$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: vWRN8APVTfRfdWNae2Db6tWukac0oBuTnFNPrWC3uwc= Subject key identifier: CD:42:95:11:0B:40:95:D9:AC:17:21:7C:DA:08:4B:24:8E:73:BA:4C Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 29CB23F2CD62D31E27BDAA4AD8A27AAA30B6B535 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0476 Signing time: Sun 01 Mar 2026 05:23:55 +0000 Manifest this update: Sun 01 Mar 2026 05:18:55 +0000 Manifest next update: Mon 02 Mar 2026 07:38:55 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: AtIR2WBixwqUOp+tWO0YkBm9n2sBVRsNvGNIxZRaPPA=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:cb:23:f2:cd:62:d3:1e:27:bd:aa:4a:d8:a2:7a:aa:30:b6:b5:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Mar 1 05:18:55 2026 GMT Not After : Mar 2 07:38:55 2026 GMT Subject: CN=CD4295110B4095D9AC17217CDA084B248E73BA4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:33:73:d0:40:81:2a:37:c6:ce:10:89:ce: 5a:38:e2:d6:22:7a:9c:db:c2:ca:c9:13:0a:85:ac: 9c:58:42:be:ed:12:7e:6c:34:b2:5f:76:ce:5a:66: b6:c5:a7:3c:94:1a:87:33:4f:85:0c:da:96:e5:91: 34:f9:32:04:77:a7:1e:ee:50:e1:9d:53:13:da:7a: 2a:e1:fa:23:ca:fd:77:cb:00:6c:ff:44:ec:b7:1c: 5b:b6:1c:69:de:31:27:ef:22:49:bf:c7:3e:6a:82: 28:eb:08:ed:eb:df:70:d6:97:4f:b8:95:dc:a5:06: b5:78:9d:6a:d4:e6:8b:b2:02:79:bb:dd:12:73:18: 69:08:a0:53:c0:82:77:b2:ff:a9:aa:16:e5:7b:31: 91:2d:9c:33:e5:6c:4c:85:9a:45:ac:84:76:87:57: 40:4a:db:58:b5:5c:9d:bc:de:63:47:dd:5d:3d:41: ef:41:87:7b:09:24:4b:ba:89:d8:3e:3e:9d:58:5c: 8b:f4:8a:81:e2:f7:70:9c:82:8c:b0:89:83:ef:77: 52:df:a3:23:a6:da:8a:df:a1:2e:1e:5d:1e:9c:a4: 4e:bb:c4:55:7b:d7:69:0f:92:09:62:bd:dd:b0:98: 73:4f:15:f9:32:40:70:e7:21:49:eb:e4:5d:ab:e1: fe:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:42:95:11:0B:40:95:D9:AC:17:21:7C:DA:08:4B:24:8E:73:BA:4C X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a2:99:6b:0b:5d:18:cb:2d:2b:83:3e:5e:75:02:c9:a0:c1: e0:de:22:32:f9:34:9c:22:55:fa:40:83:60:f9:a3:d4:13:82: c0:92:f7:0a:db:00:9e:34:83:be:0b:ca:0b:ce:f9:67:b5:2b: 90:46:32:36:d7:c7:26:0c:8e:66:af:93:77:27:78:e2:da:db: 75:0f:29:a9:48:a7:14:11:71:3e:f1:ac:5b:c7:6a:e5:2d:8a: 6a:42:2c:e0:15:e2:44:c3:20:38:cd:2c:2f:1c:0d:4a:4c:71: e4:18:b8:9c:b1:0e:ff:73:12:24:44:f2:25:ba:4c:23:9d:a7: 8f:2d:e5:98:5f:39:4f:c3:7c:cb:c7:28:4f:de:b1:b9:20:76: 4c:69:54:94:a0:09:ca:32:9b:99:26:76:33:28:07:58:85:bb: 61:40:12:ef:1c:98:92:6e:53:2b:c2:5e:94:d3:cb:f6:9b:3d: 93:9a:a5:7d:16:d5:26:28:44:18:48:c6:8e:03:cc:e8:b4:d3: bb:30:44:5d:28:76:4b:30:cb:45:56:b5:32:cb:04:e7:fe:c4: 8e:f2:f2:ad:c9:c4:32:72:67:62:66:63:9a:dc:76:e0:c2:a7: 32:4b:38:e2:e8:67:81:e2:64:a1:d7:4e:5a:ec:c4:66:52:03: 59:48:27:b5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKcsj8s1i0x4nvapK2KJ6qjC2tTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAzMDEwNTE4NTVaFw0yNjAzMDIwNzM4NTVaMDMxMTAvBgNV BAMTKENENDI5NTExMEI0MDk1RDlBQzE3MjE3Q0RBMDg0QjI0OEU3M0JBNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WDNz0ECBKjfGzhCJzlo44tYi epzbwsrJEwqFrJxYQr7tEn5sNLJfds5aZrbFpzyUGoczT4UM2pblkTT5MgR3px7u UOGdUxPaeirh+iPK/XfLAGz/ROy3HFu2HGneMSfvIkm/xz5qgijrCO3r33DWl0+4 ldylBrV4nWrU5ouyAnm73RJzGGkIoFPAgney/6mqFuV7MZEtnDPlbEyFmkWshHaH V0BK21i1XJ283mNH3V09Qe9Bh3sJJEu6idg+Pp1YXIv0ioHi93CcgoywiYPvd1Lf oyOm2orfoS4eXR6cpE67xFV712kPkglivd2wmHNPFfkyQHDnIUnr5F2r4f5RAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzUKVEQtAldmsFyF82ghLJI5zukwwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqKZawtdGMstK4M+XnUC yaDB4N4iMvk0nCJV+kCDYPmj1BOCwJL3CtsAnjSDvgvKC875Z7UrkEYyNtfHJgyO Zq+Tdyd44trbdQ8pqUinFBFxPvGsW8dq5S2KakIs4BXiRMMgOM0sLxwNSkxx5Bi4 nLEO/3MSJETyJbpMI52njy3lmF85T8N8y8coT96xuSB2TGlUlKAJyjKbmSZ2MygH WIW7YUAS7xyYkm5TK8JelNPL9ps9k5qlfRbVJihEGEjGjgPM6LTTuzBEXSh2SzDL RVa1MssE5/7EjvLyrcnEMnJnYmZjmtx24MKnMks44uhngeJkoddOWuzEZlIDWUgn tQ== -----END CERTIFICATE-----Generated at Sun Mar 1 16:36:26 2026 by rpki-client