$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json) Hash identifier: 8wCo0Ysgj986Yru3LkumxslkXTzjggzJgXjaMZjOCBE= Subject key identifier: 5E:9C:5B:CE:54:32:AD:79:9D:95:05:62:5D:EE:DB:EE:99:BC:31:55 Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Certificate serial: 65872431AED7F201D9F337E97C37D5E25B3E6EA4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft Manifest number: 0258 Signing time: Tue 12 May 2026 17:08:11 +0000 Manifest this update: Tue 12 May 2026 17:03:11 +0000 Manifest next update: Wed 13 May 2026 20:34:11 +0000 Files and hashes: 1: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: OL2FI/vEULh8DherFY9tNqTnSfk4+yakFsp9k/Vr34s=) 2: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: OqGaVqVCLNSInBlm8X6eu0kCi8tEf6Tx9W+YlK/qfuw=) 3: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: tIRLcVg7UrhNFhqoUSzyKAfDY3qvSoSmXd0Y8F0kvUs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:87:24:31:ae:d7:f2:01:d9:f3:37:e9:7c:37:d5:e2:5b:3e:6e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Validity Not Before: May 12 17:03:11 2026 GMT Not After : May 13 20:34:11 2026 GMT Subject: CN=5E9C5BCE5432AD799D9505625DEEDBEE99BC3155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:71:c8:90:2c:bc:25:c2:f8:b8:c6:c7:87:7c: 47:3c:96:ff:d1:95:62:1f:cb:74:9a:27:1d:98:fa: 00:50:9d:59:d1:e5:7a:82:4a:db:88:74:fb:a5:b5: 35:b1:cd:c5:3f:9e:0c:f5:5f:95:7a:84:1d:fd:c2: 9a:3f:d6:71:4e:c6:42:56:0d:d6:99:ca:24:7a:5a: c8:a9:88:3d:51:96:47:09:ef:b4:c9:4e:9a:65:9e: 57:72:de:9d:fc:d9:6d:69:85:65:74:21:64:7a:aa: 4c:d8:d2:6b:42:91:af:b3:00:f1:d9:40:66:1d:46: 9b:ee:35:e0:06:9a:63:9b:69:44:a1:9a:fb:88:3e: d5:5b:06:03:17:8e:95:92:4b:51:a6:9f:98:c8:18: ba:74:3c:8c:c6:b8:f6:1e:5f:07:17:04:74:61:be: 62:b3:93:3d:6b:30:49:d3:04:72:43:f0:af:83:a4: 21:15:00:e2:56:d4:6c:a1:90:95:30:56:e7:3d:01: fe:28:c6:2b:d7:fa:19:6e:ac:f2:51:df:7d:56:ba: b5:bd:22:cf:75:1b:cc:33:6a:48:0c:d1:8d:2a:7a: b8:ac:84:69:a1:63:d6:6f:e1:18:44:a8:ad:bb:b9: 8d:bd:97:1a:70:d3:2f:4f:f7:bd:6a:c1:c5:37:a3: 6d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9C:5B:CE:54:32:AD:79:9D:95:05:62:5D:EE:DB:EE:99:BC:31:55 X509v3 Authority Key Identifier: keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:7a:4c:bb:61:49:f1:1d:6f:8b:a4:47:7d:6c:cc:46:45:e9: d4:6f:48:08:11:e4:c9:39:fb:12:d8:5b:d4:bb:26:d2:f7:a4: f2:33:69:be:54:90:5b:84:6f:0a:52:21:9e:fe:1f:33:0a:01: ac:16:d3:b6:da:f9:f7:52:78:24:5f:ef:ff:4f:70:d5:f8:9e: 70:77:a4:c0:ad:bf:72:dd:4a:b4:4f:6c:20:3c:db:bc:0e:8a: 28:f3:93:8b:82:61:88:ab:6d:f3:b2:c9:2e:54:a3:0b:5f:34: e6:2a:0c:7a:50:4a:23:c7:77:64:81:c2:3f:b4:0a:2a:d2:a1: 19:4d:98:30:6a:0d:97:55:9e:4b:63:72:0f:29:e4:05:6e:45: b2:d2:1b:61:b6:ca:84:6d:b8:7e:80:8e:30:3d:7b:2d:36:42: 6a:65:8a:dc:63:75:71:68:44:3e:e8:47:95:92:b5:9c:01:1c: de:05:b6:88:d4:0c:0c:5b:61:57:0b:4a:3e:4a:cf:4c:3f:61: fe:b3:fb:89:29:51:d4:ae:63:b7:e7:e8:d4:33:34:67:b3:22: 55:c0:94:9a:7f:11:5f:dc:22:fb:10:48:bd:05:e2:df:83:c8: dd:34:47:66:29:a8:b6:21:57:46:25:2e:9a:1e:27:b1:10:dc: 84:a9:be:a2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZYckMa7X8gHZ8zfpfDfV4ls+bqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUw RjgxOTZFQjAeFw0yNjA1MTIxNzAzMTFaFw0yNjA1MTMyMDM0MTFaMDMxMTAvBgNV BAMTKDVFOUM1QkNFNTQzMkFENzk5RDk1MDU2MjVERUVEQkVFOTlCQzMxNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRcciQLLwlwvi4xseHfEc8lv/R lWIfy3SaJx2Y+gBQnVnR5XqCStuIdPultTWxzcU/ngz1X5V6hB39wpo/1nFOxkJW DdaZyiR6WsipiD1RlkcJ77TJTpplnldy3p382W1phWV0IWR6qkzY0mtCka+zAPHZ QGYdRpvuNeAGmmObaUShmvuIPtVbBgMXjpWSS1Gmn5jIGLp0PIzGuPYeXwcXBHRh vmKzkz1rMEnTBHJD8K+DpCEVAOJW1GyhkJUwVuc9Af4oxivX+hlurPJR331WurW9 Is91G8wzakgM0Y0qerishGmhY9Zv4RhEqK27uY29lxpw0y9P971qwcU3o205AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXpxbzlQyrXmdlQViXe7b7pm8MVUwHwYDVR0j BBgwFoAUE+GpmPd9fB/ylVwLaI/r/g+BluswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFm YWIyLzEvMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUwRjgxOTZFQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xM0UxQTk5OEY3N0Q3QzFGRjI5NTVDMEI2 ODhGRUJGRTBGODE5NkVCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAxNTc2NDdjLTkxZDYtNGEwNC04YTkxLWQxNTM4NWQxZmFiMi8xLzEzRTFBOTk4 Rjc3RDdDMUZGMjk1NUMwQjY4OEZFQkZFMEY4MTk2RUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbeky7 YUnxHW+LpEd9bMxGRenUb0gIEeTJOfsS2FvUuybS96TyM2m+VJBbhG8KUiGe/h8z CgGsFtO22vn3UngkX+//T3DV+J5wd6TArb9y3Uq0T2wgPNu8Dooo85OLgmGIq23z sskuVKMLXzTmKgx6UEojx3dkgcI/tAoq0qEZTZgwag2XVZ5LY3IPKeQFbkWy0hth tsqEbbh+gI4wPXstNkJqZYrcY3VxaEQ+6EeVkrWcARzeBbaI1AwMW2FXC0o+Ss9M P2H+s/uJKVHUrmO35+jUMzRnsyJVwJSafxFf3CL7EEi9BeLfg8jdNEdmKai2IVdG JS6aHiexENyEqb6i -----END CERTIFICATE-----Generated at Wed May 13 07:18:57 2026 by rpki-client