$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: qjQfslXvGpQgbtGYz7GKgoNUqOZOdAvIIgQrdI0dyDo= Subject key identifier: E0:32:65:0E:83:30:EC:CF:77:1B:F0:61:E6:C8:A0:7D:58:6D:C3:D6 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 6C0108196E84D999CCC83A72196833FC342E7E8C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 040F Signing time: Tue 12 May 2026 18:43:38 +0000 Manifest this update: Tue 12 May 2026 18:38:38 +0000 Manifest next update: Wed 13 May 2026 20:18:38 +0000 Files and hashes: 1: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: MZmj1DdfJrBTBE1zTDaJZxfze0Q9xS0oHJi+jD3GPJ0=) 2: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: 2cf2+wXFX+Cv3rb6kyCpZO6NR2fDj483Pc3k7g3Nh48=) 3: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: Qox4t/JWvxkukGGw/r9dKtLNJfAFgS1CAD7Cjd/SiSQ=) 4: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: ZBQrTYQq6EzEXXQqVVLmnECxmx5vDStz1fI8gjrWa9o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 11:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:01:08:19:6e:84:d9:99:cc:c8:3a:72:19:68:33:fc:34:2e:7e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: May 12 18:38:38 2026 GMT Not After : May 13 20:18:38 2026 GMT Subject: CN=E032650E8330ECCF771BF061E6C8A07D586DC3D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a7:fe:bf:15:b7:4f:2a:76:8b:6c:88:84:89: 3c:e7:8d:ca:ab:a1:ae:61:1d:1c:1f:be:d2:94:76: 28:3c:7c:b8:23:62:c7:e3:0d:86:95:89:d5:31:ee: 34:ba:91:05:1f:33:95:66:f5:a6:06:a3:8d:96:98: fa:54:8c:ea:2e:14:cd:5e:cb:92:2d:68:40:d4:3d: c0:65:8b:32:d7:2d:36:8e:b1:a2:ec:88:d8:51:0a: 61:2d:28:13:49:fd:4a:a8:57:42:61:83:ea:c1:9f: 2c:28:0a:6c:ae:dc:28:68:86:ac:3e:87:44:19:32: 66:27:69:e1:45:7d:b1:2a:2c:1e:81:1b:e0:f0:66: 20:aa:15:37:0a:91:f1:6b:19:e2:42:7d:fa:cb:bb: 77:fe:f7:a1:6d:8e:93:de:c3:e8:77:07:c5:44:67: 2b:49:b9:8d:d2:54:e7:71:5a:f7:6b:41:b5:bf:5a: af:63:ba:34:6c:45:a6:7f:d9:46:7c:5e:74:ea:c8: b0:e1:20:fe:c4:93:f8:58:eb:dc:ce:4f:f5:71:86: 7d:58:22:d2:da:e1:af:02:0c:fb:48:af:9a:eb:74: 91:77:2a:c2:7a:83:d9:0b:76:2b:fd:05:8f:99:21: 1f:05:00:4b:0b:db:b3:15:a1:d4:93:99:98:41:bb: c7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:32:65:0E:83:30:EC:CF:77:1B:F0:61:E6:C8:A0:7D:58:6D:C3:D6 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:72:47:4f:2f:9b:52:4b:3a:de:76:98:22:7e:72:d8:8e:c2: a9:0a:a3:5f:bc:b7:69:15:46:f9:4c:ba:02:1b:9c:09:22:d1: 4a:fd:1f:c1:f6:71:29:ff:54:6a:a5:cd:10:59:0d:50:6a:ae: dc:82:09:a4:24:f3:5b:85:67:f8:97:31:6b:15:55:12:bc:e7: a9:8f:9e:81:35:9a:bd:dc:bc:9b:16:af:90:10:17:34:ac:30: 5b:68:7a:1b:a1:20:f6:9e:9a:ce:9f:05:be:6e:99:99:07:82: f7:8a:77:4a:95:16:9e:60:ac:7a:a7:2c:b4:74:8b:28:ed:4c: a3:0b:6e:87:54:a6:8e:af:46:d4:0d:ff:6c:1e:1e:20:f7:8c: b2:64:c3:b0:9e:ea:68:a9:58:71:8c:92:a0:08:a9:78:85:17: c6:db:db:8f:1c:90:f5:5e:ed:c2:49:12:41:33:18:1f:2e:c2: de:ae:33:5f:58:69:2b:d4:66:b8:c4:99:fa:51:42:84:2e:5e: bb:05:7b:f9:84:87:32:15:b8:44:ed:2c:12:94:55:cd:e3:f1: 1f:78:b1:44:10:03:33:a4:23:4d:27:4b:54:1f:8d:3e:d6:5b: 38:49:23:8c:64:26:de:00:b4:68:35:20:4f:1e:21:9f:19:a3: af:c8:b7:e9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbAEIGW6E2ZnMyDpyGWgz/DQufowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNjA1MTIxODM4MzhaFw0yNjA1MTMyMDE4MzhaMDMxMTAvBgNV BAMTKEUwMzI2NTBFODMzMEVDQ0Y3NzFCRjA2MUU2QzhBMDdENTg2REMzRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxp/6/FbdPKnaLbIiEiTznjcqr oa5hHRwfvtKUdig8fLgjYsfjDYaVidUx7jS6kQUfM5Vm9aYGo42WmPpUjOouFM1e y5ItaEDUPcBlizLXLTaOsaLsiNhRCmEtKBNJ/UqoV0Jhg+rBnywoCmyu3Chohqw+ h0QZMmYnaeFFfbEqLB6BG+DwZiCqFTcKkfFrGeJCffrLu3f+96FtjpPew+h3B8VE ZytJuY3SVOdxWvdrQbW/Wq9jujRsRaZ/2UZ8XnTqyLDhIP7Ek/hY69zOT/Vxhn1Y ItLa4a8CDPtIr5rrdJF3KsJ6g9kLdiv9BY+ZIR8FAEsL27MVodSTmZhBu8f3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU4DJlDoMw7M93G/Bh5sigfVhtw9YwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCyckdP L5tSSzredpgifnLYjsKpCqNfvLdpFUb5TLoCG5wJItFK/R/B9nEp/1Rqpc0QWQ1Q aq7cggmkJPNbhWf4lzFrFVUSvOepj56BNZq93LybFq+QEBc0rDBbaHoboSD2nprO nwW+bpmZB4L3indKlRaeYKx6pyy0dIso7UyjC26HVKaOr0bUDf9sHh4g94yyZMOw nupoqVhxjJKgCKl4hRfG29uPHJD1Xu3CSRJBMxgfLsLerjNfWGkr1Ga4xJn6UUKE Ll67BXv5hIcyFbhE7SwSlFXN4/EfeLFEEAMzpCNNJ0tUH40+1ls4SSOMZCbeALRo NSBPHiGfGaOvyLfp -----END CERTIFICATE-----Generated at Wed May 13 05:33:55 2026 by rpki-client