$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.mft File: B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.mft (raw, json) Hash identifier: hQPFc0cgPD0prswjzkjCYfBAh92tXLzwUxjcA80iWQw= Subject key identifier: E7:FA:14:EF:E8:DD:72:C2:91:B0:81:63:DD:B2:B4:6B:BF:EF:BE:58 Authority key identifier: B3:93:6D:A7:93:A9:99:58:62:F0:71:42:C3:D0:BB:0D:2A:B2:BB:BB Certificate issuer: /CN=B3936DA793A9995862F07142C3D0BB0D2AB2BBBB Certificate serial: 632CA43382954AB2DD5C4439F1DEA4DDBAE2B35E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.mft Manifest number: 28 Signing time: Wed 13 May 2026 02:02:09 +0000 Manifest this update: Wed 13 May 2026 01:57:09 +0000 Manifest next update: Thu 14 May 2026 05:22:09 +0000 Files and hashes: 1: 326131343a316563303a3a2f33322d3332203d3e20323034343634.roa (hash: 6kQo7bFkLtOfBMIG0r5iyUGZwYPdB0rC34zfUk2Ho74=) 2: B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.crl (hash: f39mmbHrRr5165+DhiCmlQcj4fOAncMqB6vtm/1vr6k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.crl rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 17:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2c:a4:33:82:95:4a:b2:dd:5c:44:39:f1:de:a4:dd:ba:e2:b3:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3936DA793A9995862F07142C3D0BB0D2AB2BBBB Validity Not Before: May 13 01:57:09 2026 GMT Not After : May 14 05:22:09 2026 GMT Subject: CN=E7FA14EFE8DD72C291B08163DDB2B46BBFEFBE58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:90:4b:68:db:e3:55:69:79:c6:98:58:38:2b: dc:a9:43:45:54:4f:b7:fb:57:50:3e:48:62:b7:d3: f4:38:f0:0d:7d:47:8f:6f:9d:56:be:af:4a:08:9d: 0c:72:20:1a:6f:1d:8c:f1:5d:8b:04:62:b3:5e:6f: 9d:23:0a:b5:f3:e3:9e:ae:62:87:16:3b:1e:29:e0: 1d:23:bb:46:d5:23:ec:64:1f:6d:6c:3e:6a:a3:ff: 62:db:79:96:d9:7a:c7:0e:04:67:8b:a4:18:01:03: 7a:7c:d7:26:01:af:d3:7c:e0:ed:89:58:93:31:8d: ea:ec:06:f3:4a:5e:3c:f9:09:82:30:cd:de:a6:1c: ad:96:30:53:d5:9e:d2:d7:fc:e3:e2:31:04:dd:45: d8:fb:b5:5a:9c:5d:a6:2d:86:d9:f4:b6:3f:88:10: 58:7f:a3:22:75:81:80:45:fa:d8:60:49:52:a4:3e: 40:a4:38:fb:6b:ae:0b:f8:17:b1:32:5e:d0:65:fc: 25:f4:ad:85:2a:3f:ea:ac:fa:e0:9d:8d:d8:0c:c2: b1:55:56:30:0e:1a:19:0a:c4:42:05:59:98:1c:e3: 90:3d:44:76:29:e4:fd:50:e0:c9:07:7e:78:27:8f: 62:4c:a8:be:e5:b7:fd:b1:5a:f0:dd:5a:cc:29:a5: 4f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FA:14:EF:E8:DD:72:C2:91:B0:81:63:DD:B2:B4:6B:BF:EF:BE:58 X509v3 Authority Key Identifier: keyid:B3:93:6D:A7:93:A9:99:58:62:F0:71:42:C3:D0:BB:0D:2A:B2:BB:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:69:0e:9f:db:cc:d4:52:ec:74:ae:aa:90:48:c1:b2:81:51: 74:5f:a0:20:68:cc:47:2c:58:3c:a8:f6:be:68:9f:2a:8e:fa: