$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft File: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft (raw, json) Hash identifier: 6bUoT77VfbptuQmw7YRKzQsS6Y6fLzAQTD6Y0j7JP9E= Subject key identifier: 85:E1:04:7C:E5:EB:3A:B1:73:99:D4:38:6A:A2:DA:AF:1C:58:9E:7C Authority key identifier: E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE Certificate issuer: /CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Certificate serial: 66C46DE77540121F98AB59623DA8169FAF3E497B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft Manifest number: FB Signing time: Tue 12 May 2026 17:15:36 +0000 Manifest this update: Tue 12 May 2026 17:10:36 +0000 Manifest next update: Wed 13 May 2026 17:47:36 +0000 Files and hashes: 1: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl (hash: MTi10x1m2OiKh9ET3EYDwQCWHNgwbgxa3FNcQr8yOv8=) 2: 326131343a373538313a6230303a3a2f34302d3438203d3e20323134353735.roa (hash: YwVA55nGhmg50Nrcm1+tsq8Rc4xtCFLwJqkp0AhkdXQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 17:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c4:6d:e7:75:40:12:1f:98:ab:59:62:3d:a8:16:9f:af:3e:49:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Validity Not Before: May 12 17:10:36 2026 GMT Not After : May 13 17:47:36 2026 GMT Subject: CN=85E1047CE5EB3AB17399D4386AA2DAAF1C589E7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:66:96:dd:92:7d:c4:67:10:44:c7:96:6c:e2: 05:71:56:25:c6:b6:ce:7c:c5:32:e8:62:70:39:fd: 8d:ae:6f:55:47:27:49:de:5a:5d:d4:31:d1:ee:07: 93:20:89:c0:a1:7a:e0:9d:6a:3b:99:47:b8:f9:23: 8a:ea:21:36:61:d9:ad:15:c9:b8:8a:83:69:b4:11: 14:8e:55:1d:f4:1f:90:7f:d3:d9:8d:af:3c:58:34: 09:2f:c5:9f:06:06:6c:b0:e3:57:03:b0:fe:4e:cc: 5f:3e:d3:7c:ea:6f:b2:2e:e2:7d:ad:40:7f:a3:61: c9:f9:91:d9:d4:b3:eb:f8:ea:f9:a6:51:19:75:64: fb:aa:cc:dd:da:22:4e:b6:0c:ae:ed:be:f1:16:32: 8d:d6:88:db:b8:0f:77:ac:04:3c:58:5c:54:3b:26: b0:26:2c:89:c9:ab:9c:12:73:78:26:98:37:fd:22: 86:d9:17:f9:d1:d2:9f:f5:75:33:70:7a:18:d8:68: ad:d7:75:48:6d:5d:8a:8a:a5:05:91:d1:a7:03:8c: 26:61:62:98:9a:b1:27:19:63:ee:2c:af:24:67:9c: 16:ec:5a:20:a6:79:50:ab:8b:e2:ca:f8:15:aa:a6: 6a:65:38:08:65:cd:0b:97:25:39:0a:e9:e1:16:84: b8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E1:04:7C:E5:EB:3A:B1:73:99:D4:38:6A:A2:DA:AF:1C:58:9E:7C X509v3 Authority Key Identifier: keyid:E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f5:c7:d5:6d:34:7c:c4:e6:16:2c:1b:12:02:04:e8:f8:0b: e6:10:d7:58:e5:33:74:d2:58:e3:47:ca:7c:c9:dd:87:dd:d0: e1:8f:0a:00:e3:2d:ac:b2:79:10:94:08:a2:bc:99:56:b6:4c: f2:e8:53:51:fe:ae:eb:65:ac:d9:3a:df:07:67:5d:89:59:e1: 91:c7:7d:ca:d9:ab:74:8f:6d:1b:1c:ee:66:50:06:40:27:5f: 26:68:fd:db:09:0e:86:4e:2f:6e:40:fa:d1:c7:08:19:fb:cf: d2:56:85:6d:e7:7e:f6:7d:dc:4b:f3:d2:60:89:53:a3:85:60: de:12:03:a7:c3:76:84:7e:eb:07:58:60:54:00:c5:8c:95:f3: 86:94:15:9a:ee:b8:ea:94:73:cb:62:d0:10:af:2c:d0:be:ea: 3b:10:98:94:19:f6:e1:aa:84:61:44:7d:3f:5d:eb:52:47:27: 19:37:6e:1a:ca:85:2e:5b:eb:d7:b7:29:ef:73:7b:b4:ee:1d: ce:43:85:6b:28:27:3a:34:96:eb:5b:7f:d1:5e:1a:42:4b:14: 1f:50:2f:60:c3:7b:ea:17:25:1c:b7:dd:f0:85:60:5c:d4:fb: d2:85:65:eb:3c:c6:e2:26:28:2e:2c:d9:53:5e:31:91:d8:59: 9b:3b:6c:a8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZsRt53VAEh+Yq1liPagWn68+SXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0 Q0E4MTNGRTAeFw0yNjA1MTIxNzEwMzZaFw0yNjA1MTMxNzQ3MzZaMDMxMTAvBgNV BAMTKDg1RTEwNDdDRTVFQjNBQjE3Mzk5RDQzODZBQTJEQUFGMUM1ODlFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbZpbdkn3EZxBEx5Zs4gVxViXG ts58xTLoYnA5/Y2ub1VHJ0neWl3UMdHuB5MgicCheuCdajuZR7j5I4rqITZh2a0V ybiKg2m0ERSOVR30H5B/09mNrzxYNAkvxZ8GBmyw41cDsP5OzF8+03zqb7Iu4n2t QH+jYcn5kdnUs+v46vmmURl1ZPuqzN3aIk62DK7tvvEWMo3WiNu4D3esBDxYXFQ7 JrAmLInJq5wSc3gmmDf9IobZF/nR0p/1dTNwehjYaK3XdUhtXYqKpQWR0acDjCZh YpiasScZY+4sryRnnBbsWiCmeVCri+LK+BWqpmplOAhlzQuXJTkK6eEWhLi/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUheEEfOXrOrFzmdQ4aqLarxxYnnwwHwYDVR0j BBgwFoAU6dL3Mp9bpC7g2Jgije5YtkyoE/4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGM5YWNlY2UtZDA1Yi00ZjczLTljNmUtZDg3ODVkMTc4 OWMzLzEvRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0Q0E4MTNGRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FOUQyRjczMjlGNUJBNDJFRTBEODk4MjI4 REVFNThCNjRDQTgxM0ZFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRjOWFjZWNlLWQwNWItNGY3My05YzZlLWQ4Nzg1ZDE3ODljMy8xL0U5RDJGNzMy OUY1QkE0MkVFMEQ4OTgyMjhERUU1OEI2NENBODEzRkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBb9cfV bTR8xOYWLBsSAgTo+AvmENdY5TN00ljjR8p8yd2H3dDhjwoA4y2ssnkQlAiivJlW tkzy6FNR/q7rZazZOt8HZ12JWeGRx33K2at0j20bHO5mUAZAJ18maP3bCQ6GTi9u QPrRxwgZ+8/SVoVt5372fdxL89JgiVOjhWDeEgOnw3aEfusHWGBUAMWMlfOGlBWa 7rjqlHPLYtAQryzQvuo7EJiUGfbhqoRhRH0/XetSRycZN24ayoUuW+vXtynvc3u0 7h3OQ4VrKCc6NJbrW3/RXhpCSxQfUC9gw3vqFyUct93whWBc1PvShWXrPMbiJigu LNlTXjGR2FmbO2yo -----END CERTIFICATE-----Generated at Wed May 13 08:16:20 2026 by rpki-client