$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: EVQKAe5rwe8pLth6TkmLo4WAAcr5XRkkWrb2YKpA7HM= Subject key identifier: E9:44:0C:14:5A:AB:35:A2:D8:21:66:08:FA:03:A6:F0:D9:D9:EE:2A Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 21F85164B4A0E8308F2E0BB647FD7BE84531D4CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0536 Signing time: Thu 23 Jul 2026 21:25:01 +0000 Manifest this update: Thu 23 Jul 2026 21:20:01 +0000 Manifest next update: Sat 25 Jul 2026 00:04:01 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: JgmoOnJw9pnYYnOOmJvT/rUA+uDwtzuH0De7M7u2I9c=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f8:51:64:b4:a0:e8:30:8f:2e:0b:b6:47:fd:7b:e8:45:31:d4:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jul 23 21:20:01 2026 GMT Not After : Jul 25 00:04:01 2026 GMT Subject: CN=E9440C145AAB35A2D8216608FA03A6F0D9D9EE2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:32:18:44:df:21:7f:4c:9c:23:97:26:1c:1e: 40:39:dd:c2:63:14:63:be:68:c8:d9:92:80:56:9c: b9:c7:99:d0:96:b6:a6:3d:f6:9e:9b:4d:ee:d0:48: f5:c6:50:34:8e:ec:5d:96:73:c1:32:74:6f:c5:7e: 8e:a1:2e:95:9a:52:fa:d3:da:8f:3c:e2:ba:ca:e8: be:c4:0e:a0:d0:37:67:c4:57:1b:b2:7c:39:dc:06: a6:20:8d:d8:1d:ed:38:0f:39:30:05:08:8e:f6:e3: 95:d2:bd:dd:e6:3b:a7:d3:93:45:55:29:09:47:51: f4:81:05:ca:61:7c:b7:78:c3:31:61:82:f3:b3:78: 3c:f0:3e:c1:ee:45:2b:12:de:52:cd:9b:c5:ee:e3: df:3d:8f:7e:35:f4:f7:f3:6e:6e:9a:93:76:99:7e: 5a:70:5d:d0:6e:61:35:af:33:f3:26:2c:94:6b:c2: 90:37:14:fc:0f:64:29:12:b1:2a:11:d0:e7:6e:23: 50:69:be:c1:7b:a3:32:0f:ef:13:88:85:23:98:1c: 41:f3:3e:b3:d2:c1:18:b0:86:5e:1d:79:b4:51:97: 99:3d:cd:2b:e3:e6:dd:dc:5c:ae:aa:44:54:60:ee: ec:bf:b1:d8:c8:79:be:0c:bf:2c:da:6b:1c:c1:6d: 24:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:44:0C:14:5A:AB:35:A2:D8:21:66:08:FA:03:A6:F0:D9:D9:EE:2A X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:84:3a:e6:a0:ca:76:a2:d9:bd:1f:0f:50:6c:b0:eb:91:b3: a3:83:c7:de:14:57:12:7e:32:bb:ad:cb:c5:af:61:10:3e:60: 2a:e7:e6:51:b2:dd:ea:93:c1:fc:86:35:80:69:c8:e4:19:29: 9d:58:c6:3c:0b:b4:d9:8a:94:9a:7d:c4:a8:82:6a:07:37:76: 38:cb:9e:df:64:a8:0d:f8:ab:8a:33:51:22:06:3e:04:fc:53: 31:a1:84:40:b1:e9:b5:ff:63:98:a7:05:e2:51:cf:76:07:74: d4:b7:65:ad:5a:b3:67:68:e5:08:b5:fc:76:e4:7e:ff:e2:ad: 1f:65:73:1d:1a:68:06:99:14:cb:b8:b7:18:e9:02:f7:f2:58: 1b:88:37:a0:75:21:90:45:9d:2a:e6:8a:5c:a6:90:5b:c7:d2: d4:1f:4a:7e:82:c7:64:6a:5a:11:16:a6:23:a9:53:1b:13:e5: 92:7d:da:60:85:d2:ab:a0:84:68:ea:fe:7d:a3:42:ea:7a:3f: 35:4a:8f:38:f7:a7:5d:19:da:ee:da:05:38:d9:81:e6:65:5e: bb:30:81:0c:7e:f6:0f:4b:38:2d:61:9c:95:b7:b9:3d:ea:8b: 4b:2c:21:33:cd:5c:4b:70:0a:1c:1e:2e:57:36:5a:e9:29:3b: 63:23:00:b7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIfhRZLSg6DCPLgu2R/176EUx1M0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA3MjMyMTIwMDFaFw0yNjA3MjUwMDA0MDFaMDMxMTAvBgNV BAMTKEU5NDQwQzE0NUFBQjM1QTJEODIxNjYwOEZBMDNBNkYwRDlEOUVFMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPMhhE3yF/TJwjlyYcHkA53cJj FGO+aMjZkoBWnLnHmdCWtqY99p6bTe7QSPXGUDSO7F2Wc8EydG/Ffo6hLpWaUvrT 2o884rrK6L7EDqDQN2fEVxuyfDncBqYgjdgd7TgPOTAFCI7245XSvd3mO6fTk0VV KQlHUfSBBcphfLd4wzFhgvOzeDzwPsHuRSsS3lLNm8Xu4989j3419Pfzbm6ak3aZ flpwXdBuYTWvM/MmLJRrwpA3FPwPZCkSsSoR0OduI1BpvsF7ozIP7xOIhSOYHEHz PrPSwRiwhl4debRRl5k9zSvj5t3cXK6qRFRg7uy/sdjIeb4MvyzaaxzBbSTjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6UQMFFqrNaLYIWYI+gOm8NnZ7iowHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIQ65qDKdqLZvR8PUGyw 65Gzo4PH3hRXEn4yu63Lxa9hED5gKufmUbLd6pPB/IY1gGnI5BkpnVjGPAu02YqU mn3EqIJqBzd2OMue32SoDfirijNRIgY+BPxTMaGEQLHptf9jmKcF4lHPdgd01Ldl rVqzZ2jlCLX8duR+/+KtH2VzHRpoBpkUy7i3GOkC9/JYG4g3oHUhkEWdKuaKXKaQ W8fS1B9KfoLHZGpaERamI6lTGxPlkn3aYIXSq6CEaOr+faNC6no/NUqPOPenXRna 7toFONmB5mVeuzCBDH72D0s4LWGclbe5PeqLSywhM81cS3AKHB4uVzZa6Sk7YyMA tw== -----END CERTIFICATE-----Generated at Fri Jul 24 08:46:57 2026 by rpki-client