$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: CliyB/w+/T5X/XtXUaXpA0Rkz/LSgw/FhRGN58BlqMo= Subject key identifier: 0D:AC:D2:F2:42:49:3F:2E:F2:DA:25:A5:32:B6:C3:EE:24:71:DA:E4 Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 2633DD7E08CD5097B4BD977DFE862FEB0623ECF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 056F Signing time: Tue 12 May 2026 18:40:28 +0000 Manifest this update: Tue 12 May 2026 18:35:28 +0000 Manifest next update: Wed 13 May 2026 18:43:28 +0000 Files and hashes: 1: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: DU5pynjNIEEP2cTa3qAwphhWauxpRZzQL0RoFoNuEKY=) 2: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: N3uxyotZR6mL+g/2qSb3RG1V+6FJKt+67KL+C8Z+Ito=) 3: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: jli84J8TPjOOdHhktkVlx+DNU1JzPO7pUh03TSavr40=) 4: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: UzAk6y5i6qWN9IVFlhmoZTRjcqrtlajGQzrPjOGpriU=) 5: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: tf013dx+p23kvdhs/rrgl7jF0HCw4nuCcwBzDL5I7qE=) 6: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: aSFnF5KE0HZKqtoTzaJ7DbcDwDtYbFqkJ83NVi96KOw=) 7: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: zH/62I+GFjmbLT58TFoHTt4seVQwFkHzMOITLzNLWwM=) 8: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W19aTL73kDmq4VpxFcM/5jWE3HfVKXSDK7YuTWHNOTU=) 9: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: 6vwMaK76XK6X/pz6kTht3dh5BVylEQSRFW6TtRdFjeM=) 10: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: IYPeBc0njFQqxrAGs2OJRowmjEd1rlfv9Au+QQE5POo=) 11: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: RBjXMLj20ozhJFLy1WSIfc7wq7Cyuu+KQRQSUNSEpNg=) 12: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: BfjOFS0GoZTfjo/xHJvef2THjZzuBY75ujhpTamWG84=) 13: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 57eeXg7j+oXHRFh1XtK1fw7OXcY8daCIezixmAfkJcw=) 14: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: euJ5l1svQV4yeF07rYfON9i9pW05MgdKcVAsQcZCZgs=) 15: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: y6p5UjBQPUduUonTPaO5F0JtSCE/pxPOj2iYT5kNMsc=) 16: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: kGai0vt9wA/86vZjdukxOGnISfChmqA46SxZbgRXmkY=) 17: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: 9ZXjSWAp+j58GwfDtQ/mqL8ScvPvc/83HCdFvbTQt+M=) 18: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 0ETOHqFxfMol2LhEQMME+DAkxTkGy4ojRF4+9fieTEQ=) 19: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: kfugqwL5a8rKpk8fwdFIn7pS0iv55PmKrmdtLvO9AmM=) 20: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: QbwoBEnpKwFJwsOgE5BSkaanZZexGA6c5rVJbKDREKo=) 21: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: vuC6A6enLxPTXBOwLw9tBCemQGy3gdCRudl05Im1bw0=) 22: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: rx28ukAYIi7QdbkrNWf+57kJyDhNeE212LGEgmkq0Dk=) 23: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: m3qyMw/oJQApcKE+tTHmQHJByXjG/Fh99MnZmfiTNq8=) 24: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mgaSFuH9dwlQC9LQOF1dVYEFek9VIOTVBqz/2FqpDg4=) 25: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: T273PKOaqPzw+ef1HYHPIsAsFc8LZnkPiPIyWBRhHPE=) 26: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: EJG2SDzWzIGWns6pT4kVSDqRPMJTJNXkz97kFGgjHCI=) 27: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: TQCZQkzK1CqgemnKR/erluvTKMYq58W//DcXZ16FiAE=) 28: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 