$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: erLAFxUzZvloahh9nZkG4gG8CuCD7JdYJG3ccF9V5xU= Subject key identifier: 06:CE:6F:5C:7D:A7:29:61:E5:77:26:5C:80:D1:13:E5:56:4B:C1:9E Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 65185A5C86611DF8185C9EA1082532C9E1C2E8B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0500 Signing time: Fri 12 Jun 2026 21:05:23 +0000 Manifest this update: Fri 12 Jun 2026 21:00:23 +0000 Manifest next update: Sat 13 Jun 2026 22:38:23 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: GfMk+s7+T8M+zIWaMSe6YslBH2Shy/84hDEvzHAvEkU=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:18:5a:5c:86:61:1d:f8:18:5c:9e:a1:08:25:32:c9:e1:c2:e8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 12 21:00:23 2026 GMT Not After : Jun 13 22:38:23 2026 GMT Subject: CN=06CE6F5C7DA72961E577265C80D113E5564BC19E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b2:16:d3:a2:4e:ac:75:3a:fd:13:cf:22:2a: 24:9b:9b:48:7f:b8:2d:18:8c:07:f4:dc:21:4c:4b: 96:06:a7:02:ab:18:7e:5c:3c:cf:e5:bc:37:c4:41: 54:ac:1b:89:9a:a7:0f:e9:c5:76:1b:f0:8b:40:96: 21:46:7f:aa:2a:a9:ae:ca:6f:3e:ae:eb:c5:94:7a: 35:18:41:cc:27:e1:39:84:5b:35:87:8d:91:38:7d: 79:49:33:1e:ce:55:9b:00:18:66:46:91:ee:3c:1d: e7:43:88:fa:1e:09:33:04:01:87:a4:e1:bc:0d:ff: 07:66:f8:1d:80:d0:be:fd:32:b6:c0:29:3c:5d:32: c2:63:7b:38:15:16:8a:0d:f2:10:1d:2c:bb:35:1e: ec:5d:4e:69:c8:a6:3f:76:87:84:6a:b9:83:08:f8: f6:68:ed:0e:8f:92:b5:d3:64:0e:56:0b:1a:8f:14: c4:9e:dd:d4:f2:c8:73:d6:de:e7:0f:41:56:4c:ae: 6f:12:44:cc:d0:7c:05:88:30:62:44:f8:b7:13:35: 54:e4:e2:cb:cd:69:8c:e9:06:57:ac:43:51:11:39: 0d:cc:d9:de:6b:49:e5:88:5d:e6:c8:34:d8:8a:b5: 24:f2:cc:d2:14:40:9f:d3:ce:b8:fc:1b:0b:0f:75: 0d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CE:6F:5C:7D:A7:29:61:E5:77:26:5C:80:D1:13:E5:56:4B:C1:9E X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3e:bd:e2:38:5b:b9:09:ac:8b:7c:39:f0:c5:4e:f1:48:54: 52:4b:d6:46:1e:2e:83:47:ff:cf:c2:c2:82:b3:52:82:8a:58: 42:93:88:01:40:33:9e:c5:dd:52:9f:8c:5e:37:3a:2c:25:ba: bc:af:95:5d:01:15:8c:d6:11:13:b0:5e:e7:1a:ca:c8:a5:a6: 8b:67:53:49:c8:59:25:4f:56:dc:3a:0f:3d:d5:07:c4:72:07: 7a:4f:84:71:fd:21:b5:53:d6:40:33:bd:1b:10:3a:38:c0:37: 67:1e:a6:0c:34:f8:84:48:95:d3:91:e1:59:51:6f:35:08:93: d7:fb:f8:be:2c:35:f8:99:7b:1c:48:13:18:08:1a:10:5b:ad: e9:f0:7a:10:68:20:d9:86:fa:5b:50:2f:8a:39:c3:3b:1f:eb: 7c:1b:4c:d9:bb:5f:94:1e:33:4f:30:06:be:82:f2:97:2d:ed: e2:19:c5:40:01:3a:7c:65:c9:bd:97:d5:ae:6a:0b:08:4a:68: 45:88:f9:6a:e8:82:9b:a1:75:e2:57:22:a2:b4:fa:49:cf:4b: a6:6b:3f:fc:5a:d0:6b:cc:61:59:a1:04:77:be:f2:26:27:e3: 40:89:2f:d9:35:03:5c:84:bc:b2:6d:62:10:85:c0:89:35:1d: 90:e2:03:20 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZRhaXIZhHfgYXJ6hCCUyyeHC6LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjA2MTIyMTAwMjNaFw0yNjA2MTMyMjM4MjNaMDMxMTAvBgNV BAMTKDA2Q0U2RjVDN0RBNzI5NjFFNTc3MjY1QzgwRDExM0U1NTY0QkMxOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfshbTok6sdTr9E88iKiSbm0h/ uC0YjAf03CFMS5YGpwKrGH5cPM/lvDfEQVSsG4mapw/pxXYb8ItAliFGf6oqqa7K bz6u68WUejUYQcwn4TmEWzWHjZE4fXlJMx7OVZsAGGZGke48HedDiPoeCTMEAYek 4bwN/wdm+B2A0L79MrbAKTxdMsJjezgVFooN8hAdLLs1HuxdTmnIpj92h4RquYMI +PZo7Q6PkrXTZA5WCxqPFMSe3dTyyHPW3ucPQVZMrm8SRMzQfAWIMGJE+LcTNVTk 4svNaYzpBlesQ1EROQ3M2d5rSeWIXebINNiKtSTyzNIUQJ/Tzrj8GwsPdQ0fAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBs5vXH2nKWHldyZcgNET5VZLwZ4wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALz694jhbuQmsi3w58MVO 8UhUUkvWRh4ug0f/z8LCgrNSgopYQpOIAUAznsXdUp+MXjc6LCW6vK+VXQEVjNYR E7Be5xrKyKWmi2dTSchZJU9W3DoPPdUHxHIHek+Ecf0htVPWQDO9GxA6OMA3Zx6m DDT4hEiV05HhWVFvNQiT1/v4viw1+Jl7HEgTGAgaEFut6fB6EGgg2Yb6W1AvijnD Ox/rfBtM2btflB4zTzAGvoLyly3t4hnFQAE6fGXJvZfVrmoLCEpoRYj5auiCm6F1 4lciorT6Sc9Lpms//FrQa8xhWaEEd77yJifjQIkv2TUDXIS8sm1iEIXAiTUdkOID IA== -----END CERTIFICATE-----Generated at Sat Jun 13 11:22:05 2026 by rpki-client