$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.mft File: 69727B946D879F5A52FB58F24B4D4D12D59B2CC2.mft (raw, json) Hash identifier: vkYxiiEv9z+92er7qJEyRHeqkWkybkA7pyqdiYdzBls= Subject key identifier: 66:E4:2A:8D:0E:4C:01:47:A5:E7:09:98:91:A8:83:63:E2:07:C8:4F Authority key identifier: 69:72:7B:94:6D:87:9F:5A:52:FB:58:F2:4B:4D:4D:12:D5:9B:2C:C2 Certificate issuer: /CN=69727B946D879F5A52FB58F24B4D4D12D59B2CC2 Certificate serial: 39A802526E3901BAEA4E36B861CFF9D399133A03 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.mft Manifest number: 28 Signing time: Tue 12 May 2026 17:07:34 +0000 Manifest this update: Tue 12 May 2026 17:02:34 +0000 Manifest next update: Wed 13 May 2026 17:56:34 +0000 Files and hashes: 1: 69727B946D879F5A52FB58F24B4D4D12D59B2CC2.crl (hash: to4xHFrQv1ngDTiI03c0Z52uO1T2guoUiJYVIr0FEC4=) 2: B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.cer (hash: 4JnzDzekO7l+zkV3kW2wnM3JY7qA7frb/XwiW9pw2Ok=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 11:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a8:02:52:6e:39:01:ba:ea:4e:36:b8:61:cf:f9:d3:99:13:3a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69727B946D879F5A52FB58F24B4D4D12D59B2CC2 Validity Not Before: May 12 17:02:34 2026 GMT Not After : May 13 17:56:34 2026 GMT Subject: CN=66E42A8D0E4C0147A5E7099891A88363E207C84F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b4:37:6a:1f:e6:47:91:26:a3:32:be:03:84: 3e:42:d8:34:60:db:e9:9c:6a:bc:07:85:15:9e:87: 33:ac:49:86:93:47:ad:c7:04:e5:0f:7d:f8:f4:a9: 37:cc:65:7f:90:ec:ca:4e:5f:4a:60:43:e5:39:64: 0f:4d:ea:a0:53:3b:4d:45:91:b1:78:1b:ee:06:ec: 48:61:eb:3d:04:56:fc:1b:bd:32:5a:d5:5b:80:8f: 9e:99:9a:74:9e:cf:92:71:dd:d4:43:e3:8e:50:be: b7:fb:4b:aa:3d:d7:b5:51:89:c1:64:ad:6d:0d:11: cc:2f:75:a7:04:89:23:d1:af:81:91:78:48:2d:9f: bc:5c:52:d4:9d:7c:7a:d8:40:45:b1:f6:67:fb:d9: b3:af:87:97:19:b1:f1:5b:f3:db:28:6f:24:cf:e7: 17:cb:de:ad:7a:68:7b:74:91:a0:72:71:1f:6c:7f: 9e:0e:f5:dd:f6:cb:36:21:83:64:a9:df:ff:65:20: 08:c3:3c:d7:e7:da:43:07:18:e9:c4:3c:d0:48:8e: 4f:51:74:17:23:02:e2:e4:70:d3:f9:eb:c4:59:47: 88:60:54:98:61:16:67:ab:f1:9d:1f:2d:f0:13:da: f6:10:ab:d1:b3:ca:f3:a7:ed:0b:d1:35:b0:42:51: 5f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E4:2A:8D:0E:4C:01:47:A5:E7:09:98:91:A8:83:63:E2:07:C8:4F X509v3 Authority Key Identifier: keyid:69:72:7B:94:6D:87:9F:5A:52:FB:58:F2:4B:4D:4D:12:D5:9B:2C:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f2:77:1a:f5:da:d3:c8:d3:92:19:e5:7f:fc:a2:07:ab:53: 