$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft File: 2A91778ACCE76333081468D9784DE132C2985976.mft (raw, json) Hash identifier: NSmNpwdxBiQmKeht2p0nR+YQHpVYmIoNEJY2RDBAUtk= Subject key identifier: F5:33:91:A7:C1:6D:98:E0:06:0A:AA:16:43:8F:57:C4:F1:02:8A:1A Authority key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 Certificate issuer: /CN=2A91778ACCE76333081468D9784DE132C2985976 Certificate serial: 3E47B8E1C74DBD5046745191C465C111F847D114 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft Manifest number: 96 Signing time: Wed 13 May 2026 00:14:32 +0000 Manifest this update: Wed 13 May 2026 00:09:32 +0000 Manifest next update: Thu 14 May 2026 02:48:32 +0000 Files and hashes: 1: 326130663a316363353a323630303a3a2f34302d3438203d3e203434333234.roa (hash: cDN3mdERPdV9IfirHT4t4rSQ9VN0hgzy5abYthSlLfc=) 2: 326130663a316363353a323630303a3a2f34302d3438203d3e203430393239.roa (hash: AqtXmTicudA3Fkf+9R1A3gsAjXpjiZwqZjr19JM/uqo=) 3: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (hash: nzPrfU7/0C1uT8wK0Kkdb/GSWbML8Xt4edf9nME+bEg=) 4: 326130663a316363353a323630303a3a2f34302d3438203d3e203533383038.roa (hash: u1C6r96nrZzsP725w3rwf3Ro6iVU6GABz5hYSkgtUzk=) 5: 2A91778ACCE76333081468D9784DE132C2985976.crl (hash: rUYfGPjzn/yIZdIgrrUCxEIuQ84yD+DeJZai0tHNORc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:47:b8:e1:c7:4d:bd:50:46:74:51:91:c4:65:c1:11:f8:47:d1:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A91778ACCE76333081468D9784DE132C2985976 Validity Not Before: May 13 00:09:32 2026 GMT Not After : May 14 02:48:32 2026 GMT Subject: CN=F53391A7C16D98E0060AAA16438F57C4F1028A1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ae:2e:13:b4:fd:d9:74:50:77:9f:b8:c3:de: 59:23:65:ff:87:3b:be:ae:ba:a2:7e:33:7e:c6:5d: 89:fc:cb:66:d0:b4:52:da:e8:6b:38:06:f5:9a:27: eb:6f:ec:75:ee:6d:d3:ad:54:4e:2a:5c:5b:09:cf: af:5d:b0:0c:08:79:48:b6:99:6f:32:b3:b8:bd:3e: c6:78:90:27:af:99:e6:ed:10:a3:e9:81:8c:39:d9: 4d:23:a6:f5:0d:dc:3e:1b:9b:70:c3:13:fe:bc:02: 8d:ca:a9:da:4f:c8:cb:2c:23:44:a3:f9:1a:85:d2: d4:d4:5f:e7:18:06:0b:61:1b:50:4e:d9:29:2b:8c: 9a:b3:09:2b:b6:ef:30:85:6a:8a:b0:86:17:f8:48: 5c:1d:62:d3:e3:0d:17:41:fe:d8:fb:9b:98:ae:a6: 26:5f:b6:11:17:c6:6c:9d:14:8d:da:8a:90:9d:66: 18:83:db:89:f6:9d:19:5a:fb:78:8e:65:ee:63:94: fe:3f:b8:0e:4d:e4:de:80:7f:c6:2e:b2:28:e8:59: b2:0e:7f:13:b1:84:17:d7:08:6e:89:4f:d6:db:23: d7:4c:f9:72:0d:8f:dd:a0:21:f0:c4:e0:d4:1e:fc: 1d:32:24:e0:13:99:cc:37:5f:fa:83:61:b6:81:c0: 09:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:33:91:A7:C1:6D:98:E0:06:0A:AA:16:43:8F:57:C4:F1:02:8A:1A