$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft File: 1E74494683D8D2A4E029AAD4573928D2A55FA411.mft (raw, json) Hash identifier: YWNc3z2pxUcmZFMtqdFZ2PgYAMaYUr2uJJLDUUKSxCs= Subject key identifier: C8:6A:98:7D:7D:77:D4:F6:60:1C:D8:42:EA:6E:08:7E:1A:2D:07:32 Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 Certificate issuer: /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Certificate serial: 0D95E3B3EAE21E49FD9F30C453AF163D1ECD04D6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft Manifest number: 22 Signing time: Tue 12 May 2026 23:50:35 +0000 Manifest this update: Tue 12 May 2026 23:45:35 +0000 Manifest next update: Thu 14 May 2026 01:25:35 +0000 Files and hashes: 1: 326131333a633863343a313030303a3a2f33362d3438203d3e20323134373632.roa (hash: JofSJio1ZSiKcgoMirJLUr+PbzVMXTI571DpwJP8INM=) 2: F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer (hash: QeIsnFtF/EdZr3eDL8K0OYPSz/bi5xfqK6RvjhvtAeE=) 3: 326131333a633863343a3a2f33362d3438203d3e20323035393431.roa (hash: MHTbuB6+g+ci+W3xhK1wq8aUoLgunvms/wXlaRYr9A4=) 4: 326131333a633863343a3a2f33322d3332203d3e2030.roa (hash: gSZ+pcHkiMWO1K79/Mncci1lQFYMKmKkgDaeUtpna0Y=) 5: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer (hash: qnGfja2gp1Dt5eiLazr0XeABKN1iXqNbT2nfPewlL3k=) 6: 1E74494683D8D2A4E029AAD4573928D2A55FA411.crl (hash: nIKKAs/pMT0NfmA5JpZgMFj+1doq2H3CsTszQmR7yVw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 13:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:95:e3:b3:ea:e2:1e:49:fd:9f:30:c4:53:af:16:3d:1e:cd:04:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Validity Not Before: May 12 23:45:35 2026 GMT Not After : May 14 01:25:35 2026 GMT Subject: CN=C86A987D7D77D4F6601CD842EA6E087E1A2D0732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:07:8a:84:bd:70:cd:42:d5:7a:d0:1a:52:46: dd:08:4c:cc:0c:16:4c:37:9b:3f:7b:0c:5d:4c:88: 01:22:e4:3b:3e:1a:cf:24:94:8c:83:01:e9:42:d7: 56:43:a3:71:4a:61:30:6f:59:d8:10:40:e4:a7:81: d3:0f:11:10:15:81:2b:49:46:3d:eb:1c:b4:be:df: 35:b3:d9:b6:bf:27:e1:8e:da:a3:55:19:d7:ad:77: d5:d0:7f:11:8f:8e:cd:77:49:34:fe:dd:6d:60:92: 00:c3:4b:b8:54:b5:8a:81:f2:08:84:67:25:d8:f0: 11:41:5b:97:87:e1:34:d6:d6:41:85:68:56:06:e7: d0:62:87:b9:9c:79:15:73:20:c1:97:f5:42:92:c1: 3d:96:98:6a:b2:64:98:8d:35:6d:fc:d1:3d:63:a1: e1:9b:c4:b6:84:be:4d:8d:18:5a:0d:9d:d6:27:3d: f2:db:92:27:0c:7e:a4:4a:21:74:74:4e:08:3c:b5: 58:58:16:72:c5:55:d7:07:c0:54:68:c3:9d:e7:c8: 13:3d:9c:51:c9:68:fd:07:6e:f0:6a:f8:be:20:98: b6:0d:54:2e:48:43:49:90:80:04:31:54:66:f8:29: c2:28:64:7f:22:79:7f:fe:d1:7d:99:4c:36:ec:aa: 41:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6A:98:7D:7D:77:D4:F6:60:1C:D8:42:EA:6E:08:7E:1A:2D:07:32 X509v3 Authority Key Identifier: keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:52:05:54:2a:95:e8:8d:62:70:e4:8a:11:67:27:7e:0d:01: ec:0e:a8:d6:17:55:57:ff:31:18:ea:e5:25:d1:38:f9:10:a3: a1:19:ff:07:67:24:40:b1:39:f3:57:83:ab:82:c9:6f:c7:19: 0a:87:17:1b:23:70:eb:f6:dc:3e:0a:4c:60:40:c2:d2:be:cd: 03:63:59:72:9a:cf:8a:fd:3b:d3:0d:91:5d:f0:19:ea:28:a8: d3:26:1f:fd:d4:44:42:91:ba:d0:28:98:16:52:ac:cb:10:fc: 55:45:27:38:7b:ea:1d:62:68:d9:17:f0:70:3e:a0:1b:91:e7: a7:bf:7d:c0:25:f1:ec:95:72:a3:c1:29:8a:e0:05:da:a7:85: 65:4b:c8:e2:69:ff:2c:15:89:f9:1c:d2:51:66:ce:c0:57:e4: 31:2f:89:2a:8c:1c:2d:bd:0e:02:4d:83:3c:7b:dd:72:da:ec: e9:d6:13:59:c2:fe:ec:a0:4a:65:6a:1d:56:b7:7d:21:49:a6: 06:15:d2:92:26:a7:a6:07:42:b6:1d:98:9a:9c:c6:21:7c:c4: ea:28:8e:ec:03:aa:67:dd:46:ff:67:8e:eb:ef:61:75:d0:83: ed:d5:bc:26:cc:58:6c:f9:cb:94:6b:b1:9a:bf:cf:4c:f7:93: ba:e3:e0:33 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDZXjs+riHkn9nzDEU68WPR7NBNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB NTVGQTQxMTAeFw0yNjA1MTIyMzQ1MzVaFw0yNjA1MTQwMTI1MzVaMDMxMTAvBgNV BAMTKEM4NkE5ODdEN0Q3N0Q0RjY2MDFDRDg0MkVBNkUwODdFMUEyRDA3MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHB4qEvXDNQtV60BpSRt0ITMwM Fkw3mz97DF1MiAEi5Ds+Gs8klIyDAelC11ZDo3FKYTBvWdgQQOSngdMPERAVgStJ Rj3rHLS+3zWz2ba/J+GO2qNVGdetd9XQfxGPjs13STT+3W1gkgDDS7hUtYqB8giE ZyXY8BFBW5eH4TTW1kGFaFYG59Bih7mceRVzIMGX9UKSwT2WmGqyZJiNNW380T1j oeGbxLaEvk2NGFoNndYnPfLbkicMfqRKIXR0Tgg8tVhYFnLFVdcHwFRow53nyBM9 nFHJaP0HbvBq+L4gmLYNVC5IQ0mQgAQxVGb4KcIoZH8ieX/+0X2ZTDbsqkFRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUyGqYfX131PZgHNhC6m4IfhotBzIwHwYDVR0j BBgwFoAUHnRJRoPY0qTgKarUVzko0qVfpBEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5 NzVjLzEvMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJBNTVGQTQxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4 OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1 NzM5MjhEMkE1NUZBNDExLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAwMmY4ZWU2LWFiZTctNGFlOC05NjRjLTc4OGJiOThjOTc1Yy8xLzFFNzQ0OTQ2 ODNEOEQyQTRFMDI5QUFENDU3MzkyOEQyQTU1RkE0MTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjUgVU KpXojWJw5IoRZyd+DQHsDqjWF1VX/zEY6uUl0Tj5EKOhGf8HZyRAsTnzV4Orgslv xxkKhxcbI3Dr9tw+CkxgQMLSvs0DY1lyms+K/TvTDZFd8BnqKKjTJh/91ERCkbrQ KJgWUqzLEPxVRSc4e+odYmjZF/BwPqAbkeenv33AJfHslXKjwSmK4AXap4VlS8ji af8sFYn5HNJRZs7AV+QxL4kqjBwtvQ4CTYM8e91y2uzp1hNZwv7soEplah1Wt30h SaYGFdKSJqemB0K2HZianMYhfMTqKI7sA6pn3Ub/Z47r72F10IPt1bwmzFhs+cuU a7Gav89M95O64+Az -----END CERTIFICATE-----Generated at Wed May 13 05:36:08 2026 by rpki-client