$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft File: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft (raw, json) Hash identifier: D0Wl48FIbWHXcdmjqZEdSf7JdP07mOllsf8t2WNi04c= Subject key identifier: 16:CA:49:D3:8B:36:F6:09:8D:23:EC:BE:F8:6B:52:BD:42:55:5B:20 Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Certificate serial: 55676ADBA94277C59384B5C5F4E2A630635B4674 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft Manifest number: 37 Signing time: Tue 12 May 2026 10:03:59 +0000 Manifest this update: Tue 12 May 2026 09:58:59 +0000 Manifest next update: Wed 13 May 2026 13:05:59 +0000 Files and hashes: 1: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl (hash: OmUECKy+27S74kr7UTOzSphlgzRBHp0AVznyInOq2C0=) 2: 326131333a633863333a653866663a3a2f34382d313238203d3e20323133393030.roa (hash: w4ztKM2YHXn5pHZOkaCgsj+Q7c/anVV2bOT4TNgFFAQ=) 3: 3139352e3134342e32342e302f32342d3332203d3e20323130343634.roa (hash: HB9HGgTweFVtW/gslktXVB+L0d08UgCcpj9As8LURAo=) 4: AS213900.asa (hash: vZ4nFV2ZuxtxXZLEvZl+LEgTwQtkx6mKUShfFutxF0Q=) 5: 1E74494683D8D2A4E029AAD4573928D2A55FA411.cer (hash: +0hnNfLH+KrZUwBi9MoiQmog8aTbQil8ImCdFWYmrWQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 13:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:67:6a:db:a9:42:77:c5:93:84:b5:c5:f4:e2:a6:30:63:5b:46:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Validity Not Before: May 12 09:58:59 2026 GMT Not After : May 13 13:05:59 2026 GMT Subject: CN=16CA49D38B36F6098D23ECBEF86B52BD42555B20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:75:62:4b:43:e3:3f:b3:1f:2a:b2:83:2a: 62:d0:b6:a4:a1:e7:02:fd:73:58:d0:3a:5e:97:47: f6:66:52:e2:a9:99:ba:a0:1d:4b:67:3c:29:9c:9d: d4:3d:f8:47:2f:e8:e4:e2:46:ee:b9:e8:aa:ca:6a: e6:7a:f3:cf:ad:4f:bc:38:d0:84:ee:3c:50:66:8e: af:d4:ea:1d:e4:62:bd:36:ca:aa:9d:6a:7a:93:3d: da:71:2f:46:4f:72:d3:87:e2:e0:a3:46:8e:8f:0d: f1:ee:de:51:5c:28:7f:bf:20:df:9c:2f:59:df:56: 49:0d:e4:de:65:25:59:b0:6d:0d:db:16:26:f1:93: a5:ba:af:5d:d8:04:df:b2:06:f7:25:f5:28:16:4d: 26:33:36:d2:cc:d0:97:7c:f4:b0:70:f0:15:12:f4: e5:ea:c2:bb:c3:a1:26:e7:82:0d:a3:30:05:cf:5c: e8:12:e0:7f:79:87:04:66:28:0d:26:17:be:d2:f8: c7:d1:d3:c8:b4:33:ff:57:ce:0c:19:01:5a:c9:ea: b9:cd:13:23:05:ba:74:fc:33:c6:65:46:ed:6c:3c: 4e:54:4a:42:73:8f:7a:15:25:5a:57:70:e8:7a:52: a3:d4:53:ff:b4:7c:68:f1:b4:01:e0:a5:3a:15:0f: 1d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CA:49:D3:8B:36:F6:09:8D:23:EC:BE:F8:6B:52:BD:42:55:5B:20 X509v3 Authority Key Identifier: keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:72:7d:13:df:17:e2:74:22:4a:7b:4e:f5:86:ba:82:ea:6b: ea:dc:58:20:dd:1c:7e:07:a5:26:65:56:02:9d:7a:d5:70:00: 9c:cc:da:67:4c:05:bc:20:19:e9:f5:af:10:18:2a:c8:8c:73: 64:df:70:cc:05:64:f8:a7:2e:87:f2:90:cc:b5:1c:c6:1c:7b: 18:82:ca:91:8e:02:3a:4d:30:52:ce:d0:65:b5:0a:26:d9:65: 9a:16:ef:01:7a:91:b7:de:74:74:a5:2d:3f:0b:53:02:9f:a7: b5:c5:e0:8e:4c:ad:3d:16:c3:4a:96:a2:76:c5:93:4a:73:1a: 29:3c:24:f7:20:a7:43:c8:a9:8d:e4:82:77:0d:81:05:45:ad: 28:25:b5:59:7d:e9:07:d9:53:7c:99:f0:51:10:fe:ef:15:79: 20:e1:90:55:1e:b2:aa:83:e1:bc:0d:4a:9a:dc:a7:7e:04:6a: 81:e5:78:f6:33:30:1a:cb:d8:77:67:15:f1:0a:7c:b5:08:1c: 75:c2:b4:b5:1c:49:a3:f5:76:db:08:1d:87:52:23:bc:9d:c2: 4d:fd:59:62:98:98:ca:6a:d1:67:1b:fe:23:55:7c:89:12:aa: ba:68:aa:66:33:f8:fd:58:c4:6e:ac:8b:28:2d:29:ef:e2:f7: 42:d1:70:07 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVWdq26lCd8WThLXF9OKmMGNbRnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWNiNWRmZjhhNDVkZjVjZGFmYTJhOTVjNzE1ZjEwYzVm ZTVmOTFhMzAeFw0yNjA1MTIwOTU4NTlaFw0yNjA1MTMxMzA1NTlaMDMxMTAvBgNV BAMTKDE2Q0E0OUQzOEIzNkY2MDk4RDIzRUNCRUY4NkI1MkJENDI1NTVCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0u3ViS0PjP7MfKrKDKmLQtqSh 5wL9c1jQOl6XR/ZmUuKpmbqgHUtnPCmcndQ9+Ecv6OTiRu656KrKauZ688+tT7w4 0ITuPFBmjq/U6h3kYr02yqqdanqTPdpxL0ZPctOH4uCjRo6PDfHu3lFcKH+/IN+c L1nfVkkN5N5lJVmwbQ3bFibxk6W6r13YBN+yBvcl9SgWTSYzNtLM0Jd89LBw8BUS 9OXqwrvDoSbngg2jMAXPXOgS4H95hwRmKA0mF77S+MfR08i0M/9XzgwZAVrJ6rnN EyMFunT8M8ZlRu1sPE5USkJzj3oVJVpXcOh6UqPUU/+0fGjxtAHgpToVDx0PAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFspJ04s29gmNI+y++GtSvUJVWyAwHwYDVR0j BBgwFoAUrLXf+KRd9c2voqlccV8Qxf5fkaMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzQvQUNCNURGRjhBNDVERjVDREFGQTJBOTVDNzE1RjEwQzVGRTVGOTFBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JMWGYtS1JkOWMydm9xbGNjVjhReGY1 ZmthTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03 ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC9BQ0I1REZGOEE0NURGNUNEQUZB MkE5NUM3MTVGMTBDNUZFNUY5MUEzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnJ9E98X4nQiSntO9Ya6 gupr6txYIN0cfgelJmVWAp161XAAnMzaZ0wFvCAZ6fWvEBgqyIxzZN9wzAVk+Kcu h/KQzLUcxhx7GILKkY4COk0wUs7QZbUKJtllmhbvAXqRt950dKUtPwtTAp+ntcXg jkytPRbDSpaidsWTSnMaKTwk9yCnQ8ipjeSCdw2BBUWtKCW1WX3pB9lTfJnwURD+ 7xV5IOGQVR6yqoPhvA1KmtynfgRqgeV49jMwGsvYd2cV8Qp8tQgcdcK0tRxJo/V2 2wgdh1IjvJ3CTf1ZYpiYymrRZxv+I1V8iRKqumiqZjP4/VjEbqyLKC0p7+L3QtFw Bw== -----END CERTIFICATE-----Generated at Tue May 12 21:39:25 2026 by rpki-client