$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft File: 2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft (raw, json) Hash identifier: lphuPCgHQ+7iQnet7lwndyExv/TgXfMwrtIDiMFa9pc= Subject key identifier: 08:80:B3:F7:72:3E:5D:29:C3:0C:8B:B2:37:8F:BF:0B:FB:D5:AC:2A Authority key identifier: 20:09:C9:CB:05:33:3E:7A:D0:7D:65:1D:85:EA:5D:D7:FC:06:F4:B7 Certificate issuer: /CN=2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7 Certificate serial: 0223ACA1D877291DA3A546C48B24AE81B082B3CB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft Manifest number: 1F Signing time: Tue 12 May 2026 15:19:54 +0000 Manifest this update: Tue 12 May 2026 15:14:54 +0000 Manifest next update: Wed 13 May 2026 15:44:54 +0000 Files and hashes: 1: 2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl (hash: Dh535Y+95V9tQy9kMonKAAPoUZUYI6E4A9xCO0K+mXI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 15:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:23:ac:a1:d8:77:29:1d:a3:a5:46:c4:8b:24:ae:81:b0:82:b3:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7 Validity Not Before: May 12 15:14:54 2026 GMT Not After : May 13 15:44:54 2026 GMT Subject: CN=0880B3F7723E5D29C30C8BB2378FBF0BFBD5AC2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:ca:5a:2a:69:e8:b5:b3:db:74:ad:38:38: d4:94:bf:b7:4a:57:ff:29:ae:f2:b4:38:ed:f9:4b: 8b:bd:dd:28:6a:d4:3d:a1:66:a4:c5:87:25:2a:68: 2f:78:9d:11:9c:9e:61:ea:4d:13:9b:a3:55:87:42: 34:a4:27:5b:2d:04:51:12:6f:32:37:ef:d4:37:5b: 36:ab:89:71:de:ca:25:54:af:7f:3f:e3:89:cb:3a: 11:0a:33:b0:30:92:fa:a9:e1:62:5d:a3:29:97:bb: 0f:76:57:69:67:5f:4f:14:bf:41:d2:6e:f1:a3:15: 55:bf:52:a9:8c:04:86:fb:2a:2a:fa:7f:e3:57:1e: 47:d9:21:0a:d7:91:8c:7a:37:c0:c1:46:74:29:f4: 6b:8d:02:fe:22:25:90:76:84:7d:16:86:94:94:f0: b9:f1:86:88:90:5c:0f:dd:2a:6e:62:19:60:76:84: c5:17:06:0c:44:c3:79:ec:16:f0:09:b5:42:2e:bb: 36:7c:c2:50:b2:c3:ad:f3:bb:f5:7f:53:dd:23:a0: 14:c3:75:d3:d3:96:9a:8f:5e:80:a9:25:76:f4:d5: 5f:f6:ca:d2:f9:10:28:67:dd:69:13:1c:c9:f9:b7: 5c:14:2e:06:58:b5:c8:84:aa:52:70:d5:86:9b:52: 24:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:80:B3:F7:72:3E:5D:29:C3:0C:8B:B2:37:8F:BF:0B:FB:D5:AC:2A X509v3 Authority Key Identifier: keyid:20:09:C9:CB:05:33:3E:7A:D0:7D:65:1D:85:EA:5D:D7:FC:06:F4:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:53:4f:e0:a0:24:4c:25:dd:2c:b2:c3:af:88:cd:82:05:70: d3:e4:17:6e:32:d1:a8:47:ae:9c:42:1e:e7:a8:45:5d:56:a2: 