8yuN3MCh3uYcW+DbtvxPqGplTmthXGYCL3Ax7r80myw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 18:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:33:dd:7e:08:cd:50:97:b4:bd:97:7d:fe:86:2f:eb:06:23:ec:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: May 12 18:35:28 2026 GMT Not After : May 13 18:43:28 2026 GMT Subject: CN=0DACD2F242493F2EF2DA25A532B6C3EE2471DAE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2b:d2:f7:26:e1:df:43:7c:5c:d9:6e:d7:2a: 71:77:2a:5e:52:15:c7:d1:5a:64:ae:3e:94:63:37: 18:bd:c5:73:fa:5f:88:02:d6:ef:39:ca:fc:17:4b: 81:5d:c0:40:44:7e:fc:11:83:7f:81:38:82:c9:8f: 4c:89:5a:3c:43:07:d6:ac:00:5f:b4:05:ae:83:5e: 49:6f:6d:a1:ba:84:97:1a:9e:d8:50:dc:83:50:4f: ec:01:ce:20:d5:51:b2:29:ed:7b:65:49:14:79:db: f3:a3:83:01:8c:a2:dd:fb:a7:9d:7f:f9:81:73:1e: 6e:6e:0c:2b:03:47:30:1d:10:83:0c:db:5a:fb:b2: 3a:f7:92:ba:3a:15:be:72:fd:a8:5f:91:1f:55:0a: 1f:2e:56:40:28:7b:5b:89:0f:32:01:2d:32:7f:5a: ec:fa:51:ab:72:2f:d8:51:d7:55:ce:79:d7:44:6c: 40:3e:37:c3:86:44:8a:34:dd:47:99:14:dd:e1:0a: 19:6b:ab:c3:96:e0:ed:6f:c8:79:69:b3:11:cc:e4: 1f:f3:c9:2a:e4:04:3f:99:b9:c2:fd:36:f6:65:9d: 48:41:c9:7d:8e:8c:2f:e2:f9:e0:66:db:92:04:48: 50:ed:0b:82:76:9b:42:05:82:e5:aa:9f:ca:99:2c: 87:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AC:D2:F2:42:49:3F:2E:F2:DA:25:A5:32:B6:C3:EE:24:71:DA:E4 X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:39:65:a2:90:7d:32:69:bc:a8:4b:21:ad:77:3f:10:cf:95: 47:68:93:41:f0:b9:6b:f7:49:59:cd:c3:8e:7f:4d:cf:c9:f9: 00:1c:22:b2:b7:12:3c:73:aa:17:6f:72:66:0a:05:06:cc:13: 6d:37:1f:b0:f7:4b:c8:44:e1:c0:1c:1e:ef:8a:25:33:65:fa: cc:ec:46:9e:99:06:f7:5c:78:8e:a7:e6:1b:51:cc:ac:dc:ac: 46:9d:ac:86:0c:ac:20:91:13:49:24:fa:81:3b:9d:70:1e:81: 48:1a:26:f0:24:1c:51:3e:34:6b:51:50:6a:a9:43:ef:6e:5c: 9b:c1:b5:81:68:d1:f8:6b:21:35:50:fe:0c:0b:09:2c:9f:2f: 3e:a8:ca:81:4b:ab:4f:3f:32:47:ff:e4:1e:b3:38:b7:5a:6f: 47:f7:48:be:19:7b:61:e8:26:1e:ab:14:16:50:ab:fb:43:dc: 90:18:5c:05:00:46:7d:84:c1:47:e7:1f:3f:f5:d6:ae:76:63: 6d:f7:86:30:e5:63:e6:07:83:88:5a:b8:35:3c:28:36:23:03: 89:65:27:9a:88:18:df:1d:b3:88:e7:40:0d:54:6a:78:cd:52: 1b:07:80:ab:e7:f1:4c:5c:4d:08:d9:4e:66:22:84:c6:f1:69: ae:d8:66:36 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJjPdfgjNUJe0vZd9/oYv6wYj7PEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNjA1MTIxODM1MjhaFw0yNjA1MTMxODQzMjhaMDMxMTAvBgNV BAMTKDBEQUNEMkYyNDI0OTNGMkVGMkRBMjVBNTMyQjZDM0VFMjQ3MURBRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRK9L3JuHfQ3xc2W7XKnF3Kl5S FcfRWmSuPpRjNxi9xXP6X4gC1u85yvwXS4FdwEBEfvwRg3+BOILJj0yJWjxDB9as AF+0Ba6DXklvbaG6hJcanthQ3INQT+wBziDVUbIp7XtlSRR52/OjgwGMot37p51/ +YFzHm5uDCsDRzAdEIMM21r7sjr3kro6Fb5y/ahfkR9VCh8uVkAoe1uJDzIBLTJ/ Wuz6UatyL9hR11XOeddEbEA+N8OGRIo03UeZFN3hChlrq8OW4O1vyHlpsxHM5B/z ySrkBD+ZucL9NvZlnUhByX2OjC/i+eBm25IESFDtC4J2m0IFguWqn8qZLIfJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDazS8kJJPy7y2iWlMrbD7iRx2uQwHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTllopB9Mmm8qEshrXc/ EM+VR2iTQfC5a/dJWc3Djn9Nz8n5ABwisrcSPHOqF29yZgoFBswTbTcfsPdLyETh wBwe74olM2X6zOxGnpkG91x4jqfmG1HMrNysRp2shgysIJETSST6gTudcB6BSBom 8CQcUT40a1FQaqlD725cm8G1gWjR+GshNVD+DAsJLJ8vPqjKgUurTz8yR//kHrM4 t1pvR/dIvhl7YegmHqsUFlCr+0PckBhcBQBGfYTBR+cfP/XWrnZjbfeGMOVj5geD iFq4NTwoNiMDiWUnmogY3x2ziOdADVRqeM1SGweAq+fxTFxNCNlOZiKExvFprthm Ng== -----END CERTIFICATE-----Generated at Wed May 13 02:25:06 2026 by rpki-client