$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft File: 892C2C5990DF4D7045BB55A011F473261F0643F6.mft (raw, json) Hash identifier: pQJEaTWfFCQFf+6r8crmRjYkJxL0zQADuPWxTE4732A= Subject key identifier: 2D:B1:0C:86:BB:BC:BF:07:08:E8:D7:91:3E:4E:02:9A:A5:C1:5C:95 Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 Certificate issuer: /CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Certificate serial: 0F056C81EECF49B73C30DBEE228315914E415C80 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft Manifest number: 99 Signing time: Tue 12 May 2026 15:10:51 +0000 Manifest this update: Tue 12 May 2026 15:05:51 +0000 Manifest next update: Wed 13 May 2026 18:37:51 +0000 Files and hashes: 1: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: zvsXrWVsgBSXSyUjh+x5IMf/onv6HLNx12EoyFofF0E=) 2: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: YStl04IuWDei0D2oH+P/iOh9DAuPICnaprLiyMtF9EQ=) 3: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: hu2ypRUPAbYRtYy+M6vE/W8hAPWUPIin1Y9THyO12k8=) 4: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: zJsseoUx2WfsGKQLt6/5bb4va41JRgL/bMceecvpwjU=) 5: 326131343a373538313a366661303a3a2f34342d3438203d3e20323031393433.roa (hash: JBtcFivWNaxAMDtrHXjCq5obdYQeQd+Iuq7/0LpltBs=) 6: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: xJNDYcDRMGL3P/Oo1HJdC8ak3UBswnP71D60lUjKtOU=) 7: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: BopLEf/ZmGSLBYK/WoER81ANZkew9Ua3lUbCSl9Jp8M=) 8: 326131343a373538313a366666303a3a2f34342d3438203d3e20323035353932.roa (hash: tJECAkp2L4ouOi5S7tH2woZZkAUIydRlFynQO3qJTRU=) 9: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eEYD+/uvxh4zHSJ/ztOoyn4X0s3MJpPiWt8uJufCQxo=) 10: 326131343a373538313a366630303a3a2f34342d3438203d3e20323035353932.roa (hash: tGdxxPffiEkwkQ8zZYSEAsNxiyZw0E/Szbr/GF6Tp3w=) 11: 892C2C5990DF4D7045BB55A011F473261F0643F6.crl (hash: mZ+7gRGQO3bNzASBmEPByhSOBu8D3wBPyAUhf71sR0g=) 12: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: qRdEAnTHQewkn5xjFMDkvIHao/PLgA0XfOA580oQ+Wc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 18:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:05:6c:81:ee:cf:49:b7:3c:30:db:ee:22:83:15:91:4e:41:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Validity Not Before: May 12 15:05:51 2026 GMT Not After : May 13 18:37:51 2026 GMT Subject: CN=2DB10C86BBBCBF0708E8D7913E4E029AA5C15C95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:93:32:dc:8a:c3:eb:9f:b8:f5:1a:fd:82:75: e8:bc:45:b4:48:db:14:df:72:0b:f5:2e:8e:b6:74: 0e:98:5c:c2:b4:8c:27:21:5c:c4:0d:42:3d:d6:ec: 8a:b1:bf:b1:a8:cb:c2:80:db:6b:f2:40:ef:9e:8c: ef:b2:f7:77:6d:92:a4:10:aa:3e:43:92:09:58:8d: e4:87:3d:18:3f:1f:4d:2c:77:3a:6f:63:7c:27:87: 35:9f:74:e9:e0:1a:5f:02:df:5d:b0:f8:53:8c:3f: 83:e5:b6:c1:f6:fe:02:15:b0:4a:c3:d2:87:4e:7a: b8:ae:b7:b8:94:0d:94:de:a8:15:bd:60:ca:2b:74: 13:23:2b:7e:1f:c0:bd:58:ab:0e:5d:06:e9:19:6b: 25:b6:1e:e8:7c:88:5d:a1:90:fd:fc:2d:1e:fe:4a: