:42:67:0d:ab:75:ab:d7:99: dc:00:0c:ce:b9:26:93:15:ec:12:58:11:f7:bf:9c:bf:3d:12: 57:df:d6:88:b7:0d:15:2f:71:c4:68:15:cc:a0:c8:16:85:43: 82:72:51:64:5b:d6:77:75:09:da:8b:b7:a2:01:f6:54:95:4f: 9d:37:3c:a4:53:17:35:c9:ad:c7:e0:d4:1a:a6:9f:3d:2d:dc: e8:3b:0d:f1:fb:96:b5:7c:d6:7f:0b:86:66:b8:a9:71:61:03: 47:6c:b4:67:f8:b9:f4:a7:50:9c:d0:ba:e2:ce:cd:ec:0d:70: 45:af:a7:ab:04:5b:8a:5e:f6:4e:dd:0c:54:19:23:a7:12:3b: b8:03:53:6e:a7:c5:bb:16:b8:d3:41:06:b7:8f:fa:b4:40:53: b3:91:d6:0c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOwk7MSF4vdeqv/lwvwjC06lWq4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MjYwMzI3MDlaFw0yNjA2MjcwNzE0MDlaMDMxMTAvBgNV BAMTKDU5MjBDNjQxODgzNjIyOUIwNkMyRUJCMjBBMERDODEyQjYyMENGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLsld2anvwSSqeiD+9FRcZaikZ S5R7fRqAJBy7wp0pLodNLfoESnUwRiNhP6zrUr3rsvc+woJP2Z34p0I3/Avf5TRf Tk24CxkSCgd8uqIrXDl3thYfRwGCkOeY2CUbYlB92VZUcC7fYxdmZNLshtWzeASS rA39K78UPZvvTZ4ZOw7xfQlTNk0mEEjfgHR6dJbOCw6toiV9OO9Q0XIUmbz+2fEf Kr3V8Vhw8WukQ9XzrF0RYpRTznb6SeBmyJpYx1DoEPEJZ/TxTdYKBUsgh4QekRMO sz2m3UT8Z/IKoo/8mh96svo1y6/yGwUcYjSkPfEqXCcow+U7xLAMZitY3QFtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUWSDGQYg2IpsGwuuyCg3IErYgzxIwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7V2PcGJsnkYRa4ROrmy 9a9IlTQejfIO641/Yp6qtWNTyVE5VA/DVTgDGHax5E1S/WhkrFrtJ24n1tYVFkh/ bTzwKdZ8YlZJeX0Ru79rg5bI+XhFzK1XrJsJPZFnj13vwiNdqkJnDat1q9eZ3AAM zrkmkxXsElgR97+cvz0SV9/WiLcNFS9xxGgVzKDIFoVDgnJRZFvWd3UJ2ou3ogH2 VJVPnTc8pFMXNcmtx+DUGqafPS3c6DsN8fuWtXzWfwuGZripcWEDR2y0Z/i59KdQ nNC64s7N7A1wRa+nqwRbil72Tt0MVBkjpxI7uANTbqfFuxa400EGt4/6tEBTs5HW DA== -----END CERTIFICATE-----Generated at Fri Jun 26 14:54:36 2026 by rpki-client