11:58:3c:86:cc:42:70:61:f4:01:8e:f3:74:35:b4:1d:ea:af: a5:7b:bc:1c:c8:27:a2:85:37:c7:5a:de:df:a8:52:ba:f9:71: 19:39:6a:5d:7f:18:3c:d3:0d:c2:67:73:a6:be:c9:fb:b3:2c: 33:07:c1:df:0d:fe:82:72:02:c1:7b:1f:cd:b8:53:08:aa:05: 7e:d1:c0:89:6a:05:0d:a0:09:6d:c6:66:ba:e1:55:34:c3:dc: fb:b9:72:ce:82:80:19:1f:53:0f:6b:7c:2d:ab:b5:11:9d:b6: bd:89:c9:65:7f:23:50:3f:02:51:63:b3:a9:78:df:40:6f:a9: bb:ac:8a:a8:6a:7a:0e:ad:a6:9f:44:7c:11:92:96:81:03:5a: fc:07:b7:b4:ed:91:a3:70:7b:52:27:d1:82:2a:5e:10:7a:11: 47:97:2c:3f:e4:f6:cc:5d:10:a9:0b:34:fb:c8:5c:23:c1:b0: 54:f0:15:76:ff:5b:f5:12:38:46:53:56:30:15:c8:e7:df:ac: 63:e5:3f:fc:c1:e0:f3:0c:0b:1f:65:6c:b6:48:ec:7f:9f:8f: e1:65:7d:b1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUAiOsodh3KR2jpUbEiySugbCCs8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwOUM5Q0IwNTMzM0U3QUQwN0Q2NTFEODVFQTVERDdG QzA2RjRCNzAeFw0yNjA1MTIxNTE0NTRaFw0yNjA1MTMxNTQ0NTRaMDMxMTAvBgNV BAMTKDA4ODBCM0Y3NzIzRTVEMjlDMzBDOEJCMjM3OEZCRjBCRkJENUFDMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAMspaKmnotbPbdK04ONSUv7dK V/8prvK0OO35S4u93Shq1D2hZqTFhyUqaC94nRGcnmHqTRObo1WHQjSkJ1stBFES bzI379Q3WzariXHeyiVUr38/44nLOhEKM7Awkvqp4WJdoymXuw92V2lnX08Uv0HS bvGjFVW/UqmMBIb7Kir6f+NXHkfZIQrXkYx6N8DBRnQp9GuNAv4iJZB2hH0WhpSU 8LnxhoiQXA/dKm5iGWB2hMUXBgxEw3nsFvAJtUIuuzZ8wlCyw63zu/V/U90joBTD ddPTlpqPXoCpJXb01V/2ytL5EChn3WkTHMn5t1wULgZYtciEqlJw1YabUiRHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUCICz93I+XSnDDIuyN4+/C/vVrCowHwYDVR0j BBgwFoAUIAnJywUzPnrQfWUdhepd1/wG9LcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzc5YTc5MDMtMmVkYi00OGFkLWFiZWItZWUzOWE3OWY4 NTA3LzMvMjAwOUM5Q0IwNTMzM0U3QUQwN0Q2NTFEODVFQTVERDdGQzA2RjRCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNS8yMDA5QzlDQjA1MzMzRTdBRDA3RDY1MUQ4 NUVBNUREN0ZDMDZGNEI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzc3OWE3OTAzLTJlZGItNDhhZC1hYmViLWVlMzlhNzlmODUwNy8zLzIwMDlDOUNC MDUzMzNFN0FEMDdENjUxRDg1RUE1REQ3RkMwNkY0QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPU0/g oCRMJd0sssOviM2CBXDT5BduMtGoR66cQh7nqEVdVqIRWDyGzEJwYfQBjvN0NbQd 6q+le7wcyCeihTfHWt7fqFK6+XEZOWpdfxg80w3CZ3Omvsn7sywzB8HfDf6CcgLB ex/NuFMIqgV+0cCJagUNoAltxma64VU0w9z7uXLOgoAZH1MPa3wtq7URnba9icll fyNQPwJRY7OpeN9Ab6m7rIqoanoOraafRHwRkpaBA1r8B7e07ZGjcHtSJ9GCKl4Q ehFHlyw/5PbMXRCpCzT7yFwjwbBU8BV2/1v1EjhGU1YwFcjn36xj5T/8weDzDAsf ZWy2SOx/n4/hZX2x -----END CERTIFICATE-----Generated at Wed May 13 07:46:42 2026 by rpki-client