a0:26:85:2a:cf:fb:58:69:d9:a0:00:3a:11:a9:29: 18:8f:15:a7:5d:00:65:15:1c:c0:e2:87:df:06:f8: 9b:2d:d8:41:9f:5a:64:96:f3:ea:7c:f0:97:fa:8e: 5f:b8:ac:05:16:01:b8:80:84:1e:24:14:22:0b:bf: d9:4b:13:d7:2c:fb:f2:71:d9:11:e7:99:2f:d6:ee: 03:2a:34:5a:db:e1:3a:f4:3b:99:77:6f:c4:e2:d3: a1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B1:0C:86:BB:BC:BF:07:08:E8:D7:91:3E:4E:02:9A:A5:C1:5C:95 X509v3 Authority Key Identifier: keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:e4:36:e6:7f:0c:4e:b4:7b:6e:5e:86:ce:03:cb:e8:28:ea: 0b:e7:2e:85:d7:a5:e9:c3:67:29:39:ab:8f:76:c6:3b:4f:e5: 41:04:6a:88:ff:c8:56:43:99:6a:03:f1:54:20:66:1b:5c:03: 13:a3:96:83:2d:6b:c9:bd:30:37:41:bf:e8:9f:de:d6:48:6b: 1f:5a:5d:df:6f:c3:a9:e3:e1:b1:25:ec:ca:89:f1:9b:f1:c9: bb:1d:22:99:82:e5:00:46:b5:79:07:20:08:30:78:48:da:24: aa:8d:9a:00:64:78:10:2f:1d:60:7c:7b:32:45:af:27:cd:63: 4d:c8:09:09:a9:22:b2:9a:4a:dc:31:ca:90:8f:43:0d:79:f8: ce:c1:0d:11:93:84:79:b8:d6:5a:78:bc:d7:93:7f:2b:f2:e6: d4:34:5d:c0:4b:31:f4:4c:81:7b:9b:4e:62:de:ee:c5:38:9d: 84:41:53:86:e3:08:72:b6:2a:11:03:b3:bd:00:63:56:2b:c6: 3d:ee:e9:7f:dd:47:67:4b:e0:a4:7f:d7:b7:e9:32:aa:08:9c: 9d:91:27:a1:0c:6e:54:bf:ab:93:17:a8:b5:1f:d9:1a:10:6b: 2d:81:9b:3d:96:c8:c3:cb:5f:69:63:16:79:e2:d2:2c:61:00: 7a:62:b5:2b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDwVsge7PSbc8MNvuIoMVkU5BXIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYx RjA2NDNGNjAeFw0yNjA1MTIxNTA1NTFaFw0yNjA1MTMxODM3NTFaMDMxMTAvBgNV BAMTKDJEQjEwQzg2QkJCQ0JGMDcwOEU4RDc5MTNFNEUwMjlBQTVDMTVDOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEkzLcisPrn7j1Gv2Cdei8RbRI 2xTfcgv1Lo62dA6YXMK0jCchXMQNQj3W7Iqxv7Goy8KA22vyQO+ejO+y93dtkqQQ qj5DkglYjeSHPRg/H00sdzpvY3wnhzWfdOngGl8C312w+FOMP4PltsH2/gIVsErD 0odOeriut7iUDZTeqBW9YMordBMjK34fwL1Yqw5dBukZayW2Huh8iF2hkP38LR7+ SqAmhSrP+1hp2aAAOhGpKRiPFaddAGUVHMDih98G+Jst2EGfWmSW8+p88Jf6jl+4 rAUWAbiAhB4kFCILv9lLE9cs+/Jx2RHnmS/W7gMqNFrb4Tr0O5l3b8Ti06HTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQULbEMhru8vwcI6NeRPk4CmqXBXJUwHwYDVR0j BBgwFoAUiSwsWZDfTXBFu1WgEfRzJh8GQ/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzFiZWRmNmMtY2M5MS00YmYwLTlkNmUtN2U5YjNjYjk5 MDVkLzEvODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYxRjA2NDNGNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTJDMkM1OTkwREY0RDcwNDVCQjU1QTAx MUY0NzMyNjFGMDY0M0Y2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxYmVkZjZjLWNjOTEtNGJmMC05ZDZlLTdlOWIzY2I5OTA1ZC8xLzg5MkMyQzU5 OTBERjRENzA0NUJCNTVBMDExRjQ3MzI2MUYwNjQzRjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC15Dbm fwxOtHtuXobOA8voKOoL5y6F16Xpw2cpOauPdsY7T+VBBGqI/8hWQ5lqA/FUIGYb XAMTo5aDLWvJvTA3Qb/on97WSGsfWl3fb8Op4+GxJezKifGb8cm7HSKZguUARrV5 ByAIMHhI2iSqjZoAZHgQLx1gfHsyRa8nzWNNyAkJqSKymkrcMcqQj0MNefjOwQ0R k4R5uNZaeLzXk38r8ubUNF3ASzH0TIF7m05i3u7FOJ2EQVOG4whytioRA7O9AGNW K8Y97ul/3UdnS+Ckf9e36TKqCJydkSehDG5Uv6uTF6i1H9kaEGstgZs9lsjDy19p YxZ54tIsYQB6YrUr -----END CERTIFICATE-----Generated at Wed May 13 08:17:00 2026 by rpki-client