X509v3 Authority Key Identifier: keyid:2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:ac:fd:9a:31:3f:4f:1e:f8:0e:e4:06:c4:9b:ca:b8:7d:d4: 1d:33:d5:fd:aa:a7:ac:20:59:bc:41:7b:e1:e8:c2:4b:4e:04: 17:93:57:68:67:d5:f5:9e:78:ae:6d:e8:af:d4:aa:23:a3:0c: 57:95:fb:ce:a6:56:f7:78:c1:25:23:d3:67:45:76:46:75:e2: 0a:25:a5:7d:f1:ba:1e:81:e2:1d:c2:0a:15:ca:2f:3b:05:8b: 11:e0:22:e1:ba:5c:ff:f3:b4:68:11:50:0c:ce:db:1f:b6:39: 54:8c:b9:5d:5c:a3:0f:e4:b3:56:bd:4c:5e:57:2e:61:be:0e: 60:99:8a:f0:4b:8b:d2:ee:3b:09:74:b5:73:a2:4f:90:2f:9a: 13:5c:36:68:bc:d2:4d:09:0f:a4:f8:d3:66:90:bb:fb:ac:29: 50:94:97:0b:3c:bb:61:32:5b:6e:be:46:c8:e7:c3:b4:7d:cb: 28:72:ee:79:a4:8c:0a:39:85:d4:51:e3:1b:2d:ec:25:31:36: f2:88:b7:36:48:ac:7a:1b:d7:81:d1:02:99:4d:b7:27:7b:2c: 82:7b:8e:c3:9e:b8:d3:2b:3e:0c:d5:08:8c:43:89:27:f5:0f: 14:e3:e7:84:88:b2:2e:29:d2:cd:80:99:b9:19:10:dc:f2:a7: 15:b4:23:0a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPke44cdNvVBGdFGRxGXBEfhH0RQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJD Mjk4NTk3NjAeFw0yNjA1MTMwMDA5MzJaFw0yNjA1MTQwMjQ4MzJaMDMxMTAvBgNV BAMTKEY1MzM5MUE3QzE2RDk4RTAwNjBBQUExNjQzOEY1N0M0RjEwMjhBMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJri4TtP3ZdFB3n7jD3lkjZf+H O76uuqJ+M37GXYn8y2bQtFLa6Gs4BvWaJ+tv7HXubdOtVE4qXFsJz69dsAwIeUi2 mW8ys7i9PsZ4kCevmebtEKPpgYw52U0jpvUN3D4bm3DDE/68Ao3KqdpPyMssI0Sj +RqF0tTUX+cYBgthG1BO2SkrjJqzCSu27zCFaoqwhhf4SFwdYtPjDRdB/tj7m5iu piZfthEXxmydFI3aipCdZhiD24n2nRla+3iOZe5jlP4/uA5N5N6Af8YusijoWbIO fxOxhBfXCG6JT9bbI9dM+XINj92gIfDE4NQe/B0yJOATmcw3X/qDYbaBwAkvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU9TORp8FtmOAGCqoWQ49XxPECihowHwYDVR0j BBgwFoAUKpF3isznYzMIFGjZeE3hMsKYWXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAw ZGM5LzEvMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJDMjk4NTk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8yQTkxNzc4QUNDRTc2MzMzMDgxNDY4RDk3 ODRERTEzMkMyOTg1OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2JhNjFkLTQwNTYtNDZhOS05MzkyLWE2MWRmYzUwMGRjOS8xLzJBOTE3NzhB Q0NFNzYzMzMwODE0NjhEOTc4NERFMTMyQzI5ODU5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBrP2a MT9PHvgO5AbEm8q4fdQdM9X9qqesIFm8QXvh6MJLTgQXk1doZ9X1nniubeiv1Koj owxXlfvOplb3eMElI9NnRXZGdeIKJaV98boegeIdwgoVyi87BYsR4CLhulz/87Ro EVAMztsftjlUjLldXKMP5LNWvUxeVy5hvg5gmYrwS4vS7jsJdLVzok+QL5oTXDZo vNJNCQ+k+NNmkLv7rClQlJcLPLthMltuvkbI58O0fcsocu55pIwKOYXUUeMbLewl MTbyiLc2SKx6G9eB0QKZTbcneyyCe47DnrjTKz4M1QiMQ4kn9Q8U4+eEiLIuKdLN gJm5GRDc8qcVtCMK -----END CERTIFICATE-----Generated at Wed May 13 06:49:21 2026 by rpki-client