$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft File: 140CF895225100CF571959173341D92070FF6E7C.mft (raw, json) Hash identifier: eFFocoEnFGladHeiq+7n5KeD2Q+3c9CIj20gA5m5ttY= Subject key identifier: E3:B5:8C:FF:CC:D3:C3:A9:60:4A:B2:EA:06:F2:4F:2E:37:E5:22:57 Authority key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Certificate issuer: /CN=140CF895225100CF571959173341D92070FF6E7C Certificate serial: 4CBAF3E4357C5EECAE40150A7275E741E9568534 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft Manifest number: BB Signing time: Tue 12 May 2026 13:04:11 +0000 Manifest this update: Tue 12 May 2026 12:59:11 +0000 Manifest next update: Wed 13 May 2026 14:10:11 +0000 Files and hashes: 1: 140CF895225100CF571959173341D92070FF6E7C.crl (hash: u1GSUGR5rvjOsvV7SdNgl27ZjEPU8R3UCrWvnPQTrw0=) 2: 326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa (hash: VyqY9yrEjpVeGa7fC0EnkjbydVqfbidJLnALhbzwu3k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ba:f3:e4:35:7c:5e:ec:ae:40:15:0a:72:75:e7:41:e9:56:85:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140CF895225100CF571959173341D92070FF6E7C Validity Not Before: May 12 12:59:11 2026 GMT Not After : May 13 14:10:11 2026 GMT Subject: CN=E3B58CFFCCD3C3A9604AB2EA06F24F2E37E52257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:07:bd:fe:e4:98:d7:b6:79:2a:4f:24:01:72: 4b:86:c5:b8:7e:7f:44:18:5f:dc:32:01:c7:b8:13: b1:47:28:f9:7d:a1:67:92:8f:2a:ed:91:83:96:3b: 5e:a9:41:af:00:a1:a1:9f:a7:97:ee:ab:57:ee:56: 71:b9:66:4c:61:25:30:eb:03:53:1e:88:16:4d:98: 39:3b:4e:40:a7:71:c3:e4:27:66:72:29:b3:32:73: a2:7d:36:f6:af:d8:98:b1:f0:3c:30:43:94:89:cf: 1d:92:92:b7:f1:ee:98:a6:8e:48:99:6b:eb:ec:9d: f6:a3:92:ea:98:b4:cc:ec:26:12:3f:34:cf:90:b5: 9e:f3:04:39:d6:71:56:08:a2:7c:66:e4:97:77:81: ea:e9:32:fb:a0:65:36:7f:34:31:24:10:9e:bc:de: c7:5a:b5:87:0e:d5:35:4a:c9:c9:46:8e:1c:60:e9: f1:68:05:29:05:4f:1c:53:6d:7b:74:14:ca:d3:b7: 42:35:ce:0e:e9:7c:4e:82:00:9f:af:73:3a:4f:15: 3a:18:e7:f9:2f:a9:6a:d8:4d:5d:dc:17:9d:6a:32: f6:64:5d:e8:d9:b6:32:6a:93:eb:04:e0:16:d6:a7: 6c:03:15:47:0b:dc:02:33:45:b0:9f:15:c7:16:27: 95:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B5:8C:FF:CC:D3:C3:A9:60:4A:B2:EA:06:F2:4F:2E:37:E5:22:57 X509v3 Authority Key Identifier: keyid:14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:b8:a4:26:97:58:d7:66:49:a0:d7:0a:28:89:99:b8:22:25: e2:00:ab:1e:40:82:7f:de:30:2a:72:af:7d:5d:37:c3:4c:9c: 10:af:84:8d:9d:3b:9f:35:db:db:46:a2:af:ac:be:83:46:5b: 8e:e3:73:3b:fb:ef:d7:63:5a:54:cc:aa:84:75:58:3f:af:3a: c1:1b:d6:0c:ff:8b:a4:b6:e5:0a:60:48:4a:a1:69:95:ad:5c: b0:2f:7b:ef:d2:dd:5d:13:c1:76:88:0e:33:82:35:cd:e1:f8: 83:fc:e6:6b:95:a9:15:19:c0:e1:82:b9:c0:2d:ee:eb:61:cf: 58:21:ac:b9:a0:69:b0:3c:20:3b:2c:c6:70:1c:1e:89:8f:29: 03:fe:84:ab:0a:28:78:01:8e:ef:a2:1a:e3:bc:58:cb:6c:aa: a1:cf:d4:94:1e:bc:16:8c:3d:aa:30:25:70:ff:1d:d4:17:b9: 8b:58:eb:1d:2d:66:b7:41:26:c7:f3:7f:8b:2b:f4:e1:8f:c7: 53:87:d9:b0:a0:3c:b5:18:0a:3b:94:9e:f1:a6:21:55:56:31: 50:e7:f8:b3:b9:ac:94:59:cd:68:3e:76:24:e1:db:f7:68:d2: 59:9e:94:f6:8a:fa:df:be:84:4c:89:1a:39:f4:4c:0e:1c:31: 31:e1:a1:b2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTLrz5DV8XuyuQBUKcnXnQelWhTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3 MEZGNkU3QzAeFw0yNjA1MTIxMjU5MTFaFw0yNjA1MTMxNDEwMTFaMDMxMTAvBgNV BAMTKEUzQjU4Q0ZGQ0NEM0MzQTk2MDRBQjJFQTA2RjI0RjJFMzdFNTIyNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3B73+5JjXtnkqTyQBckuGxbh+ f0QYX9wyAce4E7FHKPl9oWeSjyrtkYOWO16pQa8AoaGfp5fuq1fuVnG5ZkxhJTDr A1MeiBZNmDk7TkCnccPkJ2ZyKbMyc6J9Nvav2Jix8DwwQ5SJzx2Skrfx7pimjkiZ a+vsnfajkuqYtMzsJhI/NM+QtZ7zBDnWcVYIonxm5Jd3gerpMvugZTZ/NDEkEJ68 3sdatYcO1TVKyclGjhxg6fFoBSkFTxxTbXt0FMrTt0I1zg7pfE6CAJ+vczpPFToY 5/kvqWrYTV3cF51qMvZkXejZtjJqk+sE4BbWp2wDFUcL3AIzRbCfFccWJ5WrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU47WM/8zTw6lgSrLqBvJPLjflIlcwHwYDVR0j BBgwFoAUFAz4lSJRAM9XGVkXM0HZIHD/bnwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzEvMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3MEZGNkU3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8xNDBDRjg5NTIyNTEwMENGNTcxOTU5MTcz MzQxRDkyMDcwRkY2RTdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8xLzE0MENGODk1 MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBGRjZFN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAEuKQm l1jXZkmg1wooiZm4IiXiAKseQIJ/3jAqcq99XTfDTJwQr4SNnTufNdvbRqKvrL6D RluO43M7++/XY1pUzKqEdVg/rzrBG9YM/4uktuUKYEhKoWmVrVywL3vv0t1dE8F2 iA4zgjXN4fiD/OZrlakVGcDhgrnALe7rYc9YIay5oGmwPCA7LMZwHB6JjykD/oSr Cih4AY7vohrjvFjLbKqhz9SUHrwWjD2qMCVw/x3UF7mLWOsdLWa3QSbH83+LK/Th j8dTh9mwoDy1GAo7lJ7xpiFVVjFQ5/izuayUWc1oPnYk4dv3aNJZnpT2ivrfvoRM iRo59EwOHDEx4aGy -----END CERTIFICATE-----Generated at Wed May 13 08:38:57 2026 by rpki-client