$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: 0hxBOriW8Wp4fV1FNMd6ATqh0i36Q/F6b6r5tr+rocs= Subject key identifier: B8:0B:D0:4E:AF:BC:0B:AE:FF:1D:AC:B2:D3:4E:D3:0A:E7:CC:95:25 Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 4C0CBA27474F66E39F89F164EC938D37B7EF51A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 01A0 Signing time: Tue 12 May 2026 18:58:38 +0000 Manifest this update: Tue 12 May 2026 18:53:38 +0000 Manifest next update: Wed 13 May 2026 20:14:38 +0000 Files and hashes: 1: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: ueWEB0QeGUNtkCjzqhnYjJB4mN1hRlyvYU8x95xsxNk=) 2: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:0c:ba:27:47:4f:66:e3:9f:89:f1:64:ec:93:8d:37:b7:ef:51:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: May 12 18:53:38 2026 GMT Not After : May 13 20:14:38 2026 GMT Subject: CN=B80BD04EAFBC0BAEFF1DACB2D34ED30AE7CC9525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f5:72:ad:78:e7:c8:aa:dc:92:a3:f5:d3:be: 0c:8f:f4:39:f5:4b:ef:62:82:14:7e:ae:d5:f5:75: 5e:16:b3:1e:f4:e3:cd:b9:92:4e:b7:10:e7:fd:78: c8:8e:42:a9:a5:e2:4b:fd:53:9e:07:f9:31:49:e6: ea:e6:8b:1d:d3:e5:63:42:32:15:31:35:16:95:ca: 62:27:21:8c:9f:50:4d:44:c3:a2:87:91:10:38:ed: 92:63:f7:16:4a:9e:cb:d3:f0:7f:cd:f1:fd:64:b0: e6:8b:a7:cc:e7:88:38:f4:c0:0a:b6:44:67:9d:bb: 72:d8:4d:8d:3f:98:c3:c1:d3:68:71:6b:bf:17:3d: 21:6b:7b:5a:77:ee:50:62:50:d5:57:5e:f9:a2:9b: da:e1:8e:a7:1d:f4:40:37:37:54:37:fd:03:27:c0: df:0f:8a:9c:96:77:18:98:13:b1:0d:d8:1a:77:44: bb:85:be:ef:01:3a:0b:23:13:cf:a8:4a:db:6c:8b: fc:95:e9:81:a5:13:eb:a0:ca:32:ce:0a:ec:2c:f7: 3a:0b:c0:e7:28:42:ad:02:30:91:5e:ea:9d:82:2f: 75:78:94:32:5a:e0:7a:6e:7c:e4:83:53:d3:b2:89: c6:be:ed:29:b3:60:81:3e:a5:ba:e6:8f:36:f7:8a: 4e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0B:D0:4E:AF:BC:0B:AE:FF:1D:AC:B2:D3:4E:D3:0A:E7:CC:95:25 X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f2:02:ad:f0:58:6b:9a:f0:e3:ff:f6:0e:6b:cd:b9:d2:1a: 71:6a:21:28:4f:6b:d2:ae:1d:26:a4:41:67:bb:0c:a8:dd:7c: 0d:93:ab:95:0a:87:bd:aa:da:ac:11:3a:6b:c7:3e:09:96:d4: 69:92:b3:e0:e5:46:69:4a:9e:d5:38:e6:e3:66:d9:2f:58:08: 83:c1:11:4b:ab:f7:77:26:12:ee:81:df:bf:1d:e8:e3:b5:85: af:bf:94:40:95:ee:b0:de:90:ce:bc:e2:34:73:5b:dc:97:62: 6a:7c:d5:c5:cf:08:32:3e:4d:62:f4:30:1b:3a:49:e6:92:d0: 44:5f:5b:60:df:b5:23:bb:aa:08:c9:30:f7:2f:4d:65:cc:e6: 5e:ac:ee:2a:11:d2:79:6c:35:dd:0d:c7:5c:d8:36:36:f0:81: 90:90:d0:e0:91:48:f2:e1:58:41:88:3a:a9:9b:bb:a6:af:37: fe:cd:f6:91:f1:93:12:be:67:59:9d:d9:13:b8:1a:a5:cc:29: f2:16:83:b2:cb:33:c2:b3:aa:04:ad:44:34:86:b4:c9:d7:bf: fb:4f:04:1e:5e:e1:0c:42:85:cd:9e:69:88:64:fd:38:d2:6c: 38:a7:55:45:0c:12:99:cf:d4:02:87:2a:83:6b:de:58:15:63: 27:c0:77:8f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTAy6J0dPZuOfifFk7JONN7fvUaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNjA1MTIxODUzMzhaFw0yNjA1MTMyMDE0MzhaMDMxMTAvBgNV BAMTKEI4MEJEMDRFQUZCQzBCQUVGRjFEQUNCMkQzNEVEMzBBRTdDQzk1MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC69XKteOfIqtySo/XTvgyP9Dn1 S+9ighR+rtX1dV4Wsx704825kk63EOf9eMiOQqml4kv9U54H+TFJ5urmix3T5WNC MhUxNRaVymInIYyfUE1Ew6KHkRA47ZJj9xZKnsvT8H/N8f1ksOaLp8zniDj0wAq2 RGedu3LYTY0/mMPB02hxa78XPSFre1p37lBiUNVXXvmim9rhjqcd9EA3N1Q3/QMn wN8PipyWdxiYE7EN2Bp3RLuFvu8BOgsjE8+oSttsi/yV6YGlE+ugyjLOCuws9zoL wOcoQq0CMJFe6p2CL3V4lDJa4HpufOSDU9Oyica+7SmzYIE+pbrmjzb3ik4rAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUuAvQTq+8C67/Hayy007TCufMlSUwHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBr8gKt 8FhrmvDj//YOa8250hpxaiEoT2vSrh0mpEFnuwyo3XwNk6uVCoe9qtqsETprxz4J ltRpkrPg5UZpSp7VOObjZtkvWAiDwRFLq/d3JhLugd+/HejjtYWvv5RAle6w3pDO vOI0c1vcl2JqfNXFzwgyPk1i9DAbOknmktBEX1tg37Uju6oIyTD3L01lzOZerO4q EdJ5bDXdDcdc2DY28IGQkNDgkUjy4VhBiDqpm7umrzf+zfaR8ZMSvmdZndkTuBql zCnyFoOyyzPCs6oErUQ0hrTJ17/7TwQeXuEMQoXNnmmIZP040mw4p1VFDBKZz9QC hyqDa95YFWMnwHeP -----END CERTIFICATE-----Generated at Wed May 13 01:39:17 2026 by rpki-client