$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: 77Fq/37R6kN6Bce0deFqILrgj+SG5nVj8SCQO2UsEto= Subject key identifier: 85:11:18:38:55:0B:34:DD:B4:F1:03:03:CD:06:49:B4:37:D1:01:93 Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 40CBF755D933B0C7E0ACDC74BAE997FD42DE349F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 027D Signing time: Tue 12 May 2026 15:27:30 +0000 Manifest this update: Tue 12 May 2026 15:22:30 +0000 Manifest next update: Wed 13 May 2026 18:54:30 +0000 Files and hashes: 1: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: PpctkXb5KUjo1ZozH4ZG/Vu6RAiqzknnMgLdpVk1Gts=) 2: 326130663a383563313a3339303a3a2f34382d3438203d3e20313331363330.roa (hash: SDgvWVR9BK4ArLiN2y0FdP04j29HfEBVHHfa70zlSZU=) 3: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: IjlKnUPuQQb0G9RvT3gQOjGxL3qSBV9E3P9VuOLEp4Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 18:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:cb:f7:55:d9:33:b0:c7:e0:ac:dc:74:ba:e9:97:fd:42:de:34:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: May 12 15:22:30 2026 GMT Not After : May 13 18:54:30 2026 GMT Subject: CN=85111838550B34DDB4F10303CD0649B437D10193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:92:94:9d:0a:04:85:d9:13:99:d2:47:88:d4: 71:94:7d:27:f4:56:91:e0:95:af:b6:ce:40:fe:7d: 78:c1:2a:1a:56:bc:80:77:a7:3d:d0:3b:d3:23:0b: df:c2:65:a8:0a:44:1f:fb:15:c2:60:c8:65:b3:c9: 24:f4:b6:d9:75:df:47:0d:95:ee:3e:51:8c:bd:03: 5c:13:9c:d4:ce:68:96:55:76:5f:a9:4c:2e:2b:24: 2d:68:f9:9f:a0:b6:16:51:cb:67:9f:a4:bf:ec:9a: cf:5d:92:5e:2e:21:6c:98:31:07:78:5a:9a:a6:76: db:6f:f1:c9:7c:54:71:ff:a5:85:17:8d:d8:2e:86: a2:31:f0:45:1b:ec:50:3f:33:af:ee:2f:43:be:8d: cd:bc:2d:a8:b3:51:59:1b:a7:89:3c:24:4f:63:d3: a6:93:4d:bb:f1:93:d3:87:39:fa:12:fd:39:c3:ca: 11:73:d9:f0:d7:75:d5:8b:ef:b2:64:65:e0:d1:be: 43:53:1d:f8:b6:ff:94:79:d5:c1:3b:6e:bd:ff:ab: 6b:e8:7e:21:a8:15:18:ff:19:ed:07:0d:7b:54:33: c9:9e:12:2e:8d:2b:e2:44:ee:27:36:39:32:84:23: 6b:5f:75:75:76:8f:42:70:63:e4:c3:0f:9c:84:75: 4d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:11:18:38:55:0B:34:DD:B4:F1:03:03:CD:06:49:B4:37:D1:01:93 X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:fc:17:73:e8:68:88:bf:05:cb:a6:af:b6:f6:5c:dc:64:2b: 0b:c4:de:bf:44:03:1d:a9:ca:9b:e1:d0:c2:fc:e4:56:a4:79: 1b:a8:a1:dc:81:e8:b3:ba:14:d9:c6:0a:93:7c:72:dd:e5:1a: 64:f6:2f:45:e0:8f:a1:78:d0:52:70:ea:d5:81:54:ba:cd:69: 2e:cf:3a:5b:9f:81:02:79:9e:20:ad:6e:01:34:b5:ff:75:aa: 9a:7c:9e:30:39:b1:df:a6:84:db:88:1c:c7:a8:d6:20:ef:c0: 62:39:3d:15:a1:fc:f0:d6:af:92:f9:6e:9a:c2:ab:7c:f7:53: 1e:55:b4:22:d4:c4:58:33:11:21:4c:89:fc:2b:dd:90:c5:6d: 7e:bc:c1:0b:55:a2:3c:b1:b8:e2:06:ad:81:6d:51:08:96:fe: 67:af:64:fb:47:91:e5:6a:7a:69:a2:b6:3d:7d:e5:ff:22:e4: 76:e4:fd:e5:34:18:fe:75:74:0f:22:a3:dd:6e:62:00:e6:13: 11:52:3c:4c:49:af:e9:9b:57:6f:de:44:1b:fb:dd:fb:db:ab: 35:b4:e7:94:8e:ea:6b:d5:d4:e2:0e:a0:22:f3:fc:3c:20:b0: f8:a6:e9:90:58:0e:35:d9:ec:09:83:8b:f0:f6:5c:c6:08:83: 28:34:5c:86 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQMv3VdkzsMfgrNx0uumX/ULeNJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNjA1MTIxNTIyMzBaFw0yNjA1MTMxODU0MzBaMDMxMTAvBgNV BAMTKDg1MTExODM4NTUwQjM0RERCNEYxMDMwM0NEMDY0OUI0MzdEMTAxOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBkpSdCgSF2ROZ0keI1HGUfSf0 VpHgla+2zkD+fXjBKhpWvIB3pz3QO9MjC9/CZagKRB/7FcJgyGWzyST0ttl130cN le4+UYy9A1wTnNTOaJZVdl+pTC4rJC1o+Z+gthZRy2efpL/sms9dkl4uIWyYMQd4 Wpqmdttv8cl8VHH/pYUXjdguhqIx8EUb7FA/M6/uL0O+jc28LaizUVkbp4k8JE9j 06aTTbvxk9OHOfoS/TnDyhFz2fDXddWL77JkZeDRvkNTHfi2/5R51cE7br3/q2vo fiGoFRj/Ge0HDXtUM8meEi6NK+JE7ic2OTKEI2tfdXV2j0JwY+TDD5yEdU1LAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUhREYOFULNN208QMDzQZJtDfRAZMwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8/Bdz 6GiIvwXLpq+29lzcZCsLxN6/RAMdqcqb4dDC/ORWpHkbqKHcgeizuhTZxgqTfHLd 5Rpk9i9F4I+heNBScOrVgVS6zWkuzzpbn4ECeZ4grW4BNLX/daqafJ4wObHfpoTb iBzHqNYg78BiOT0Vofzw1q+S+W6awqt891MeVbQi1MRYMxEhTIn8K92QxW1+vMEL VaI8sbjiBq2BbVEIlv5nr2T7R5HlanpporY9feX/IuR25P3lNBj+dXQPIqPdbmIA 5hMRUjxMSa/pm1dv3kQb+93726s1tOeUjupr1dTiDqAi8/w8ILD4pumQWA412ewJ g4vw9lzGCIMoNFyG -----END CERTIFICATE-----Generated at Wed May 13 04:29:46 2026 by rpki-client