6c:fb:6c:6a:bd:99:76:7e:2c:5e:ca:70:fc:6d:0c:82:80:2e: e4:a1:10:9a:3b:b1:1d:91:d7:ee:a0:57:49:8b:50:1b:89:9e: 24:4b:5a:dc:84:9e:6d:75:aa:83:45:a0:c1:21:25:12:cc:ce: df:d4:6b:f4:af:69:6a:0f:74:db:39:86:e5:55:60:82:1e:b0: 8a:91:d2:dd:96:82:69:5e:3e:78:15:94:04:32:6d:00:eb:4d: 3f:18:4e:fc:a0:ad:2a:30:7f:ab:42:63:98:d9:12:d8:8e:90: a7:c1:81:5f:45:39:0a:62:c0:bf:7d:cb:84:c3:ae:59:c0:14: c9:3c:99:c9:8e:7c:76:97:cc:ba:73:02:33:1d:cd:fc:9f:22: c1:88:94:10:bc:18:0a:32:a5:fa:b1:94:f6:c0:ae:b2:28:a2: a9:7a:37:be:af:5b:fb:1b:08:48:43:4d:65:29:67:0d:61:f7: 1f:58:ea:b8:e4:32:50:02:53:f6:95:69:aa:09:ef:3c:a6:36: 8a:5f:e4:a5:63:99:4f:f4:03:c7:13:a7:1e:28:ce:62:76:f9: d2:3c:ff:7d:a3:f7:49:f9:cd:f7:b8:9e:d9:5d:cb:ab:5e:b9: ab:1b:22:7a -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUOagCUm45AbrqTja4Yc/505kTOgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk3MjdCOTQ2RDg3OUY1QTUyRkI1OEYyNEI0RDREMTJE NTlCMkNDMjAeFw0yNjA1MTIxNzAyMzRaFw0yNjA1MTMxNzU2MzRaMDMxMTAvBgNV BAMTKDY2RTQyQThEMEU0QzAxNDdBNUU3MDk5ODkxQTg4MzYzRTIwN0M4NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmtDdqH+ZHkSajMr4DhD5C2DRg 2+mcarwHhRWehzOsSYaTR63HBOUPffj0qTfMZX+Q7MpOX0pgQ+U5ZA9N6qBTO01F kbF4G+4G7Ehh6z0EVvwbvTJa1VuAj56ZmnSez5Jx3dRD445Qvrf7S6o917VRicFk rW0NEcwvdacEiSPRr4GReEgtn7xcUtSdfHrYQEWx9mf72bOvh5cZsfFb89sobyTP 5xfL3q16aHt0kaBycR9sf54O9d32yzYhg2Sp3/9lIAjDPNfn2kMHGOnEPNBIjk9R dBcjAuLkcNP568RZR4hgVJhhFmer8Z0fLfAT2vYQq9GzyvOn7QvRNbBCUV+fAgMB AAGjggKGMIICgjAdBgNVHQ4EFgQUZuQqjQ5MAUel5wmYkaiDY+IHyE8wHwYDVR0j BBgwFoAUaXJ7lG2Hn1pS+1jyS01NEtWbLMIwDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcx ODA4Yi8xMC82OTcyN0I5NDZEODc5RjVBNTJGQjU4RjI0QjRENEQxMkQ1OUIyQ0My LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzJhZjczYTljLTIwNTgt NDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzY5NzI3Qjk0NkQ4NzlGNUE1MkZCNThG MjRCNEQ0RDEyRDU5QjJDQzIuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYB BQUHMAuGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi8xMC82OTcy N0I5NDZEODc5RjVBNTJGQjU4RjI0QjRENEQxMkQ1OUIyQ0MyLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA HvJ3GvXa08jTkhnlf/yiB6tTbPtsar2Zdn4sXspw/G0MgoAu5KEQmjuxHZHX7qBX SYtQG4meJEta3ISebXWqg0WgwSElEszO39Rr9K9pag902zmG5VVggh6wipHS3ZaC aV4+eBWUBDJtAOtNPxhO/KCtKjB/q0JjmNkS2I6Qp8GBX0U5CmLAv33LhMOuWcAU yTyZyY58dpfMunMCMx3N/J8iwYiUELwYCjKl+rGU9sCusiiiqXo3vq9b+xsISENN ZSlnDWH3H1jquOQyUAJT9pVpqgnvPKY2il/kpWOZT/QDxxOnHijOYnb50jz/faP3 SfnN97ie2V3Lq165qxsieg== -----END CERTIFICATE-----Generated at Wed May 13 04:26:55 2026 by rpki-client