$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: lkXb9PMzxJN7tpe9l6TNVefK8CA2SgMfWEmn8DLRGcQ= Subject key identifier: 88:92:4E:B4:E8:28:A5:1E:C4:48:DB:B7:7A:EE:D2:A9:CE:4A:43:FD Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 4E558EB0BD061BAAF73E774E099D169A110000AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 03DB Signing time: Tue 04 Nov 2025 13:20:19 +0000 Manifest this update: Tue 04 Nov 2025 13:15:19 +0000 Manifest next update: Wed 05 Nov 2025 15:11:19 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: pWUbEnqKj9nUFikEzxyzKWq6HGIE+uM/UlN67YHA3wQ=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 15:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:55:8e:b0:bd:06:1b:aa:f7:3e:77:4e:09:9d:16:9a:11:00:00:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Nov 4 13:15:19 2025 GMT Not After : Nov 5 15:11:19 2025 GMT Subject: CN=88924EB4E828A51EC448DBB77AEED2A9CE4A43FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ac:89:5d:33:6f:66:0c:82:6d:c9:2b:af:29: c6:75:d0:8e:45:bf:e6:79:02:98:46:7d:88:7b:33: 31:2e:ec:6d:c2:94:8c:35:f3:ec:46:e8:76:81:d3: ff:47:83:f0:4a:2e:fc:5a:28:ef:30:a6:36:2b:5a: 00:c1:88:80:f6:1f:c5:82:3a:48:f1:ed:c1:43:b6: f3:2e:e3:4b:6f:e2:89:aa:83:fe:ec:c5:21:09:c3: f5:ad:ae:8d:b7:f5:f0:ef:98:e8:8c:a0:54:1a:48: 71:91:e4:61:f3:c6:40:e6:f8:eb:38:51:c6:9e:d1: fa:ec:c9:23:2b:1e:a7:0c:bb:60:97:d7:38:a6:4d: aa:ce:49:f2:af:e0:bc:88:9f:1a:2d:9b:fd:88:d5: 13:1a:ea:7f:5c:cb:fd:f3:34:f0:0c:a0:e1:9d:a3: fb:2e:14:b5:e1:b6:4c:f4:ee:5c:1f:28:88:fb:a4: 41:2e:b3:a8:73:0c:e1:da:e3:e9:b6:af:5f:67:24: d6:5e:cc:86:0e:79:63:f3:6f:be:d3:93:7e:3b:ef: f9:6e:27:0e:6e:97:60:9f:b7:85:db:97:c4:6d:f7: be:e9:2e:e6:7b:4f:c6:df:46:fa:d6:16:d5:d1:d9: 00:6c:f0:78:bc:54:41:0b:9a:e1:24:03:02:0a:5e: 8c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:92:4E:B4:E8:28:A5:1E:C4:48:DB:B7:7A:EE:D2:A9:CE:4A:43:FD X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:83:a3:1f:0e:9e:2f:9d:96:92:91:be:3e:42:2a:cc:82:da: 0f:7c:b1:d7:d4:c0:6f:7d:ab:53:cf:e0:0b:56:87:f1:f1:cd: a7:71:6d:19:50:ec:9d:52:87:17:4f:8f:9f:20:55:3b:8f:22: df:8e:5c:8f:48:47:97:a2:51:d6:8e:25:ad:5f:b7:d2:23:89: b6:c7:ea:ef:ee:14:b6:21:da:e1:6d:c7:08:55:a5:7b:6c:d9: 07:9d:96:c6:0f:e2:6d:2d:cd:d2:fd:87:3e:43:f8:f8:79:42: 3b:75:b9:18:81:75:97:85:0b:a2:dd:64:e2:8e:ac:d1:14:3b: 0a:c2:7d:ff:10:0f:de:41:fa:b7:d4:36:59:58:b9:6e:2b:fa: c1:67:7a:e5:f4:71:a0:9a:b1:dd:55:76:aa:9c:ee:1e:78:61: f7:80:a0:2b:56:3a:ae:35:e9:e6:8b:77:70:45:6c:b1:64:10: 0e:51:eb:51:87:d0:20:b2:2b:77:11:3d:69:7f:a9:c6:6b:c5: 21:18:64:77:4a:ed:87:b6:9b:0d:37:94:f2:ab:a9:f5:5f:ea: 47:af:46:4b:86:97:88:58:74:b7:48:b0:05:85:3c:f7:ea:46: ec:64:33:e1:0f:1a:fa:dc:d6:be:98:a6:43:de:b3:5b:61:e7: ed:26:fb:af -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTlWOsL0GG6r3PndOCZ0WmhEAAKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTExMDQxMzE1MTlaFw0yNTExMDUxNTExMTlaMDMxMTAvBgNV BAMTKDg4OTI0RUI0RTgyOEE1MUVDNDQ4REJCNzdBRUVEMkE5Q0U0QTQzRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIrIldM29mDIJtySuvKcZ10I5F v+Z5AphGfYh7MzEu7G3ClIw18+xG6HaB0/9Hg/BKLvxaKO8wpjYrWgDBiID2H8WC Okjx7cFDtvMu40tv4omqg/7sxSEJw/Wtro239fDvmOiMoFQaSHGR5GHzxkDm+Os4 Ucae0frsySMrHqcMu2CX1zimTarOSfKv4LyInxotm/2I1RMa6n9cy/3zNPAMoOGd o/suFLXhtkz07lwfKIj7pEEus6hzDOHa4+m2r19nJNZezIYOeWPzb77Tk3477/lu Jw5ul2Cft4Xbl8Rt977pLuZ7T8bfRvrWFtXR2QBs8Hi8VEELmuEkAwIKXoybAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUiJJOtOgopR7ESNu3eu7Sqc5KQ/0wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYOjHw6eL52WkpG+PkIq zILaD3yx19TAb32rU8/gC1aH8fHNp3FtGVDsnVKHF0+PnyBVO48i345cj0hHl6JR 1o4lrV+30iOJtsfq7+4UtiHa4W3HCFWle2zZB52Wxg/ibS3N0v2HPkP4+HlCO3W5 GIF1l4ULot1k4o6s0RQ7CsJ9/xAP3kH6t9Q2WVi5biv6wWd65fRxoJqx3VV2qpzu Hnhh94CgK1Y6rjXp5ot3cEVssWQQDlHrUYfQILIrdxE9aX+pxmvFIRhkd0rth7ab DTeU8qup9V/qR69GS4aXiFh0t0iwBYU89+pG7GQz4Q8a+tzWvpimQ96zW2Hn7Sb7 rw== -----END CERTIFICATE-----Generated at Tue Nov 4 22:32:45 2025 by rpki-client