$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft File: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft (raw, json) Hash identifier: vgdaMMoB6QlQSD5LEmHZKgAaryWqj0FCi8m+8tzADfc= Subject key identifier: 47:C0:9D:BE:0D:FA:36:D0:46:0D:97:2D:21:5A:9F:76:6F:E3:02:46 Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A Certificate issuer: /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Certificate serial: 3B869AC4A2C631251ACB9840BF84198216AF588C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft Manifest number: 9E Signing time: Tue 12 May 2026 10:26:59 +0000 Manifest this update: Tue 12 May 2026 10:21:59 +0000 Manifest next update: Wed 13 May 2026 14:02:59 +0000 Files and hashes: 1: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (hash: GrABHnm92+umbLrVFGaFsGRxCk28MTZckUcjsaOY0Ow=) 2: 326130663a316363353a313033303a3a2f34342d3438203d3e20323031333836.roa (hash: SxyQIKRflKDfzDUyUfrdFvcREAVMOS9I7Iy4ywW3U5Y=) 3: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (hash: alWdZcWOVcqLJ+t8VCXLM/51cMrMQD6vIi6z5Hkb/rM=) 4: 326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa (hash: 6lZvvFWPvSfdQUMPjqUZGcuEJ5oDxzIDckdsgacq+JE=) 5: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl (hash: SZah7t3w4uXwYGJ3x7PMSwIjQdZ3tvad5eYRkXWAaQI=) 6: 326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa (hash: PhJ22uKOLkIyMB26jpFkBLaf94CPZDjFlKqxP4B3DyA=) 7: 326130663a316363353a313033303a3a2f34342d3438203d3e20323136323939.roa (hash: sj4hnBEpnD4akX8jpgCsQPvr+ht2QjoESczHJBDU000=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:86:9a:c4:a2:c6:31:25:1a:cb:98:40:bf:84:19:82:16:af:58:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Validity Not Before: May 12 10:21:59 2026 GMT Not After : May 13 14:02:59 2026 GMT Subject: CN=47C09DBE0DFA36D0460D972D215A9F766FE30246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:92:62:b2:bf:6d:6f:04:89:c9:31:c2:0d:d7: 26:03:c6:d5:cd:f4:8a:b9:87:c6:59:77:71:6c:19: c8:18:13:42:07:a2:3b:d6:3b:4d:db:68:25:09:66: 83:9c:1b:97:9c:87:ec:d0:83:99:cd:1d:c0:64:d2: 34:b0:40:1e:1d:c5:32:4e:47:31:cb:dc:28:29:c8: 47:e3:8c:8a:11:1d:dd:db:ea:64:b9:14:c2:17:65: 7f:88:28:d7:7e:24:25:31:fb:55:ea:8d:c6:8c:49: 5c:ab:29:4d:de:df:b5:8a:eb:14:e1:97:32:20:03: 74:ce:fc:bf:08:60:ac:cb:1f:29:a1:d2:06:38:88: 33:19:99:8e:58:58:d0:51:09:82:66:4d:1e:38:dd: 3b:39:0c:e9:c1:a2:10:b6:ea:eb:05:cc:24:bb:d1: dd:f8:31:d8:40:03:af:96:09:1c:41:c6:26:18:6e: b2:74:02:7d:68:07:cc:e4:f1:df:c6:08:6c:d7:79: e7:c7:41:6b:b4:1e:a7:13:90:19:98:34:4b:f4:cb: 41:8e:8b:4c:8b:96:34:27:10:cd:3a:12:70:56:19: 5c:9f:da:3d:6f:18:07:a3:77:2b:bb:9d:8b:da:51: c9:da:4c:f1:74:1f:13:98:fd:61:0b:8a:db:94:93: 