$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.mft File: 0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.mft (raw, json) Hash identifier: o79aPzSVFVN6i4MctCo8hN1rmi2BGgIhRcp5RND+HK8= Subject key identifier: 11:B4:AC:F6:44:28:57:84:CB:15:42:FA:FF:94:A8:72:D8:D4:5D:14 Authority key identifier: 0A:EF:0C:23:EE:A2:58:4B:77:F7:E7:4F:3C:6F:A1:95:07:A2:5D:6E Certificate issuer: /CN=0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E Certificate serial: 75C4FD0ED467483CD2C448A7578242DA03E9937B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.mft Manifest number: 02 Signing time: Tue 12 May 2026 21:24:41 +0000 Manifest this update: Tue 12 May 2026 21:19:41 +0000 Manifest next update: Thu 14 May 2026 00:37:41 +0000 Files and hashes: 1: 0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.crl (hash: 8CkZN+nKAXBD5Ku1rxb82GFUsWlW7pzvAEUpBZVR0r8=) 2: 326131343a366634343a636133303a3a2f34342d3434203d3e20323030333738.roa (hash: rzHDd6pYyAUkDzdpOl9T5hbLCMrrfqWTOBS2icxWnVc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.crl rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.mft rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.cer rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c4:fd:0e:d4:67:48:3c:d2:c4:48:a7:57:82:42:da:03:e9:93:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E Validity Not Before: May 12 21:19:41 2026 GMT Not After : May 14 00:37:41 2026 GMT Subject: CN=11B4ACF644285784CB1542FAFF94A872D8D45D14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:b7:9a:d4:81:5a:a8:f1:9d:d8:2c:d7:54: 60:62:91:6d:b5:24:f8:94:e2:61:3b:79:ba:60:9a: b9:4e:f5:dd:a7:cc:44:ae:0e:c7:49:4c:5b:71:62: 90:e9:f4:01:ef:58:9a:fd:50:fe:4d:6b:b6:da:86: f2:ec:4c:9f:11:37:6b:51:08:67:a5:d3:77:9b:3d: 16:ae:d3:d2:79:43:64:69:a8:1f:3f:6e:98:6f:21: 58:f2:e5:08:bf:f4:78:ef:5d:73:33:58:59:9d:5c: 1a:5d:37:c7:e1:bf:8c:d8:c3:54:21:2f:76:d4:49: a3:b3:08:97:ec:8a:26:06:19:23:50:9c:60:77:27: dc:89:b1:a1:6a:de:ca:e5:f9:ff:ad:e9:42:0f:38: 37:25:07:45:a3:b3:e4:fc:d9:6a:8e:88:4e:1d:a1: ef:e8:8e:de:ca:ea:de:8d:d3:92:0d:18:c2:61:40: 0c:a4:96:0e:a7:a4:ff:c8:87:51:63:c6:a8:92:23: 99:21:5c:ff:6f:48:b3:d6:b1:20:6a:ec:58:ed:0b: ce:bf:95:b0:d5:c9:44:74:92:62:52:b7:6b:75:0c: fb:ed:8c:22:08:04:2b:87:7c:92:11:80:e8:ee:b5: ad:de:2d:44:ed:29:03:9d:44:1b:d5:20:a3:f9:b4: e8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B4:AC:F6:44:28:57:84:CB:15:42:FA:FF:94:A8:72:D8:D4:5D:14 X509v3 Authority Key Identifier: keyid:0A:EF:0C:23:EE:A2:58:4B:77:F7:E7:4F:3C:6F:A1:95:07:A2:5D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f5:76:17:5f:79:a3:fc:12:37:31:55:06:88:0b:d8:49:3c: e6:65:3a:a8:4a:9e:b7:82:49:10:39:ac:19:9f:1c:1b:80:9c: 1b:36:38:95:95:3f:68:e0:15:60:a3:cb:2b:8a:bd:34:27:ad: e1:98:67:fd:d6:df:55:ba:6b:c9:9e:6e:28:e8:5e:70:50:4e: 48:9c:44:67:cb:2d:ed:d3:51:e0:08:b0:96:ea:fb:b9:24:93: ed:96:94:fe:fa:c3:9c:f5:b3:af:95:c0:97:75:5c:d5:d4:4b: 52:9e:a2:82:4d:aa:f1:3c:75:4c:0e:50:0d:18:2e:71:65:eb: 1f:ab:7b:44:cb:37:e1:9f:7f:b7:ac:e0:ec:9c:d0:79:b5:1d: bb:e8:08:5c:c4:86:2d:1e:81:42:ca:09:b2:22:00:51:02:28: f2:e8:3c:52:ab:54:bb:3c:11:75:b3:69:75:b5:b0:ce:59:5a: 3d:75:1a:01:ee:8c:73:a7:87:be:60:27:bf:e3:ad:be:06:71: 23:80:af:36:79:f1:e0:fe:18:b7:5b:32:c0:65:24:3f:27:54: ed:8c:b1:3b:29:85:97:4b:82:87:51:92:c9:82:0f:db:73:60: 79:86:bd:8d:eb:f8:8d:43:72:7a:5d:00:4a:e1:02:3b:fe:e0: a9:d8:ca:f3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdcT9DtRnSDzSxEinV4JC2gPpk3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFFRjBDMjNFRUEyNTg0Qjc3RjdFNzRGM0M2RkExOTUw N0EyNUQ2RTAeFw0yNjA1MTIyMTE5NDFaFw0yNjA1MTQwMDM3NDFaMDMxMTAvBgNV BAMTKDExQjRBQ0Y2NDQyODU3ODRDQjE1NDJGQUZGOTRBODcyRDhENDVEMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHurea1IFaqPGd2CzXVGBikW21 JPiU4mE7ebpgmrlO9d2nzESuDsdJTFtxYpDp9AHvWJr9UP5Na7bahvLsTJ8RN2tR CGel03ebPRau09J5Q2RpqB8/bphvIVjy5Qi/9HjvXXMzWFmdXBpdN8fhv4zYw1Qh L3bUSaOzCJfsiiYGGSNQnGB3J9yJsaFq3srl+f+t6UIPODclB0Wjs+T82WqOiE4d oe/ojt7K6t6N05INGMJhQAyklg6npP/Ih1FjxqiSI5khXP9vSLPWsSBq7FjtC86/ lbDVyUR0kmJSt2t1DPvtjCIIBCuHfJIRgOjuta3eLUTtKQOdRBvVIKP5tOjlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUEbSs9kQoV4TLFUL6/5SoctjUXRQwHwYDVR0j BBgwFoAUCu8MI+6iWEt39+dPPG+hlQeiXW4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWIyMzVhNjAtYzc1Ni00M2Y5LTlmNGEtYjJlM2UwZGIx OWZjLzEvMEFFRjBDMjNFRUEyNTg0Qjc3RjdFNzRGM0M2RkExOTUwN0EyNUQ2RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZmY3YTk4OS1lY2RmLTQz ZDYtODZlMS1mNmMzOTM1YjliM2QvNC8wQUVGMEMyM0VFQTI1ODRCNzdGN0U3NEYz QzZGQTE5NTA3QTI1RDZFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzViMjM1YTYwLWM3NTYtNDNmOS05ZjRhLWIyZTNlMGRiMTlmYy8xLzBBRUYwQzIz RUVBMjU4NEI3N0Y3RTc0RjNDNkZBMTk1MDdBMjVENkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAW9XYX X3mj/BI3MVUGiAvYSTzmZTqoSp63gkkQOawZnxwbgJwbNjiVlT9o4BVgo8srir00 J63hmGf91t9VumvJnm4o6F5wUE5InERnyy3t01HgCLCW6vu5JJPtlpT++sOc9bOv lcCXdVzV1EtSnqKCTarxPHVMDlANGC5xZesfq3tEyzfhn3+3rODsnNB5tR276Ahc xIYtHoFCygmyIgBRAijy6DxSq1S7PBF1s2l1tbDOWVo9dRoB7oxzp4e+YCe/462+ BnEjgK82efHg/hi3WzLAZSQ/J1TtjLE7KYWXS4KHUZLJgg/bc2B5hr2N6/iNQ3J6 XQBK4QI7/uCp2Mrz -----END CERTIFICATE-----Generated at Wed May 13 12:40:35 2026 by rpki-client