de:d6:3f:b5:d2:ea:3a:ec:67:02:2e:04:2c:84:98:de:dc:2a: 50:26:65:70:27:7c:72:26:12:e5:92:d5:1b:29:e3:72:81:96: d3:ce:5e:54:70:a3:b0:96:48:f0:6e:8c:a2:90:23:15:1a:23: e7:c5:0d:31:33:09:b8:bb:6c:a3:00:76:d2:ea:80:e0:46:9b: 7b:75:61:98:93:4a:bc:52:0f:08:15:a2:37:6b:9e:92:04:83: a0:2d:e8:1e:9e:4e:f3:48:22:ca:87:60:26:a5:ad:ef:51:4e: d7:00:dd:01:e2:a9:c5:c1:09:b6:71:a1:66:58:d9:72:82:d9: a1:91:fb:e9:b3:4f:31:f9:1f:8b:2f:16:d1:7f:5f:dc:d1:64: da:32:4b:97:9a:a9:71:6c:29:23:77:c8:83:da:1c:71:f9:b5: 8c:e2:19:8d:f1:30:6f:04:0d:f9:69:60:76:71:7c:08:b0:06: 6a:10:9f:e9:ec:72:d2:00:d9:d1:d5:c6:23:d4:d4:8e:eb:e7: 2b:46:b1:b7:40:41:e1:3f:f0:fc:ac:0b:3c:c3:9b:04:9b:19: bb:c6:d7:3d -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUYyykM4KVSrLdXEQ58d6k3bris14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5MzZEQTc5M0E5OTk1ODYyRjA3MTQyQzNEMEJCMEQy QUIyQkJCQjAeFw0yNjA1MTMwMTU3MDlaFw0yNjA1MTQwNTIyMDlaMDMxMTAvBgNV BAMTKEU3RkExNEVGRThERDcyQzI5MUIwODE2M0REQjJCNDZCQkZFRkJFNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhkEto2+NVaXnGmFg4K9ypQ0VU T7f7V1A+SGK30/Q48A19R49vnVa+r0oInQxyIBpvHYzxXYsEYrNeb50jCrXz456u YocWOx4p4B0ju0bVI+xkH21sPmqj/2LbeZbZescOBGeLpBgBA3p81yYBr9N84O2J WJMxjersBvNKXjz5CYIwzd6mHK2WMFPVntLX/OPiMQTdRdj7tVqcXaYthtn0tj+I EFh/oyJ1gYBF+thgSVKkPkCkOPtrrgv4F7EyXtBl/CX0rYUqP+qs+uCdjdgMwrFV VjAOGhkKxEIFWZgc45A9RHYp5P1Q4MkHfngnj2JMqL7lt/2xWvDdWswppU+bAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQU5/oU7+jdcsKRsIFj3bK0a7/vvlgwHwYDVR0j BBgwFoAUs5Ntp5OpmVhi8HFCw9C7DSqyu7swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGFmNGE2MmUtM2VmNS00YTM2LWIwZDMtNzgyNWJlYzEz NGFiLzEvQjM5MzZEQTc5M0E5OTk1ODYyRjA3MTQyQzNEMEJCMEQyQUIyQkJCQi5j cmwwgaAGCCsGAQUFBwEBBIGTMIGQMIGNBggrBgEFBQcwAoaBgHJzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00 ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzEwL0IzOTM2REE3OTNBOTk5NTg2MkYwNzE0 MkMzRDBCQjBEMkFCMkJCQkIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYB BQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvNGFmNGE2MmUtM2VmNS00YTM2LWIwZDMtNzgyNWJlYzEzNGFiLzEvQjM5MzZE QTc5M0E5OTk1ODYyRjA3MTQyQzNEMEJCMEQyQUIyQkJCQi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHVp Dp/bzNRS7HSuqpBIwbKBUXRfoCBozEcsWDyo9r5onyqO+t7WP7XS6jrsZwIuBCyE mN7cKlAmZXAnfHImEuWS1Rsp43KBltPOXlRwo7CWSPBujKKQIxUaI+fFDTEzCbi7 bKMAdtLqgOBGm3t1YZiTSrxSDwgVojdrnpIEg6At6B6eTvNIIsqHYCalre9RTtcA 3QHiqcXBCbZxoWZY2XKC2aGR++mzTzH5H4svFtF/X9zRZNoyS5eaqXFsKSN3yIPa HHH5tYziGY3xMG8EDflpYHZxfAiwBmoQn+nsctIA2dHVxiPU1I7r5ytGsbdAQeE/ 8PysCzzDmwSbGbvG1z0= -----END CERTIFICATE-----Generated at Wed May 13 12:25:41 2026 by rpki-client