7f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C0:9D:BE:0D:FA:36:D0:46:0D:97:2D:21:5A:9F:76:6F:E3:02:46 X509v3 Authority Key Identifier: keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a4:1c:2d:97:e9:6a:4b:a2:ee:67:16:f3:a6:91:d1:6e:5d: 4a:06:91:9d:68:94:b9:46:3a:cb:33:f9:3d:da:4a:43:b6:d3: a2:79:b7:46:b4:53:3e:9d:8d:98:2f:ec:0a:98:16:ad:e4:8f: d5:98:b9:60:32:64:7d:30:c7:c8:36:e8:78:21:3e:2e:b0:6d: d5:82:fc:1f:3d:74:34:a8:b0:67:6c:69:a0:e5:ee:a6:f0:6d: 21:95:b7:2a:0c:2e:8c:b5:a7:e7:d2:72:9c:ef:42:de:29:71: b5:3a:e0:00:ed:de:4f:8c:b8:a1:da:cd:1c:c8:6a:f4:16:c1: ec:f8:59:14:fb:13:f6:80:b0:ce:c0:4d:03:8a:b8:a7:0b:5a: 77:59:a4:b5:0a:93:c3:fb:9a:e0:18:c3:ef:2b:f2:2e:6a:14: e0:7b:1e:aa:13:da:a0:57:e0:4e:e0:d7:63:8a:08:a0:6b:c1: 00:c2:87:05:72:9c:38:50:00:c3:5d:e8:93:9e:f5:a5:16:f3: a2:41:95:49:ed:9e:e3:fd:9b:1e:3b:37:db:2d:07:f0:a9:0d: 23:e0:fd:95:05:77:4c:de:a0:5c:2f:fc:6c:8b:b7:29:42:cb: 8e:af:d5:a7:a0:56:7b:db:ba:16:b0:ec:40:5f:42:a3:28:5f: 39:75:6a:61 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUO4aaxKLGMSUay5hAv4QZghavWIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5 MUZCQjczQTAeFw0yNjA1MTIxMDIxNTlaFw0yNjA1MTMxNDAyNTlaMDMxMTAvBgNV BAMTKDQ3QzA5REJFMERGQTM2RDA0NjBEOTcyRDIxNUE5Rjc2NkZFMzAyNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kmKyv21vBInJMcIN1yYDxtXN 9Iq5h8ZZd3FsGcgYE0IHojvWO03baCUJZoOcG5ech+zQg5nNHcBk0jSwQB4dxTJO RzHL3CgpyEfjjIoRHd3b6mS5FMIXZX+IKNd+JCUx+1XqjcaMSVyrKU3e37WK6xTh lzIgA3TO/L8IYKzLHymh0gY4iDMZmY5YWNBRCYJmTR443Ts5DOnBohC26usFzCS7 0d34MdhAA6+WCRxBxiYYbrJ0An1oB8zk8d/GCGzXeefHQWu0HqcTkBmYNEv0y0GO i0yLljQnEM06EnBWGVyf2j1vGAejdyu7nYvaUcnaTPF0HxOY/WELituUk393AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUR8Cdvg36NtBGDZctIVqfdm/jAkYwHwYDVR0j BBgwFoAU4duHu7vSDf8mGeYUuG1LfpH7tzowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzMvRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5MUZCQjczQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9FMURCODdCQkJCRDIwREZGMjYxOUU2MTRC ODZENEI3RTkxRkJCNzNBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzUyYjg0MTU2LTk1OTctNDRiNC1iZDI0LTY1ZGUyYzM1NWVmYy8zL0UxREI4N0JC QkJEMjBERkYyNjE5RTYxNEI4NkQ0QjdFOTFGQkI3M0EubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8pBwt l+lqS6LuZxbzppHRbl1KBpGdaJS5RjrLM/k92kpDttOiebdGtFM+nY2YL+wKmBat 5I/VmLlgMmR9MMfINuh4IT4usG3VgvwfPXQ0qLBnbGmg5e6m8G0hlbcqDC6Mtafn 0nKc70LeKXG1OuAA7d5PjLih2s0cyGr0FsHs+FkU+xP2gLDOwE0DirinC1p3WaS1 CpPD+5rgGMPvK/IuahTgex6qE9qgV+BO4Ndjigiga8EAwocFcpw4UADDXeiTnvWl FvOiQZVJ7Z7j/ZseOzfbLQfwqQ0j4P2VBXdM3qBcL/xsi7cpQsuOr9WnoFZ727oW sOxAX0KjKF85dWph -----END CERTIFICATE-----Generated at Wed May 13 09:16:24 2026 by rpki-client